SnowPro Core Certification — Question 901

What happens when a network policy includes values that appear in both the allowed and blocked IP address lists?

Answer options

• A. Those IP addresses are allowed access to the Snowflake account as Snowflake applies the allowed IP address list first.
• B. Those IP addresses are denied access to the Snowflake account as Snowflake applies the blocked IP address list first.
• C. Snowflake issues an alert message and adds the duplicate IP address values to both the allowed and blocked IP address lists.
• D. Snowflake issues an error message and adds the duplicate IP address values to both the allowed and blocked IP address lists.

Correct answer: B

Explanation

The correct answer is B because Snowflake processes the blocked IP address list before the allowed one, leading to denial of access for any IP addresses that appear on both lists. Options A, C, and D are incorrect as they misrepresent Snowflake's handling of conflicting IP addresses, either allowing access or incorrectly indicating an alert or error message.