General Security Flashcards
What is used to encrypt data at rest
AES 256
Which Snowflake edition is PCI DSS compliant
Business Critical Edition
What does Tri-Secret Secure offer
Provides encryption keys for multiple layers of data security; available on business-critical edition
What are the three security items required in Tri-Secret Secure
- Snowflake encryption key
- Customer encryption key
- Customer creds with role based access
Which edition is re-encrypted annually
Enterprise Edition
Which edition has in memory encryption keys that are unique to each customer
Virtual Private Snowflake
Which edition dedicates each customer their one private dedicated virtual servers, load balancer, and metadata store
Virtual Private Snowflake
T/F by design snowflake privileges cannot be granted to a user, they can only be granted to a role
TRUE
Who can provide permission to EXECUTE_TASK
ACCOUNTADMIN
Column Level Security includes what two features
Dynamic Data Masking
External Tokenization
With column level security, when does masking occur
At query time
What kind of masking can be done
masked, partially masked, obfuscated, or tokenized data.
T/F you can create objects using a secondary role
False, CREATE statements come from the primary role only
