Snowflake SnowPro Core Certification Study Guide

Chapter 9Security

THE SNOWPRO CORE EXAM TOPICS COVERED IN THIS CHAPTER INCLUDE THE FOLLOWING:

• 1.0 Domain: Account and Security
• 1.2 Outline security principles.
  • Multifactor Authentication (MFA)
  • Data Encryption
  • Network Security & Policies
  • Access Control
  • Federated Authentication
  • Single Sign-On (SSO)
• 1.3 Define the entities and roles that are used in Snowflake.
  • Outline how privileges can be granted and revoked
  • Explain Role Hierarchy and Privilege Inheritance
• 1.4 Explain the Security capabilities associated with each Snowflake edition.
  • Data masking
• 1.5 Outline Data Governance capabilities in Snowflake.
  • Data masking
  • External Tokenization
• 5.0 Domain: Snowflake Overview & Architecture
• 5.7 Outline Snowflake’s catalog and objects.
  • View Types
• 6.0 Domain: Storage and Protection
• 6.2 Outline Continuous Data Protection with Snowflake.
  • Date Encryption

Snowflake provides several features that enable security at various levels in the Snowflake software stack. Security in Snowflake is implemented starting from the data storage layer and applied at other levels such as authentication control, data access control or authorization, and finally, network-level controls to control access into your Snowflake instance. Since Snowflake is hosted exclusively on cloud platforms, those cloud providers’ software security and physical data center security provide additional security support. Figure 9.1 illustrates important security features provided by Snowflake at various layers. These ...