SNOWPRO-ADV-ARCH Practice Test

SNOWPRO-ADV-ARCH practice test: what's covered

• Architecture
• Accounts and Security
• Data Engineering
• Performance
• Sharing
• Governance

Free SNOWPRO-ADV-ARCH sample questions

1. A Snowflake architect is validating accounts and security for SnowPro Advanced Architect and must design secure account and role architecture. Which response is the BEST fit?

   • A. Design role hierarchy and grants around job functions, ownership and least privilege
   • B. Grant ACCOUNTADMIN to analysts so they can unblock themselves
   • C. Use one shared role for every team and warehouse
   • D. Make application roles own all production objects without review
   Show answer

   Correct: A. Design role hierarchy and grants around job functions, ownership and least privilege is the best answer because Snowflake architecture requires role hierarchy, least privilege, network policy, authentication and object ownership design. The other choices do not fit the scenario: Grant ACCOUNTADMIN to analysts so they can unblock themselves addresses the wrong layer or timing, Use one shared role for every team and warehouse skips a required control, and Make application roles own all production objects without review would create avoidable operational or security risk.

2. During a production rollout, a snowflake architect needs to handle multiple business units sharing data with different access needs without weakening accounts and security. Which response is the BEST fit?

   • A. Use network policies, MFA or SSO integration where enterprise access control requires it
   • B. Use one shared role for every team and warehouse
   • C. Make application roles own all production objects without review
   • D. Rely on worksheet history as the only access evidence
   Show answer

   Correct: A. Use network policies, MFA or SSO integration where enterprise access control requires it is the best answer because Snowflake architecture requires role hierarchy, least privilege, network policy, authentication and object ownership design. The other choices do not fit the scenario: Use one shared role for every team and warehouse addresses the wrong layer or timing, Make application roles own all production objects without review skips a required control, and Rely on worksheet history as the only access evidence would create avoidable operational or security risk.

3. A review board asks for two actions that support design secure account and role architecture while reducing role sprawl or overprivileged warehouse and data access. Which TWO choices should the engineer select? (Choose TWO)

   • A. Design role hierarchy and grants around job functions, ownership and least privilege
   • B. Separate administrative, ownership and consumption roles to reduce blast radius
   • C. Grant ACCOUNTADMIN to analysts so they can unblock themselves
   • D. Rely on worksheet history as the only access evidence
   Show answer

   Correct: A and B. Design role hierarchy and grants around job functions, ownership and least privilege and Separate administrative, ownership and consumption roles to reduce blast radius are correct because Snowflake architecture requires role hierarchy, least privilege, network policy, authentication and object ownership design. The distractors do not satisfy the requirement: Grant ACCOUNTADMIN to analysts so they can unblock themselves is incomplete for this case, and Rely on worksheet history as the only access evidence solves a different problem or weakens the design.

4. An audit finding shows role sprawl or overprivileged warehouse and data access in accounts and security for a regulated production environment. Which response is the BEST fit?

   • A. Separate administrative, ownership and consumption roles to reduce blast radius
   • B. Make application roles own all production objects without review
   • C. Rely on worksheet history as the only access evidence
   • D. Grant ACCOUNTADMIN to analysts so they can unblock themselves
   Show answer

   Correct: A. Separate administrative, ownership and consumption roles to reduce blast radius is the best answer because Snowflake architecture requires role hierarchy, least privilege, network policy, authentication and object ownership design. The other choices do not fit the scenario: Make application roles own all production objects without review addresses the wrong layer or timing, Rely on worksheet history as the only access evidence skips a required control, and Grant ACCOUNTADMIN to analysts so they can unblock themselves would create avoidable operational or security risk.

5. A team is preparing a change window for accounts and security and needs defensible evidence for exam-style review. Which response is the BEST fit?

   • A. Review access history and grants as evidence for governance decisions
   • B. Rely on worksheet history as the only access evidence
   • C. Grant ACCOUNTADMIN to analysts so they can unblock themselves
   • D. Use one shared role for every team and warehouse
   Show answer

   Correct: A. Review access history and grants as evidence for governance decisions is the best answer because Snowflake architecture requires role hierarchy, least privilege, network policy, authentication and object ownership design. The other choices do not fit the scenario: Rely on worksheet history as the only access evidence addresses the wrong layer or timing, Grant ACCOUNTADMIN to analysts so they can unblock themselves skips a required control, and Use one shared role for every team and warehouse would create avoidable operational or security risk.

Last updated: 2026-10-19

SNOWPRO-ADV-ARCH practice test FAQ