Snowflake SnowPro Core Practice Test 92
Question 910
For an original SnowPro Core educational scenario, consider: A team copies a full database to a partner's bucket every hour even though both parties use compatible Snowflake accounts in the same region. Select TWO complementary steps: the targeted correction and its strongest prechange validation.
- Change: Create and configure an authorized direct share with only intended database objects for the permitted consumer account.
- Change: Grant appropriate database, schema and object privileges to the share or grant a scoped database role to the share.
- Check: Review membership, listing access settings, user request flow and a nonmember denial test.
- Check: Compare share grants, authorized account identifiers and consumer database results after a controlled provider update.
- Give the partner INSERT access to the provider's source table through a direct share.
Explanation
Correct Answer
A:Snowflake Secure Data Sharing can expose provider-managed current data without copying it, and consumer access is read-only. Evidence: Compare share grants, authorized account identifiers and consumer database results after a controlled provider update.
D:Snowflake Secure Data Sharing can expose provider-managed current data without copying it, and consumer access is read-only. Required intervention: Create and configure an authorized direct share with only intended database objects for the permitted consumer account.
Incorrect Answers
B:Change: Grant appropriate database, schema and object privileges to the share or grant a scoped database role to the share. Snowflake Secure Data Sharing can expose provider-managed current data without copying it, and consumer access is read-only.
C:Check: Review membership, listing access settings, user request flow and a nonmember denial test. Snowflake Secure Data Sharing can expose provider-managed current data without copying it, and consumer access is read-only.
E:For this select two assessment, the shortcut changes or bypasses the necessary correctness, governance or operational boundary rather than correcting it. Snowflake Secure Data Sharing can expose provider-managed current data without copying it, and consumer access is read-only.
Question 911
A Snowflake engineer is examining this platform situation: A provider adds a table to a share but its consumer cannot query it because required database or schema usage grants are missing. A proposed shortcut is: Grant all privileges on every schema to PUBLIC to fix one share's missing SELECT. What should the Snowflake engineer recommend as the narrowly scoped correction? Select ONE best answer.
- Grant all privileges on every schema to PUBLIC to fix one share's missing SELECT.
- Create a database FROM SHARE and grant supported IMPORTED PRIVILEGES or shared database roles to designated consumer account roles.
- Grant appropriate database, schema and object privileges to the share or grant a scoped database role to the share.
- Use a supported Snowflake listing with appropriate discoverability, metadata, availability and consumer access controls.
Explanation
Correct Answer
C:Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns. Applied case: A provider adds a table to a share but its consumer cannot query it because required database or schema usage grants are missing.
Incorrect Answers
A:Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns. For this best change assessment, the shortcut changes or bypasses the necessary correctness, governance or operational boundary rather than correcting it.
B:Create a database FROM SHARE and grant supported IMPORTED PRIVILEGES or shared database roles to designated consumer account roles. Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
D:Use a supported Snowflake listing with appropriate discoverability, metadata, availability and consumer access controls. Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
Question 912
A Snowflake implementation review finds: A provider adds a table to a share but its consumer cannot query it because required database or schema usage grants are missing. The team proposes: Grant appropriate database, schema and object privileges to the share or grant a scoped database role to the share. Which platform principle most strongly supports the recommended response? Select ONE best answer.
- Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
- Provider control includes revocation; removing a consumer can invalidate access to its imported database without deleting the provider's source.
- Clean room collaboration is designed to support permitted analytics while controlling access to underlying participant data and query outputs.
- Sharing within a region differs from replicated fulfillment across geographic or cloud boundaries; data movement and control requirements apply.
Explanation
Correct Answer
A:Relevant validation before approval: Review SHOW GRANTS TO SHARE, database-role assignments and consumer-visible objects with a test account. Applied case: A provider adds a table to a share but its consumer cannot query it because required database or schema usage grants are missing.
Incorrect Answers
B:Provider control includes revocation; removing a consumer can invalidate access to its imported database without deleting the provider's source. Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
C:Clean room collaboration is designed to support permitted analytics while controlling access to underlying participant data and query outputs. Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
D:This option addresses a different Snowflake technical topic (Cross-region listing fulfillment) rather than the documented Share grants and database roles decision.
Question 913
The data platform team has not yet approved changes. Current evidence indicates: A provider adds a table to a share but its consumer cannot query it because required database or schema usage grants are missing. Which evidence best tests the technical diagnosis before approving a disruptive change? Select ONE best answer.
- Compare share grants, authorized account identifiers and consumer database results after a controlled provider update.
