DEA-C02 Data Governance Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Grant the role used for classification the USAGE privilege on the database and schema containing the table.

  Why this is correct

  To run Data Classification, the role must have USAGE privileges on the database and schema, as well as SELECT on the table. Without USAGE, the role cannot access the objects to perform the classification. This privilege is a prerequisite and is typically granted to the role that will execute the classification process. Therefore, this action is required.

• ✗

  Enable the ACCOUNTADMIN role to run the classification process.

  Why it's wrong here

  Although ACCOUNTADMIN has all privileges and can run classification, it is not a requirement. Any role with the necessary privileges (USAGE on database and schema, SELECT on table) can run classification. Using ACCOUNTADMIN is not mandatory and goes against the principle of least privilege. Thus, this is not a required action.

• ✗

  Set the CLASSIFICATION_PROFILE parameter on the table to enable automatic classification.

  Why it's wrong here

  There is no table-level parameter called CLASSIFICATION_PROFILE that enables automatic classification. Classification is performed by calling the SYSTEM$CLASSIFY function or using the UI, and it can be scheduled. The parameter does not exist. Therefore, this option is incorrect.

• ✓

  Grant the role used for classification the SELECT privilege on the table to be classified.

  Why this is correct

  Data Classification samples the data in the table, so the role executing the classification must have SELECT privilege on that table. Without SELECT, the classification cannot read the data and will fail. This is a fundamental requirement for any operation that analyzes table content. Thus, granting SELECT is necessary.

• ✗

  Create a custom classifier that defines the patterns for sensitive data before running classification.

  Why it's wrong here

  While custom classifiers can be used to enhance classification, they are not required to enable Data Classification. Snowflake provides native classifiers that can identify common sensitive data types out of the box. The question asks for required actions to enable classification, and creating a custom classifier is optional. Therefore, this is not a required action.