Exam SnowPro Core topic 1 question 169 discussion

Identifying a Network Policy Activated at the Account or User Level https://docs.snowflake.com/en/user-guide/network-policies.html#creating-network-policies

C and E are Correct

Identifying a Network Policy Activated at the Account or User Level

You are correct. Network policies can be set at two levels in Snowflake: D. Database E. Account Here's why the other options are not valid: A. Role: Network policies are not set at the role level. Roles are used to control what users can do within Snowflake, but they don't define network access restrictions. B. Schema: Network policies are not set at the schema level. Schemas are used to organize Snowflake objects, but they don't define network access restrictions. C. User: Network policies are not set at the user level. Users are assigned roles, and the roles determine the network access permissions. F. Tables: Network policies are not set at the table level. Tables store data, and network policies control access to Snowflake itself, not individual tables.

C and E Network policy precedence You can apply a network policy to an account, a security integration, or a user. If there are network policies applied to more than one of these, the most specific network policy overrides more general network policies. The following summarizes the order of precedence: Account Network policies applied to an account are the most general network policies. They are overridden by network policies applied to a security integration or user. Security Integration Network policies applied to a security integration override network policies applied to the account, but are overridden by a network policy applied to a user. User Network policies applied to a user are the most specific network policies. They override both accounts and security integrations.

C and E are correct

Network policies can be set at the Account and Role levels in Snowflake. So the answer is D. Database and E. Account. Network policies are used to control access to Snowflake resources from specific IP addresses or network ranges. You can create network policies at the account or role level. Account-level network policies apply to all users in the account, while role-level network policies apply only to users who are assigned that role.