Network policies can be set at which Snowflake levels? (Choose two.)
Network policies can be set at which Snowflake levels? (Choose two.)
Network policies in Snowflake can be set at the account and user levels. Account-level network policies apply to all users within the account, and user-level network policies apply to specific users. This allows for flexible and granular control over access to Snowflake resources, ensuring that specific network access requirements can be met.
Identifying a Network Policy Activated at the Account or User Level https://docs.snowflake.com/en/user-guide/network-policies.html#creating-network-policies
add'l info.. activate n/w policy at 'security integration' level also (per documentation)
C and E are Correct
Identifying a Network Policy Activated at the Account or User Level
You are correct. Network policies can be set at two levels in Snowflake: D. Database E. Account Here's why the other options are not valid: A. Role: Network policies are not set at the role level. Roles are used to control what users can do within Snowflake, but they don't define network access restrictions. B. Schema: Network policies are not set at the schema level. Schemas are used to organize Snowflake objects, but they don't define network access restrictions. C. User: Network policies are not set at the user level. Users are assigned roles, and the roles determine the network access permissions. F. Tables: Network policies are not set at the table level. Tables store data, and network policies control access to Snowflake itself, not individual tables.
C and E Network policy precedence You can apply a network policy to an account, a security integration, or a user. If there are network policies applied to more than one of these, the most specific network policy overrides more general network policies. The following summarizes the order of precedence: Account Network policies applied to an account are the most general network policies. They are overridden by network policies applied to a security integration or user. Security Integration Network policies applied to a security integration override network policies applied to the account, but are overridden by a network policy applied to a user. User Network policies applied to a user are the most specific network policies. They override both accounts and security integrations.
C and E are correct
Network policies can be set at the Account and Role levels in Snowflake. So the answer is D. Database and E. Account. Network policies are used to control access to Snowflake resources from specific IP addresses or network ranges. You can create network policies at the account or role level. Account-level network policies apply to all users in the account, while role-level network policies apply only to users who are assigned that role.