Answer: Snowflake automatically encrypts data locally before copying the data to the cloud over an encrypted connection., Snowflake automatically rotates keys pairs regularly, using a hierarchical key model stored in a hardware security module.

The question asks about how Snowflake protects data throughout its lifecycle, requiring selection of two correct options. Option C is correct because Snowflake automatically encrypts data locally before uploading and uses encrypted connections (TLS) for data in transit, providing end-to-end protection. Option D is correct because Snowflake uses a hierarchical key model stored in HSMs and automatically rotates keys without user intervention, ensuring secure key management. Option A is incorrect as users don't need to encrypt data before uploading - Snowflake handles this automatically. Option B is incorrect because while Snowflake supports data masking, it's not automatic - users must configure policies. Option E is incorrect because users are not responsible for key management - Snowflake handles key rotation and encryption automatically.

Author: LeetQuiz Editorial Team