Configure Network Policies and Private Connectivity SNOWPRO-ADVANCED-SECURITY-ENGINEER Practice Questions (Page 6)

Questions 26–28

1. 26foundation · easy

   After creating the VPC endpoint for AWS PrivateLink, what must you do in Snowflake to enable private connectivity?

   • AAssign a network policy to the VPC endpoint
   • BEnable the AWS PrivateLink feature in the Snowflake account
   • CChange the account's cloud provider to AWS
   • DCreate a new user for each private connection
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company has configured AWS PrivateLink for Snowflake. The VPC endpoint is created, and the Snowflake account is enabled. Users in the VPC can connect, but they notice that the connection is slow. They suspect traffic is going over the public internet. What should they check?

   • AVerify that the client is resolving the Snowflake hostname to the private IP of the VPC endpoint.
   • BCheck that the VPC endpoint is in the same availability zone as the EC2 instances.
   • CEnsure that the Snowflake account is in the same AWS region as the VPC.
   • DConfirm that the security group on the endpoint allows traffic from the VPC CIDR.
   Reveal Solution Discussion Select an answer first
3. 28foundation · easy

   A user is unable to connect to Snowflake, and the error indicates the IP address is not allowed. What is the most likely cause?

   • AThe user's IP is not in the allowed list of the network policy
   • BThe user is trying to connect from a different region
   • CThe Snowflake account is suspended
   • DThe user's password is incorrect
   Reveal Solution Discussion Select an answer first