Configure Network Policies and Private Connectivity SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the first step in configuring Azure Private Link for Snowflake?

   • ACreate a private endpoint in your Azure VNet
   • BEnable Private Link in the Snowflake UI
   • CContact Snowflake support to approve the connection
   • DSet up a DNS zone for the private endpoint
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which AWS resource must be created to enable AWS PrivateLink for Snowflake?

   • AVPC Endpoint
   • BInternet Gateway
   • CVPN Connection
   • DNAT Gateway
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company uses Google Cloud and has configured Private Service Connect (PSC) for Snowflake. The service attachment is created and the Snowflake account is enabled. Users in a VPC can connect using the private IP, but users in an on-premises network connected via Cloud VPN cannot. What is the most likely reason?

   • AThe PSC endpoint is in a different Google Cloud region than the Snowflake account.
   • BThe on-premises DNS is not configured to resolve the Snowflake hostname to the PSC endpoint IP.
   • CThe Cloud VPN tunnel does not support Private Service Connect traffic.
   • DThe Snowflake account requires a separate PSC endpoint for on-premises connections.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company is evaluating private connectivity options for Snowflake. They use AWS and require that all traffic between their VPC and Snowflake stays within the AWS network, never traversing the public internet. They also need to support connections from multiple VPCs in the same region. Which approach meets these requirements?

   • ASet up a VPN connection from each VPC to Snowflake's public endpoint.
   • BUse a single VPC endpoint and share it across all VPCs using VPC peering.
   • CUse a Snowflake network policy to restrict access to the VPC's public IP addresses.
   • DConfigure AWS PrivateLink with a VPC endpoint in each VPC that needs access.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security auditor is reviewing Snowflake network policies and asks how they protect the account. Which statement accurately describes the scope of a Snowflake network policy?

   • AIt controls access to specific database objects within the Snowflake account.
   • BIt controls both inbound connections to Snowflake and outbound connections from Snowflake to external services.
   • CIt encrypts all traffic between the client and the Snowflake account.
   • DIt controls only inbound connections to the Snowflake account from client applications.
   Reveal Solution Discussion Select an answer first