Snowflake Certification Practice Test

The ACCOUNTADMIN role should have which of the following enabled for security?

1. Password complexity requirements

2. Multi-factor authentication

3. Role-based access control

4. Automatic session timeouts

The correct answer is: Multi-factor authentication

The ACCOUNTADMIN role should have multi-factor authentication enabled for security because it is the highest privileged role within Snowflake. This role has extensive capabilities, including managing users, roles, and data access. By implementing multi-factor authentication, an additional layer of security is added beyond just the password. This decreases the likelihood of unauthorized access, ensuring that even if a password is compromised, an attacker would still be required to provide a second form of authentication to gain access to sensitive administrative functions. The use of multi-factor authentication is a best practice for protecting highly privileged accounts and is essential for safeguarding critical data and operations within Snowflake's environment. While password complexity requirements, role-based access control, and automatic session timeouts also contribute to enhancing security, they do not specifically address the need for additional authentication measures that are crucial for managing the ACCOUNTADMIN role effectively.