Snowflake SnowPro Advanced Administrator ADA-C02 Exam

Question 6 of 55

For Snowflake network policies, what will occur when the account_level and user_level network policies are both defined?

A.

The account_level policy will override the user_level policy.

B.

The user_level policy will override the account_level policy.

C.

The user_level network policies will not be supported.

D.

A network policy error will be generated with no definitions provided.

Question 7 of 55

What access control policy will be put into place when future grants are assigned to both database and schema objects?

A.

Database, privileges will take precedence over schema privileges.

B.

Schema privileges will take precedence over database privileges.

C.

An access policy combining both the database object and the schema object will be used, with the most permissive policy taking precedence.

D.

An access policy combining both the database object and the schema object will be used, with the most restrictive policy taking precedence.

Question 8 of 55

What roles can be used to create network policies within Snowflake accounts? (Choose three.)

A.

SYSADMIN

B.

SECURITYADMIN

C.

ACCOUNTADMIN

D.

ORGADMIN

E.

Any role with the global permission of CREATE NETWORK POLICY

F.

Any rote that owns the database where the network policy is created

Question 9 of 55

A user with the proper role issues the following commands when setting up and activating network policies:
Exam snowpro-advanced-administrator-ada-c02: Image 1

Exam snowpro-advanced-administrator-ada-c02: Image 1

Afterwards, user1 attempts to log in to Snowflake from IP address 3.3.3.10.
Will the login be successful?

A.

Yes, because 3.3.3.10 is found in the ALLOWED_IP_LIST of bar_policy.

B.

No, because 3.3.3.10 is found in the BLOCKED_IP_LIST of bar_policy.

C.

Yes, because 3.3.3.10 is found in the ALLOWED_IP_LIST of foo_policy.

D.

No, because 3.3.3.10 is not found in the ALLOWED_IP_LIST of foo_policy.

Question 10 of 55

Which tasks can be performed by the ORGADMIN role? (Choose three.)

A.

Create one or more accounts in the organization.

B.

View a list of all regions enabled for the organization.

C.

Create secure views on application tables within the organization.

D.

View usage information for all accounts in the organization.

E.

Perform zero-copy cloning on account data.

F.

Create a reader account to share data with another organization.