Snowflake COF-C02 Exam - Topic 3 Question 64 Discussion

Actual exam question for Snowflake's COF-C02 exam

Question #: 64
Topic #: 3

What happens when a network policy includes values that appear in both the allowed and blocked IP address list?

AThose IP addresses are allowed access to the Snowflake account as Snowflake applies the allowed IP address list first.

BThose IP addresses are denied access lei the Snowflake account as Snowflake applies the blocked IP address list first.

CSnowflake issues an alert message and adds the duplicate IP address values lo both 'he allowed and blocked IP address lists.

DSnowflake issues an error message and adds the duplicate IP address values to both the allowed and blocked IP address list

Show Suggested Answer

Suggested Answer: B

In Snowflake, when setting up a network policy that specifies both allowed and blocked IP address lists, if an IP address appears in both lists, access from that IP address will be denied. The reason is that Snowflake prioritizes security, and the presence of an IP address in the blocked list indicates it should not be allowed regardless of its presence in the allowed list. This ensures that access controls remain stringent and that any potentially unsafe IP addresses are not inadvertently permitted access.

References:

Snowflake Documentation: Network Policies

by Edna at Jan 05, 2026, 05:16 AM

Limited Time Offer

25%

Off

Get Premium COF-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Mitsue

4 days ago

D sounds like the most logical answer. Snowflake should handle the conflict with an error message.

upvoted 0 times

...

Sharmaine

9 days ago

I agree with B. Snowflake's security should prioritize the blocked list over the allowed list.

upvoted 0 times

...

Felicia

14 days ago

Option B seems correct. Snowflake should apply the blocked IP address list first to deny access.

upvoted 0 times

...

Reyes

19 days ago

I think it’s D because it mentions an error message, which sounds familiar from our practice questions.

upvoted 0 times

...

Graciela

25 days ago

I feel like there was something about alerts in the study materials, but I can't recall if it was C or D.

upvoted 0 times

...

Maryanne

30 days ago

I remember a similar question where the blocked list was prioritized, so maybe it's B?

upvoted 0 times

...

Franklyn

1 month ago

I think the allowed list takes precedence, so it might be A, but I'm not completely sure.

upvoted 0 times

...

Azalee

1 month ago

I think the key here is understanding Snowflake's policy prioritization. Based on my experience, option B is likely the correct answer, as Snowflake would probably prioritize the blocked IP address list over the allowed list.

upvoted 0 times

...

Barrie

2 months ago

I'm a bit confused by this question. It's not entirely clear to me how Snowflake would handle the conflicting IP address lists. I'll need to review the documentation or ask the instructor for clarification.

upvoted 0 times

...

Maybelle

2 months ago

Okay, let me break this down. If the IP addresses are in both lists, Snowflake must have a way to resolve the conflict. I'm guessing they apply the blocked list first, so option B seems like the right answer.

upvoted 0 times

...

Royal

2 months ago

Hmm, this is an interesting scenario. I'm leaning towards option B, since I would expect Snowflake to prioritize the blocked IP address list. But I'll double-check the details to make sure.

upvoted 0 times

...

Garry

2 months ago

I'm not sure about this one. The question seems a bit tricky, with the IP addresses appearing in both the allowed and blocked lists. I'll need to think through the logic carefully.

upvoted 0 times

...