Where can masking policies be applied in Snowflake?

• A. Masking policies can be applied to a table or view column
• B. Masking policies can be applied to a database or schema
• C. Masking policies can be applied to a network path
• D. Masking policies cannot be applied to any object

Answer: (A)

Masking policies control how sensitive data is revealed by targeting the data at the column level. They’re defined once and then attached to a specific column in a table or in a view. When a query runs, Snowflake evaluates the policy using the query context (such as the caller’s role) and returns either the real value, a redacted/masked value, or NULL, depending on the policy logic. Because of this, masking policies are inherently tied to a column, not to a database, schema, or other objects like network paths. You apply them by attaching the policy to a column in a table or a view, for example through an ALTER TABLE ... MODIFY COLUMN ... SET MASKING POLICY policy_name. This is why the correct interpretation is that masking policies can be applied to a table or view column.