nerdexam
SnowflakeSnowflake

COF-C02 · Question #510

COF-C02 Question #510: Real Exam Question with Answer & Explanation

The correct answer is C: SECURITYADMIN or higher roles. In Snowflake, network policies define the allowed IP address ranges from which users can connect to Snowflake, enhancing security by restricting access based on network location. The creation and management of network policies require sufficient privileges. Specifically, a user w

Account Access and Security

Question

Who can create network policies within Snowflake? (Select TWO).

Options

  • ASYSADMIN only
  • BORCADMIN only
  • CSECURITYADMIN or higher roles
  • DA role with the CREATE NETWORK POLICY privilege
  • EA role with the CREATE SECURITY INTEGRATION privilege

Explanation

In Snowflake, network policies define the allowed IP address ranges from which users can connect to Snowflake, enhancing security by restricting access based on network location. The creation and management of network policies require sufficient privileges. Specifically, a user with the SECURITYADMIN role or any role with higher privileges, such as ACCOUNTADMIN, can create network policies. Additionally, a custom role can be granted the CREATE NETWORK POLICY privilege, enabling users assigned to that role to also create network policies. This approach allows for flexible and secure management of network access to Snowflake.

Topics

#Network Policies#Roles and Privileges#Security#Access Control

Community Discussion

No community discussion yet for this question.

Full COF-C02 PracticeBrowse All COF-C02 Questions