COF-C03 Data Collaboration Practice Test 2 — 15 Questions

Question 1

A provider wants to share a table with a partner but must ensure the partner can query the data while the provider can continue to update it, and the partner must not be able to see any rows outside an approved region. The provider has created a secure view that filters by region and joins a lookup table. Which TWO grants must the provider include on the share for the consumer to query the secure view successfully? (Choose two.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

USAGE on the database and schema containing the lookup table.. To query a shared secure view, the consumer needs SELECT on the view, and because the view joins a lookup table, the share must also include USAGE on the database and schema containing that table. Granting SELECT on the base table or transferring ownership would break the region filter or the provider's control, so those privileges must be excluded.

Answer

SELECT on the underlying base table.

Answer

REFERENCES on the lookup table.

Answer

OWNERSHIP on the secure view.

Question 2

A provider has created a share and added a table. The consumer reports that they can see the shared database but cannot query the table. The provider verifies that the table is listed in the share. Which action should the provider take to resolve the issue?

Accepted Answer

Grant USAGE on the database and schema to the share.. A share must include USAGE privileges on the database and schema that contain the shared table. Without these, the consumer cannot query the table even if it appears in the share. The provider must grant USAGE on the database and schema to the share. This ensures the consumer has the necessary access path.

Answer

Add the database and schema to the share.

Answer

Grant SELECT on the table to the consumer's role.

Answer

Recreate the share and add the table again.

Question 3

A provider wants to share a secure view named sales_db.public.regional_summary with a consumer account. The view joins sales_db.public.orders with sales_db.public.customers and includes a WHERE clause that filters rows based on CURRENT_ACCOUNT(). The provider also wants to prevent the consumer from seeing the view definition or the underlying tables. Which two actions must the provider perform? (Choose two.)

Accepted Answer

Create the view as a secure view so its definition is hidden and its internal logic is protected.. Sharing a secure view requires the standard container grants (USAGE on database and schema) plus SELECT on the view itself. The view must be created as SECURE to hide its definition. Base table privileges are not granted to the consumer because the view executes with the owner's rights, and REFERENCES is irrelevant to view resolution. Adding the consumer account is necessary for consumption but is not one of the two actions that satisfy the hiding requirement.

Answer

Add the consumer account to the share using ALTER SHARE ... ADD ACCOUNT.

Answer

Grant REFERENCES on the base tables to the share so the view can be validated.

Answer

Grant SELECT on the base tables orders and customers to the share so the view can resolve.

Question 4

A provider wants to share data with a consumer account using a share. The provider has created the share and granted SELECT on a table to the share. Which TWO additional steps must the provider perform to complete the sharing setup? (Choose two.)

Accepted Answer

Add the table to the share using ALTER SHARE ... ADD TABLE.. To complete sharing, the provider must add the table to the share and add the consumer account to the share. Granting SELECT on the table is necessary but not sufficient. Adding the table makes it part of the share, and adding the account establishes the relationship. The consumer then creates a database from the share. Other options are either consumer-side actions or invalid commands.

Answer

Grant USAGE on the database and schema to the share.

Answer

Create a database from the share in the consumer account.

Answer

Grant the SHARE object the USAGE privilege on the consumer account.

Question 5

A data provider wants to share data with a consumer, but the consumer must not be able to re-share the data with others. Which Snowflake feature should the provider use?

Accepted Answer

A share that does not grant the consumer the ability to create shares.. Snowflake shares are read-only for consumers, and by default, consumers cannot re-share data. The provider does not need to take any special action beyond not granting re-share capabilities. The consumer can query the shared data but cannot create new shares from it unless explicitly allowed. This satisfies the requirement.

Answer

A share with the GRANT OPTION disabled.

Answer

Secure Data Sharing with a direct share.

Answer

A read-only database created from a share.

Question 6

A provider wants to expose a shared database to consumers and ensure that only specific consumer roles can query it, while also preventing consumers from seeing rows for regions they are not entitled to. Which two approaches should the provider use? (Choose two.)

