ARA-C01 Question #172: Real Exam Question with Answer & Explanation

Question

A company is using a Snowflake account in Azure. The account has SAML SSO set up using ADFS as a SCIM identity provider. To validate Private Link connectivity, an Architect performed the following steps: * Confirmed Private Link URLs are working by logging in with a username/password account * Verified DNS resolution by running nslookups against Private Link URLs * Validated connectivity using SnowCD * Disabled public access using a network policy set to use the company's IP address range However, the following error message is received when using SSO to log into the company account: IP XX.XXX.XX.XX is not allowed to access snowflake. Contact your local security administrator. What steps should the Architect take to resolve this error and ensure that the account is accessed using only Private Link? (Choose two.)

Options

• AAlter the Azure security integration to use the Private Link URLs.
• BAdd the IP address in the error message to the allowed list in the network policy.
• CGenerate a new SCIM access token using system$generate_scim_access_token and save it to
• DUpdate the configuration of the Azure AD SSO to use the Private Link URLs.
• EOpen a case with Snowflake Support to authorize the Private Link URLs' access to the account.