Snowflake encryption uses which approach?

• A. Automatic 256-bit AES encryption of data at rest and in transit; 128-bit or 256-bit AES encryption of all files staged for loading/unloading data.
• B. No encryption is applied to data at rest.
• C. Data in transit is encrypted with 512-bit AES.
• D. Staged files are encrypted with only 128-bit DES.

Answer: (A)

Snowflake protects data with encryption by default across all stages of storage and transfer. Data at rest is secured with AES-256, offering strong protection for the information stored in Snowflake. Data in transit—while moving between you and Snowflake—is encrypted using the security protocols that underlie TLS, which rely on modern encryption methods. For files staged for loading or unloading, encryption uses AES with 128-bit or 256-bit keys, depending on the context. This combination ensures that data remains protected both when stored and while being moved or prepared for loading/unloading.

The other statements miss or misstate these protections: there is encryption at rest, so saying none is false; 512-bit AES isn’t a standard, and DES is an outdated algorithm not used for staged files, so those options don’t fit.