Accepted Answer

Create a secure view in the share that filters rows using CURRENT_ACCOUNT() or a mapping table, and grant the view to the share instead of the base table.. Row-level entitlement in shared data is achieved by sharing secure views whose predicates evaluate in the consumer's context, typically using CURRENT_ACCOUNT() or a mapping table, while never granting the base tables. Sharing the view keeps the filter logic hidden and ensures each consumer account sees only its permitted rows.

Answer

Grant a database role to the share, then grant the base tables to that database role so consumers can apply their own row filters.

Answer

Grant USAGE on the database and schema to PUBLIC in the provider account so all consumers inherit the same filtered access.

Answer

Add the consumer accounts to the share and rely on the share's default row access policy to restrict rows automatically.

Question 7

A provider is setting up a share to a consumer. Which TWO privileges must be granted to the share to allow the consumer to query a table named SALES in the schema PUBLIC of database DB1? (Choose two.)

Accepted Answer

USAGE on schema PUBLIC. To allow a consumer to query a table in a share, the share must include USAGE on the database and USAGE on the schema containing the table. These privileges enable the consumer to navigate to the table. While SELECT on the table is also required, it is typically granted when the table is added to the share. The question focuses on the container privileges that are often forgotten.

Answer

SELECT on table SALES

Answer

CREATE TABLE on schema PUBLIC

Answer

SELECT on all tables in schema PUBLIC

Question 8

A Snowflake data provider creates a Reader Account for a consumer who does not have a Snowflake account. Who is responsible for the compute costs incurred by the queries executed within this Reader Account?

Accepted Answer

The provider, who is billed for all virtual warehouse usage within the Reader Account.. Reader accounts are a feature designed to allow providers to share data with organizations that are not yet Snowflake customers. Because the Reader Account is created and owned by the provider, the provider assumes all financial responsibility for the resources consumed. This includes the credits used by virtual warehouses within the Reader Account for querying the shared data.

Answer

The consumer, who is billed directly by Snowflake via a credit card registered to the Reader Account.

Answer

Snowflake, as part of the free tier benefits for new data consumers.

Answer

The cost is split equally between the provider and the consumer at the end of each billing cycle.

Question 9

Refer to the exhibit. A provider has executed these commands to prepare data for a consumer. What is the final mandatory step required before the consumer can access the 'campaign_stats' table?

Accepted Answer

The provider must execute: ALTER SHARE marketing_share ADD ACCOUNTS = <consumer_account_locator>;. After creating a share and granting the necessary object privileges (Database, Schema, and Table/View), the share must be associated with one or more consumer accounts. Without this step, the share exists in the provider account but is not visible or accessible to any external entity. The ALTER SHARE command is used to add the consumer's account to the share's distribution list.

Answer

The consumer must execute: CREATE DATABASE marketing_data FROM SHARE <provider_account>.marketing_share;

Answer

The provider must refresh the metadata of the 'marketing_share' object using the 'COMMIT SHARE' command.

Answer

The provider must grant the 'IMPORTED PRIVILEGES' role to the share for the campaign_stats table.

Question 10

A consumer has mounted a shared database named 'SALES_DATA_SHARED'. They need to add a new column to one of the tables in this database to store local annotations. Which statement best describes the outcome if they attempt this?

Accepted Answer

The operation will fail because shared databases are read-only for consumers.. Shared databases in Snowflake are strictly read-only for the consumer. The consumer cannot perform any Data Definition Language (DDL) operations like ALTER TABLE, nor any Data Manipulation Language (DML) operations like INSERT or UPDATE on the shared objects. This architecture ensures the integrity of the provider's data and maintains a single version of truth across all consumers.

Answer

The operation will succeed, but the changes will only be visible to the consumer's account.

Answer

The operation will succeed only if the provider has granted the 'MODIFY' privilege to the share.

