Exam DEA-C02 Topic 1 Question 104 Discussion

Actual exam question for Snowflake's DEA-C02 exam
Question #: 104
Topic #: 1

A financial institution needs to mask sensitive customer data (PII) in a 'CUSTOMER' table. The table contains columns like 'CUSTOMER ID', 'FIRST NAME', 'LAST NAME', 'CREDIT CARD, and 'ADDRESS'. The data should be masked differently for different roles: 'ANALYST' role should see obfuscated values for names and addresses, while the 'SUPPORT' role should see the last four digits of the credit card and a hashed version of the address. The "CUSTOMER ID' should never be masked. Assume a central masking policy already exists called 'PII MASKING POLICY. Which of the following statements is the MOST efficient and secure way to achieve this?

A. Create multiple masking policies with different masking expressions and apply them directly to the columns based on the role using conditional expressions within the policies. Use 'CASE statements within the masking policy to differentiate between roles. B. Create a single masking policy with a complex stored procedure that checks the current role and applies different masking functions accordingly, then apply this policy to all sensitive columns. C. Create view for each role which applies masking functions to the columns. Grant SELECT access on those views to relevant roles. D. Create multiple masking policies, one for each role and sensitive column combination, each with the appropriate masking expression. Then, apply each masking policy individually to its respective column. Use the function to implement role-based masking within each policy. E. Create external functions to handle the complex masking logic and call them from the masking policy.

Suggested Answer: A Vote an answer

Option A is the most efficient and recommended approach. Using conditional expressions (CASE statements or similar logic with within a single masking policy allows you to manage different masking rules for different roles within a centralized policy. This avoids creating numerous policies and simplifies management. Option B is less efficient due to the overhead of calling a stored procedure for each row access. Option C using view is difficult to mantain and not scalable. Option D can lead to a proliferation of masking policies, making management cumbersome. Option E introduces external dependencies and potential latency.

by Geoff at Jul 02, 2026, 03:28 AM

Limited Time Offer

15%

Off

Get Premium DEA-C02 Questions as Interactive Self Test Engine or PDF

Comments

0 Happy Clients

0 Shares

0 Demo Downloads

10 Years in Business