Question 42

Explanation

✅ Network Policies

Explanation:

Network Policies in Snowflake control inbound access by allowing or blocking connections based on IP addresses. This is the best approach for enforcing strict network access controls, ensuring that only connections from the corporate network’s public IPs are permitted while blocking all others.

• Allows defining allowed and blocked IP lists → Ensures only corporate IPs can access Snowflake.

• Can be applied at the account or user level → Provides granular control over network access.

• Supports private connectivity configurations → Works alongside PrivateLink for enhanced security.

❌ Why the other options are incorrect?

Network Rules with egress filtering
→ Incorrect, because egress filtering controls outbound traffic, while the requirement is to restrict inbound access from unauthorized IPs.

External Access Integration
→ Incorrect, as External Access Integration is used for controlling outbound connections to external services, not for restricting inbound access.

Private Connectivity via PrivateLink
→ Incorrect, because PrivateLink provides private network access, but does not block public IP connections unless combined with Network Policies.

Account-level parameter ENABLE_PUBLIC_ACCESS = FALSE
→ Incorrect, because this parameter does not exist in Snowflake; network access control is managed via Network Policies.

For more details, check the official Snowflake documentation on Network Policies.