Examice

Exam SnowPro Core All QuestionsBrowse all questions from this exam

Go to Exam

Question 464

What does Snowflake recommend regarding database object ownership? (Choose two.)

Create objects with ACCOUNTADMIN and do not reassign ownership.

Create objects with SYSADMIN.

Create objects with SECURITYADMIN to ease granting of privileges later.

Create objects with a custom role and grant this role to SYSADMIN.

Use only managed access schemas for objects owned by ACCOUNTADMIN.

Correct Answer: B, D

Snowflake recommends creating objects with SYSADMIN because it is the role that has the privileges to create warehouses and databases, amongst other objects. Additionally, creating objects with a custom role and granting this role to SYSADMIN ensures a flexible and manageable security setup, aligning with best practices for privilege delegation and role hierarchy.

Discussion

EmiBOptions: BD

B and D are correct

harshagc180Options: BD

B and D are correct SYSADMIN - Role that has privileges to create warehouses and databases (and other objects) in an account. If, as recommended, you create a role hierarchy that ultimately assigns all custom roles to the SYSADMIN role, this role also has the ability to grant privileges on warehouses, databases, and other objects to other roles. https://docs.snowflake.com/en/user-guide/security-access-control-overview.html

pvskbrodOptions: BD

Verified

MultiCloudIronManOptions: BD

Verified

Andywu213Options: BD

B&D seems correct