SnowPro Advanced: Architect — Question 39

A company wants to deploy its Snowflake accounts inside its corporate network with no visibility on the internet. The company is using a VPN infrastructure and Virtual Desktop Infrastructure (VDI) for its Snowflake users. The company also wants to re-use the login credentials set up for the VDI to eliminate redundancy when managing logins.
What Snowflake functionality should be used to meet these requirements? (Choose two.)

Answer options

• A. Set up replication to allow users to connect from outside the company VPN.
• B. Provision a unique company Tri-Secret Secure key.
• C. Use private connectivity from a cloud provider.
• D. Set up SSO for federated authentication.
• E. Use a proxy Snowflake account outside the VPN, enabling client redirect for user logins.

Correct answer: C, D

Explanation

The correct answers, C and D, address the need for private connectivity and streamlined authentication, respectively. Option C provides a secure connection method that keeps data within the corporate network, while option D enables users to authenticate seamlessly using existing credentials. The other options either expose the environment to the internet or do not fulfill the requirement of reusing login credentials.