COF-C03 Account Management and Data Governance Practice Question
An administrator wants to ensure that a specific role can only access Snowflake from the corporate office IP range. Which tool should they use?
⚠ Common exam trap
Candidates often think they can restrict access by role using IP addresses directly in the role definition. They miss that Network Policies are global or user-level objects, not role-level objects.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Network Policies.
Network Policies are the mechanism to restrict access by IP address. By creating a policy and applying it to a specific user or the entire account, administrators can ensure that connections only succeed from authorized locations. This is a foundational governance practice to protect against unauthorized access from external or insecure network locations, effectively creating a perimeter around the data platform.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Row Access Policies.
Why it's wrong here
Row Access Policies restrict access to specific rows in a table based on user attributes. They have no functionality related to network access or IP filtering. They are strictly for data-level filtering rather than connection-level security or perimeter defense for the Snowflake account.
- ✗
Granting specific network privileges.
Why it's wrong here
Snowflake does not have 'network privileges' that can be granted to roles. Access control is managed through the combination of Network Policies applied at the account or user level, not through individual grants on specific roles. This mechanism ensures network security is consistently applied regardless of user roles.
- ✓
Network Policies.
Why this is correct
Network Policies allow administrators to specify a list of IP addresses that are permitted (or blocked) from connecting to the Snowflake account. These policies can be applied globally or to specific users, providing a flexible and secure way to enforce location-based access controls.
- ✗
Setting a Session Policy.
Why it's wrong here
Session Policies control session timeouts and idle connection behavior. They are designed to manage active session lifecycles, such as how long a connection can stay open without activity, rather than restricting the origin network or IP address from where the user initially connects.
About these practice questions
This COF-C03 question is part of Courseiva's 280-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Snowflake exam blueprint
This COF-C03 practice question is part of Courseiva's free Snowflake certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the COF-C03 exam.