ADA-C01 Question 196
Single answerImplement and manage Trust CenterA Snowflake account administrator is preparing for an internal security audit. The auditors want a centralized, Snowflake-provided view of the account's security posture and configuration findings so they can review issues such as authentication, network, and access-related risks without building custom scripts. The administrator also needs a way to track remediation progress over time. Which approach should the administrator take?
- A
Enable and use Snowflake Trust Center to review posture findings and monitor remediation status for the account
- B
Query only ACCOUNT_USAGE views, because they provide the same curated security posture findings and remediation workflow as Trust Center
- C
Create a custom Resource Monitor and use its alerts to identify authentication and network security misconfigurations
- D
Rely on ORGADMIN to review organization billing and replication metadata, because these include account security posture assessments
- E
Use Snowsight object explorer to manually inspect users, roles, and network policies, because Trust Center does not provide centralized security findings
Show answer and explanation
Correct answer: A
Explanation
The best answer is to use Snowflake Trust Center. In a real audit scenario, administrators need a centralized way to assess security posture using Snowflake-provided checks rather than manually correlating settings across users, roles, authentication policies, and network configurations. Trust Center is designed for this use case: it surfaces posture-related findings and helps teams track remediation efforts over time. By contrast, ACCOUNT_USAGE supports custom reporting but does not provide the same curated security posture experience. Resource Monitors are for cost management, not security posture. Organization-level metadata and manual object inspection also do not meet the requirement for centralized, managed findings. This aligns with Snowflake best practices of using native administrative capabilities for security posture visibility and remediation management where available.
- A. Correct.
Correct. Trust Center is Snowflake's centralized experience for reviewing security posture and related findings for an account. It is intended to help administrators identify and track security-related issues and remediation progress using Snowflake-provided assessments rather than requiring them to build their own scripts or dashboards.
- B. Incorrect.
Incorrect. ACCOUNT_USAGE views are valuable for auditing and custom analysis, but they do not provide the same curated, built-in security posture findings experience and remediation tracking that Trust Center is designed to offer. A candidate might choose this option because ACCOUNT_USAGE is commonly used for governance reporting, but it is not a replacement for Trust Center.
- C. Incorrect.
Incorrect. Resource Monitors are used to control and notify on credit consumption, not to detect authentication, network, or access security misconfigurations. This distractor reflects a common confusion between operational cost controls and security posture management.
- D. Incorrect.
Incorrect. ORGADMIN is used for organization-level administration tasks, but billing and replication metadata do not constitute account security posture assessments. This option is plausible because ORGADMIN has broad visibility, yet it does not replace Trust Center's purpose-built security review capabilities.
- E. Incorrect.
Incorrect. Manual inspection in Snowsight can help an administrator review individual objects and settings, but it is inefficient and does not provide the centralized, Snowflake-curated posture findings and progress tracking requested by the auditors. This option reflects a manual approach rather than the best-practice managed capability.