COF-C03 Data Collaboration Practice Question
A provider has created a share and added a table. The provider now wants to revoke access for a specific consumer account without affecting other consumers. Which command should the provider use?
⚠ Common exam trap
The trap here is using REVOKE or DROP commands that affect the entire share or all consumers, rather than the targeted ALTER SHARE ... REMOVE ACCOUNT command.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
ALTER SHARE my_share REMOVE ACCOUNT = consumer_account;
To revoke access for a specific consumer, the provider must remove that account from the share using ALTER SHARE ... REMOVE ACCOUNT. This action only affects the specified account and leaves other consumers unaffected. Dropping the share or revoking table privileges would impact all consumers, which is not desired. The correct command is precise and reversible if needed.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
DROP SHARE my_share;
Why it's wrong here
Dropping the entire share would revoke access for all consumers, not just the specific one. This is an extreme action that would disrupt other consumers and is not appropriate when only one consumer needs to be removed. The provider should use ALTER SHARE ... REMOVE ACCOUNT instead.
- ✓
ALTER SHARE my_share REMOVE ACCOUNT = consumer_account;
Why this is correct
The ALTER SHARE ... REMOVE ACCOUNT command is the correct way to revoke a consumer's access to a share. It removes the specified account from the share, immediately terminating their ability to access the shared data. This action does not affect other consumers who are still added to the share, making it the precise method for this scenario.
- ✗
REVOKE USAGE ON SHARE my_share FROM ACCOUNT consumer_account;
Why it's wrong here
This command is not valid syntax. To remove a consumer account from a share, you must use ALTER SHARE ... REMOVE ACCOUNT. The REVOKE USAGE ON SHARE command is used to revoke a role's access to a share within the same account, not to remove an external account. Using this would result in an error.
- ✗
REVOKE SELECT ON TABLE my_table FROM SHARE my_share;
Why it's wrong here
Revoking SELECT on the table from the share would remove the table from the share for all consumers, not just the specific account. This would break access for other consumers who still need the data. The correct approach is to remove the account from the share, leaving the share contents intact for others.
About these practice questions
One of 280 original COF-C03 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Snowflake exam blueprint
This COF-C03 practice question is part of Courseiva's free Snowflake certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the COF-C03 exam.