In a Snowflake network policy, what happens if an IP address appears in both the allowed and blocked lists?

The IP is allowed because allowed list takes precedence

The IP is allowed only if it is in the allowed list of the user-level policy

An error is raised and the policy cannot be created

The IP is blocked because blocked list takes precedence

What is the purpose of configuring DNS for private connectivity to Snowflake?

To resolve Snowflake's hostname to a private IP address instead of a public one

To speed up DNS resolution for all queries

To block public access to Snowflake

A Snowflake administrator is configuring a network policy with the following rules: ALLOWED_IP_LIST = ('192.0.2.10', '192.0.2.20') and BLOCKED_IP_LIST = ('192.0.2.20'). A user attempts to connect from IP 192.0.2.20. What will happen?

The connection is allowed because the IP is in the allowed list.

The connection fails with an error because an IP cannot be in both lists.

The connection is blocked because the IP is in the blocked list.

The connection is allowed because the allowed list takes precedence over the blocked list.

A company uses Snowflake on AWS and is considering moving to Azure. They currently use AWS PrivateLink for private connectivity. They want to maintain the same level of private connectivity after the migration. What should they plan for?

Create an Azure Private Link endpoint and configure the Snowflake account for Azure Private Link.

Set up a VPN from Azure to the AWS PrivateLink endpoint.

Continue using AWS PrivateLink from the Azure environment.

Use a network policy to restrict access to the Azure VNet IP range.

What is required on the Snowflake side to support Google Cloud Private Service Connect?

Create a Google Cloud service account

Enable Private Service Connect in the Snowflake account

Set up a VPC peering connection

Configure a firewall rule in Google Cloud

Snowflake SnowPro Advanced:Security Engineer

Domain 4Objective 3

Configure Network Policies and Private Connectivity SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 2)

Part of the Threat and Risk Management domain, which makes up ~27% of our current practice bank.

28questions here

6free pages

10concepts

Questions 6–10

6foundation · easy
In a Snowflake network policy, what happens if an IP address appears in both the allowed and blocked lists?
Select an answer first
7foundation · easy
What is the purpose of configuring DNS for private connectivity to Snowflake?
Select an answer first
8application · medium
A Snowflake administrator is configuring a network policy with the following rules: ALLOWED_IP_LIST = ('192.0.2.10', '192.0.2.20') and BLOCKED_IP_LIST = ('192.0.2.20'). A user attempts to connect from IP 192.0.2.20. What will happen?
Select an answer first
9expert · hard
A company uses Snowflake on AWS and is considering moving to Azure. They currently use AWS PrivateLink for private connectivity. They want to maintain the same level of private connectivity after the migration. What should they plan for?
Select an answer first
10foundation · easy
What is required on the Snowflake side to support Google Cloud Private Service Connect?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SNOWPRO-ADVANCED-SECURITY-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Snowflake. “SNOWPRO-ADVANCED-SECURITY-ENGINEER” is a trademark of its owner, used for identification only.