- Test CREATE DATABASE FROM SHARE, role access to a sample table and attempted writes.
- Compare share membership before and after removal, attempt a consumer query and inspect surviving provider data.
- Review SHOW GRANTS TO SHARE, database-role assignments and consumer-visible objects with a test account.
Explanation
Correct Answer
D:Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns. Confirm afterward that: Only intended objects are visible through the share and privilege gaps are resolved safely.
Incorrect Answers
A:Compare share grants, authorized account identifiers and consumer database results after a controlled provider update. Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
B:Test CREATE DATABASE FROM SHARE, role access to a sample table and attempted writes. Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
C:Compare share membership before and after removal, attempt a consumer query and inspect surviving provider data. Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
Question 914
A candidate correction has been tested and the platform team requires a post-change acceptance check. Original problem: A provider adds a table to a share but its consumer cannot query it because required database or schema usage grants are missing. The service owner needs positive and negative results and evidence that legitimate data workflows still function. Which acceptance result demonstrates correct platform behavior without disrupting authorized workflows? Select ONE best answer.
- Authorized analysts read the shared data while modifying the provider's source remains disallowed.
- Authorized members discover and consume the right products while outsiders cannot browse restricted data.
- Each partner receives only its authorized subset without revealing internal sensitive columns.
- Only intended objects are visible through the share and privilege gaps are resolved safely.
Explanation
Correct Answer
D:Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns. The result must be validated using the documented dataset or access context.
Incorrect Answers
A:Authorized analysts read the shared data while modifying the provider's source remains disallowed. Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
B:Authorized members discover and consume the right products while outsiders cannot browse restricted data. Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
C:Each partner receives only its authorized subset without revealing internal sensitive columns. Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
Question 915
An implementation sign-off request identifies the following problem: A provider adds a table to a share but its consumer cannot query it because required database or schema usage grants are missing. Which paired technical change and validation should close the implementation review? Select ONE best answer.
- Change: Grant appropriate database, schema and object privileges to the share or grant a scoped database role to the share. Verify: Review SHOW GRANTS TO SHARE, database-role assignments and consumer-visible objects with a test account.
- Change: Provision a governed reader account and share suitable data while monitoring the provider-funded compute and usage limits. Verify: Inspect reader account provisioning, attached shares, warehouse credit consumption and restrictions on write operations.
- Change: Create and configure an authorized direct share with only intended database objects for the permitted consumer account. Verify: Compare share grants, authorized account identifiers and consumer database results after a controlled provider update.
- Change: Evaluate a private Data Exchange or private listings with approved membership, governance and provider data scope. Verify: Review membership, listing access settings, user request flow and a nonmember denial test.
Explanation
Correct Answer
A:Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns. The change is successful only when: Only intended objects are visible through the share and privilege gaps are resolved safely.
Incorrect Answers
B:Change: Provision a governed reader account and share suitable data while monitoring the provider-funded compute and usage limits.
C:Change: Create and configure an authorized direct share with only intended database objects for the permitted consumer account.
D:Change: Evaluate a private Data Exchange or private listings with approved membership, governance and provider data scope.
Question 916
A Snowflake engineer is examining this platform situation: A provider wants different sets of shared objects for different subscriber roles and has not planned privilege segmentation. A proposed shortcut is: Grant all privileges on every schema to PUBLIC to fix one share's missing SELECT. What should the Snowflake engineer recommend as the narrowly scoped correction? Select ONE best answer.
- Grant all privileges on every schema to PUBLIC to fix one share's missing SELECT.
- Create and test suitable secure views with correct row and column projection plus consumer-specific filtering where supported.
- Evaluate an approved Snowflake clean room or governed collaboration workflow with restricted query templates, join controls and aggregate privacy requirements.
- Grant appropriate database, schema and object privileges to the share or grant a scoped database role to the share.
Explanation
Correct Answer
D:Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns. Applied case: A provider wants different sets of shared objects for different subscriber roles and has not planned privilege segmentation.
Incorrect Answers
A:Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns. Use this instead: Grant appropriate database, schema and object privileges to the share or grant a scoped database role to the share.
B:Create and test suitable secure views with correct row and column projection plus consumer-specific filtering where supported. Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
C:Evaluate an approved Snowflake clean room or governed collaboration workflow with restricted query templates, join controls and aggregate privacy requirements. Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
Question 917
A Snowflake implementation review finds: A provider wants different sets of shared objects for different subscriber roles and has not planned privilege segmentation. The team proposes: Grant appropriate database, schema and object privileges to the share or grant a scoped database role to the share. Which platform principle most strongly supports the recommended response? Select ONE best answer.
- Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
- Provider control includes revocation; removing a consumer can invalidate access to its imported database without deleting the provider's source.
- Imported shared databases are read-only and their access is managed through imported privileges or shared database-role grants.
- Snowflake Secure Data Sharing can expose provider-managed current data without copying it, and consumer access is read-only.
Explanation
Correct Answer
A:Relevant validation before approval: Review SHOW GRANTS TO SHARE, database-role assignments and consumer-visible objects with a test account. Applied case: A provider wants different sets of shared objects for different subscriber roles and has not planned privilege segmentation.
Incorrect Answers
B:Provider control includes revocation; removing a consumer can invalidate access to its imported database without deleting the provider's source. Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
C:Imported shared databases are read-only and their access is managed through imported privileges or shared database-role grants. Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
D:Snowflake Secure Data Sharing can expose provider-managed current data without copying it, and consumer access is read-only. Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
Question 918
The data platform team has not yet approved changes. Current evidence indicates: A provider wants different sets of shared objects for different subscriber roles and has not planned privilege segmentation. Which evidence best tests the technical diagnosis before approving a disruptive change? Select ONE best answer.
- Use representative simulated consumer context or controlled subscriber tests to verify row filters and column exposure.
- Review membership, listing access settings, user request flow and a nonmember denial test.
- Review SHOW GRANTS TO SHARE, database-role assignments and consumer-visible objects with a test account.
- Inspect allowed queries, match-key protections, minimum group thresholds and sample privacy-leakage tests.
Explanation
Correct Answer
C:Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns. This check tests the actual data, compute or access boundary before an operationally risky change.
Incorrect Answers
A:Use representative simulated consumer context or controlled subscriber tests to verify row filters and column exposure. Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
B:Review membership, listing access settings, user request flow and a nonmember denial test. Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
D:Inspect allowed queries, match-key protections, minimum group thresholds and sample privacy-leakage tests. Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
Question 919
A candidate correction has been tested and the platform team requires a post-change acceptance check. Original problem: A provider wants different sets of shared objects for different subscriber roles and has not planned privilege segmentation. The service owner needs positive and negative results and evidence that legitimate data workflows still function. Which acceptance result demonstrates correct platform behavior without disrupting authorized workflows? Select ONE best answer.
- Consumers see authorized current records while the provider controls membership and original data.
- The former subscriber loses access while authorized subscribers and the original dataset remain available.
- Only intended objects are visible through the share and privilege gaps are resolved safely.
- Authorized members discover and consume the right products while outsiders cannot browse restricted data.
Explanation
Correct Answer
C:Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns. The approved implementation step was: Grant appropriate database, schema and object privileges to the share or grant a scoped database role to the share.
Incorrect Answers
A:Consumers see authorized current records while the provider controls membership and original data. Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
B:The former subscriber loses access while authorized subscribers and the original dataset remain available. Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
D:Authorized members discover and consume the right products while outsiders cannot browse restricted data. A provider wants different sets of shared objects for different subscriber roles and has not planned privilege segmentation.
Question 920
For an original SnowPro Core educational scenario, consider: A provider wants different sets of shared objects for different subscriber roles and has not planned privilege segmentation. Select TWO complementary steps: the targeted correction and its strongest prechange validation.
- Change: Create and test suitable secure views with correct row and column projection plus consumer-specific filtering where supported.
- Check: Review SHOW GRANTS TO SHARE, database-role assignments and consumer-visible objects with a test account.
- Grant all privileges on every schema to PUBLIC to fix one share's missing SELECT.
- Check: Test CREATE DATABASE FROM SHARE, role access to a sample table and attempted writes.
- Change: Grant appropriate database, schema and object privileges to the share or grant a scoped database role to the share.
Explanation
Correct Answer
B:Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns. Acceptance: Only intended objects are visible through the share and privilege gaps are resolved safely.
E:Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns. Evidence: Review SHOW GRANTS TO SHARE, database-role assignments and consumer-visible objects with a test account.
Incorrect Answers
A:Change: Create and test suitable secure views with correct row and column projection plus consumer-specific filtering where supported. Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
C:For this select two assessment, the shortcut changes or bypasses the necessary correctness, governance or operational boundary rather than correcting it. Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.
D:Check: Test CREATE DATABASE FROM SHARE, role access to a sample table and attempted writes. Shared objects require valid provider-side grants and can be grouped through supported database-role sharing patterns.