Configure Network Policies and Private Connectivity SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary purpose of a Snowflake network policy?

   • ATo control which IP addresses can initiate connections to a Snowflake account
   • BTo define the geographic region where Snowflake stores data
   • CTo manage encryption keys used for data at rest in Snowflake
   • DTo restrict which databases a user can access within an account
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company uses Azure Private Link for Snowflake. The private endpoint is created and the Snowflake account is configured. Users on an on-premises network connect to Azure via ExpressRoute. They can reach other Azure services privately, but Snowflake connections still route over the public internet. What should the administrator check first?

   • ACheck that the Snowflake client is using the account URL with the 'privatelink' suffix.
   • BVerify that the private endpoint's DNS configuration is set to 'Private' and that the on-premises DNS server forwards Snowflake hostnames to Azure Private DNS.
   • CConfirm that the Snowflake account is in the same Azure region as the private endpoint.
   • DEnsure that the network security group (NSG) on the private endpoint subnet allows outbound traffic to Snowflake.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which DNS record type is typically used to map a Snowflake hostname to a private endpoint IP?

   • ACNAME record
   • BTXT record
   • CMX record
   • DA record
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   When troubleshooting a private connectivity issue, which of the following should you check first?

   • ADNS resolution of the Snowflake hostname
   • BThe Snowflake account's billing status
   • CThe version of the Snowflake client
   • DThe user's password
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A Snowflake administrator needs to temporarily block all external access to the account while performing maintenance. The account currently has a network policy named 'CORP_POLICY' that allows only the corporate IP range. The administrator wants to block all connections without deleting the existing policy. What should they do?

   • ADrop the CORP_POLICY network policy.
   • BSet the account's NETWORK_POLICY to 'NONE'.
   • CAlter CORP_POLICY to add 0.0.0.0/0 to the BLOCKED_IP_LIST.
   • DCreate a new network policy with an empty ALLOWED_IP_LIST and assign it to the account.
   Reveal Solution Discussion Select an answer first