SnowPro Advanced: Architect — Question 187

An Architect is supporting an Internet Protocol Security (IPsec) team to facilitate the management of the user identities that will be used to set up an additional Snowflake environment. The Architect recommended setting up a corporate-wide user identity management system.

How can the impact of the new Snowflake environment be MINIMIZED?

Answer options

• A. Set up Multi-Factor Authentication (MFA) on both the Identity Provider (IdP) and Snowflake.
• B. Ensure that all account-level roles in Snowflake mirror the groups in the Identity Provider (IdP).
• C. Set up user provisioning and federated authentication between Snowflake and the Identity Provider (IdP) using Snowflake integrations.
• D. Create and manage user identities in Snowflake, using scripts to export user identities and authentication data required by the identity management system.

Correct answer: C

Explanation

The correct answer is C, as setting up user provisioning and federated authentication allows for streamlined management of user identities across both systems, minimizing the potential for configuration errors and security risks. Option A, while enhancing security, does not directly reduce the impact of the new environment. Option B may help with role alignment but does not address the integration of identity management. Option D adds complexity by managing identities separately rather than integrating them.