Network policies can be set at which Snowflake levels? (Choose two.)

The correct answer is C. User E. Account. Snowflake network policies can be applied at the Account level (E) and the User level (C), allowing administrators to restrict which IP addresses can connect either globally across the entire Snowflake account or selectively for specific users (where a user-level policy…

Snowflake Account and Security

Question

Options

ARole
BSchema
CUser
DDatabase
EAccount
FTables

How the community answered

(59 responses)

A
8% (5)
B
3% (2)
C
71% (42)
D
3% (2)
F
14% (8)

Explanation

Snowflake network policies can be applied at the Account level (E) and the User level (C), allowing administrators to restrict which IP addresses can connect either globally across the entire Snowflake account or selectively for specific users (where a user-level policy overrides the account-level one). Roles (A), schemas (B), databases (D), and tables (F) are not supported attachment points for network policies - Snowflake's network policy scope is about controlling who can connect, not about database objects or permission structures like roles or schemas.

Memory tip: Think "CU later, bad IPs" - C=User, U sounds like account (E=Entire account). Network policies guard the door (connection layer), so they attach to the account or individual user, not to database objects inside the house.

Topics

#Network Policies#Account Security#Access Control#User Management

Community Discussion

No community discussion yet for this question.

Full COF-R02 Practice