SnowPro Core Certification — Question 994

Who can activate and enforce a network policy for all users in a Snowflake account? (Choose two.)

Answer options

• A. A user with an USERADMIN or higher role
• B. A user with a SECURITYADMIN or higher role
• C. A role that has been granted the ATTACH POLICY privilege
• D. A role that has the NETWORK_POLICY account parameter set
• E. A role that has the OWNERSHIP of the network policy

Correct answer: B, C

Explanation

The correct answers are B and C because only users with the SECURITYADMIN role or higher can enforce network policies, and roles with the ATTACH POLICY privilege can also enforce these policies. The other options, while related to permissions, do not specifically provide the ability to activate and enforce network policies for all users.