Answer

The operation will fail unless the consumer is using the 'ACCOUNTADMIN' role.

Question 11

To publish a data listing on the Snowflake Marketplace and make it available to all Snowflake customers, which TWO requirements must the provider fulfill?

Accepted Answer

The provider must have a Business Profile that has been approved by Snowflake.. Publishing to the Snowflake Marketplace is a formal process that requires more than just technical setup. Providers must have a verified business profile to establish trust and must adhere to Snowflake's provider policies. These requirements ensure that the Marketplace remains a high-quality environment for data consumers and that providers are legitimate entities capable of supporting their data offerings.

Answer

The provider must use a Business Critical edition account or higher.

Answer

The provider must pay an annual Marketplace listing fee of $5,000.

Answer

The provider must share the data exclusively through the Marketplace and not through Direct Shares.

Question 12

Refer to the exhibit. Based on the JSON configuration for this Snowflake listing, who will be able to discover and access this data?

Accepted Answer

Only the specific accounts 'ORG_A.ACCOUNT_1' and 'ORG_B.ACCOUNT_2'.. The exhibit defines a Private Listing. Private listings are not visible in the public Snowflake Marketplace. Instead, they are only discoverable by the specific accounts listed in the 'target_accounts' array. This allows providers to use the Marketplace interface and management tools to share data with specific partners securely, without making the offering public to the entire Snowflake community.

Answer

Any Snowflake customer in the same region as the provider.

Answer

Only the users within the provider's own Snowflake account.

Answer

All accounts belonging to ORG_A and ORG_B, regardless of the individual account names.

Question 13

A provider wants to ensure that a Reader Account they created does not exceed a budget of 50 credits per month. What is the most effective way to implement this control?

Accepted Answer

Create a Resource Monitor in the provider account and assign it to the Reader Account.. Since the provider is responsible for the costs of a Reader Account, they must have tools to manage that expenditure. Resource Monitors are the standard Snowflake mechanism for this. A provider can create a resource monitor and associate it with the Reader Account (or the warehouses within it) to track credit usage and trigger actions like alerting or suspending the warehouse.

Answer

Set a hard limit on the 'READER_ACCOUNT_CREDITS' parameter in the provider account settings.

Answer

Ask the consumer to monitor their own usage and stop querying when they hit 50 credits.

Answer

The provider must manually drop the Reader Account once the 50-credit threshold is reached each month.

Question 14

An organization wants to create a 'Data Exchange' but only for its internal departments and a few selected vendors. They want to control who can join and what data is listed. Which Snowflake feature is best suited for this?

Accepted Answer

A Private Data Exchange.. A Snowflake Data Exchange (often referred to as a Private Exchange) is a private version of the Marketplace. It allows an organization to create its own curated data ecosystem. The organizer can invite specific members, approve or reject listings, and maintain strict governance over the collaboration environment, making it ideal for internal or closed-ecosystem sharing.

Answer

Snowflake Marketplace with Public Visibility.

Answer

Direct Sharing with a single 'Global Share' object.

Answer

Database Replication across all department accounts.

Question 15

A consumer has created a database from a share. They want to grant their 'ANALYST' role the ability to query the tables within this shared database. Which privilege should they grant to the role?

Accepted Answer

GRANT IMPORTED PRIVILEGES ON DATABASE <shared_db> TO ROLE ANALYST;. When a consumer mounts a share, the resulting database is special. To allow other roles in their account to use it, they use the 'IMPORTED PRIVILEGES' grant. This is a bulk grant that conveys the necessary permissions (like USAGE and SELECT) on all objects within the shared database to a local role, simplifying the permission management for the consumer.

Answer

GRANT SELECT ON ALL TABLES IN DATABASE <shared_db> TO ROLE ANALYST;

Answer

GRANT USAGE ON DATABASE <shared_db> TO ROLE ANALYST;

Answer

GRANT OWNERSHIP ON DATABASE <shared_db> TO ROLE ANALYST;