ADA-C01 Question 197
Single answerImplement and manage Trust CenterA Snowflake administrator is preparing for an external security review and wants to use Snowflake Trust Center to present the account's security posture to auditors. The auditors specifically need evidence that key security features are enabled and a concise view of configuration status without granting them direct access to the Snowflake account. Which action should the administrator take to best meet this requirement?
- A
Use Trust Center to review the account's security posture and share the Trust Center findings externally with auditors
- B
Grant the auditors the SECURITYADMIN role so they can validate all settings directly in Snowsight
- C
Create a custom dashboard from ACCOUNT_USAGE views because Trust Center cannot be used to communicate posture externally
- D
Enable Tri-Secret Secure and share the encryption key configuration as the primary proof of overall account security posture
Show answer and explanation
Correct answer: A
Explanation
The best answer is to use Snowflake Trust Center to review and externally share the account's security posture. Trust Center is intended to centralize visibility into an account's security configuration and help organizations communicate that posture to stakeholders such as auditors, compliance teams, and business partners. In this scenario, the administrator needs a concise, auditor-friendly view of enabled protections without provisioning direct Snowflake access. That aligns directly with Trust Center's purpose. By contrast, granting SECURITYADMIN is excessive and conflicts with least-privilege best practices. Building custom dashboards from usage views may be possible for internal reporting, but it is not the most appropriate or efficient solution when Trust Center is specifically available for this use case. Focusing only on Tri-Secret Secure is too narrow because auditors requested broader evidence of security feature enablement and configuration status. Snowflake documentation and security best practices emphasize centralized posture review, minimizing privileged access, and using purpose-built governance and security features when available.
- A. Correct.
Correct. Snowflake Trust Center is designed to help organizations assess and communicate their Snowflake security posture. It provides a centralized view of important security configurations and supports sharing relevant posture information externally, which fits the scenario of providing auditors with evidence without giving them direct account access.
- B. Incorrect.
Incorrect. Granting auditors a powerful administrative role such as SECURITYADMIN violates least-privilege principles and creates unnecessary risk. The scenario explicitly requires avoiding direct access to the Snowflake account. Trust Center is intended to help communicate posture without needing to expose administrative access.
- C. Incorrect.
Incorrect. While custom reporting from ACCOUNT_USAGE can help with internal analysis, this is not the best answer for the stated requirement. The scenario is specifically about using Snowflake Trust Center to present security posture to external auditors in a concise and purpose-built way. Saying Trust Center cannot be used for external communication is the misconception.
- D. Incorrect.
Incorrect. Tri-Secret Secure is only one specific security capability and is not the primary mechanism for summarizing overall account posture to auditors. Also, not every account uses Tri-Secret Secure. The requirement is for a broader review of enabled security features and configuration status, which is what Trust Center addresses.