COF-C03 Account Management and Data Governance Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Creating and managing virtual warehouses.

  Why it's wrong here

  Managing virtual warehouses is a responsibility of the SYSADMIN role or a dedicated warehouse administrator. The SECURITYADMIN role is specifically focused on identity and access management, not the operational side of compute resource provisioning or the monitoring of query execution performance within the account.

• ✓

  Managing access control, including users and roles.

  Why this is correct

  The SECURITYADMIN role is designed to handle all aspects of user and role management, including creating roles, granting them to users, and managing privileges. It is the primary vehicle for implementing the organization's security and access control policies in compliance with the principle of least privilege.

• ✗

  Granting ownership of data objects to users.

  Why it's wrong here

  While SECURITYADMIN can manage grants, it does not typically handle the ownership transfer of objects, which is primarily a function of the SYSADMIN role. SECURITYADMIN focuses on the security and permission layer, whereas SYSADMIN focuses on the lifecycle and administration of the data objects themselves.

• ✗

  Monitoring account-level credit consumption.

  Why it's wrong here

  Credit consumption monitoring is the responsibility of the ACCOUNTADMIN role, as it is a global account setting that relates to billing. The SECURITYADMIN role does not have the permissions required to view or modify billing-related configurations or resource monitors that control credit usage in the account.