Snowflake Certification Practice Test

Which roles does Snowflake suggest enabling MFA for? (select all that apply)

1. SECURITYADMIN

2. SYSADMIN

3. ACCOUNTADMIN

4. All of the above

The correct answer is: All of the above

Enabling Multi-Factor Authentication (MFA) for critical roles such as SECURITYADMIN, SYSADMIN, and ACCOUNTADMIN is a recommended security practice in Snowflake. Each of these roles has significant privileges and access to sensitive operations within the Snowflake environment. The SECURITYADMIN role is responsible for managing user access and security policies. Consequently, ensuring that this role employs MFA provides an additional layer of security, protecting access to potentially sensitive security configurations. Similarly, the SYSADMIN role has privileges over user and warehouse management, including the ability to create, modify, and drop resources. MFA helps secure this role against unauthorized access, which could lead to the unintended manipulation of resources and configurations. The ACCOUNTADMIN role holds the highest level of privileges in a Snowflake account, having complete control over all aspects of the account, including billing, user management, and resource allocation. Protecting this role with MFA is crucial to mitigating risks associated with high-level access. Given the level of authority and potential impact of each of these roles, Snowflake's guidance to enable MFA across all of them helps ensure a robust security posture against unauthorized access.