COF-C03 Data Collaboration Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  Grant the USAGE privilege on the share to a role in the consumer's account.

  Why it's wrong here

  The consumer does not grant privileges on the share itself. The share is an object in the provider's account. The consumer creates a database from the share and then grants privileges on that database to their roles. Granting USAGE on the share is not a valid operation for the consumer; shares are not directly grantable objects in the consumer's account.

• ✓

  Create a database from the share using the CREATE DATABASE ... FROM SHARE command.

  Why this is correct

  To access a share, the consumer must create a database from the share using CREATE DATABASE <name> FROM SHARE <provider_account>.<share_name>. This command creates a read-only database in the consumer's account that contains the shared objects. Once created, the consumer can grant privileges on the shared database to roles in their account and query the data.

• ✗

  Use the ALTER SHARE command to add the consumer's account to the share.

  Why it's wrong here

  The ALTER SHARE command is used by the provider to add or remove accounts from a share. The consumer cannot use ALTER SHARE to add themselves to a share. The provider must add the consumer's account to the share. Once added, the consumer can create a database from the share. This option incorrectly assigns the action to the consumer.

• ✗

  Request the provider to grant SELECT on the shared objects directly to the consumer's role.

  Why it's wrong here

  The provider cannot grant privileges directly to a role in the consumer's account. Privileges are granted to the share, and the consumer creates a database from the share. The consumer then manages access within their own account. Direct grants across accounts are not supported in Snowflake sharing.