COF-C03 Data Collaboration Practice Question
A provider wants to share data with a consumer and ensure that the consumer can only read the data but cannot create any objects in the shared database. The provider has already created a share and granted USAGE on the database and schema, and SELECT on the table. What additional step, if any, is required to enforce read-only access?
⚠ Common exam trap
The trap here is believing that additional privileges or commands are needed to make a share read-only, but shares are always read-only for consumers, and the provider cannot grant write privileges on shared objects.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
No additional step is required; the consumer automatically has read-only access to shared databases.
Shared databases in Snowflake are read-only for consumers. The provider grants USAGE on the database and schema, and SELECT on objects, which are read-only privileges. Consumers cannot create or modify objects in a shared database. No additional configuration is needed to enforce read-only access because it is the default and only behavior for shares.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The provider must grant the CREATE privilege on the schema to the share to allow the consumer to create objects.
Why it's wrong here
Granting CREATE on the schema to the share would allow the consumer to create objects in the shared schema, which is the opposite of read-only access. The consumer's ability to create objects in a shared database is not supported; shared databases are read-only by design. This option is incorrect because it would violate the read-only requirement.
- ✓
No additional step is required; the consumer automatically has read-only access to shared databases.
Why this is correct
When a consumer creates a database from a share, they receive a read-only version of the shared objects. The consumer cannot create, modify, or drop objects in the shared database. The privileges granted by the provider are limited to USAGE and SELECT, which are read-only. Therefore, no additional step is needed to enforce read-only access; it is inherent to shared databases.
- ✗
The provider must set the share to read-only mode using the ALTER SHARE command.
Why it's wrong here
There is no ALTER SHARE command to set a share to read-only mode. Shares are inherently read-only for consumers. The provider cannot make a share writable. The concept of a read-only mode for shares does not exist in Snowflake. This option is incorrect because it describes a non-existent feature.
- ✗
The provider must revoke the USAGE privilege on the database from the share to prevent object creation.
Why it's wrong here
Revoking USAGE on the database from the share would prevent the consumer from accessing the database at all, including reading data. The provider wants the consumer to read data, so USAGE on the database is necessary. Revoking it would break the share. This option is incorrect because it removes necessary access.
About these practice questions
Courseiva writes every COF-C03 question from scratch — 280 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Snowflake exam blueprint
This COF-C03 practice question is part of Courseiva's free Snowflake certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the COF-C03 exam.