SnowPro Core Certification — Question 1241

How is data protected in Snowflake throughout its lifecycle? (Choose two.)

Answer options

• A. Users are responsible for encrypting data before uploading to Snowflake.
• B. Snowflake automatically tags and masks Personal Identifiable Information (PII).
• C. Snowflake automatically encrypts data locally before copying the data to the cloud over an encrypted connection.
• D. Snowflake automatically rotates keys pairs regularly, using a hierarchical key model stored in a hardware security module.
• E. Users are responsible for uploading and configuring key pair rotation schedules and key sizes to encrypt stored data.

Correct answer: C, D

Explanation

Option C is correct because Snowflake encrypts data locally before it is sent to the cloud, ensuring security during transmission. Option D is also correct as it highlights Snowflake's practice of regularly rotating key pairs using a secure hierarchical model. Options A, B, and E are incorrect because they place the onus of key management and PII handling on users, which is not how Snowflake operates.