Data Collaboration — Sharing, Marketplace and Clean Rooms — Snowflake SnowPro Core practice questions

Which statement about Snowflake Native Apps is accurate?

1. The application executes in the provider's account and returns results to consumers
2. Native apps can contain data or logic, but never both in one distribution
3. Consumers must grant the provider ACCOUNTADMIN in their account to install an app
4. The application runs inside the consumer's account, so consumer data never leaves it

Answer: D — The application runs inside the consumer's account, so consumer data never leaves it

D) Correct — an installed native app runs in the consumer's account against the consumer's data, which is the core privacy property of the model. A) reverses the execution location. C) is wrong: installation uses an application role and requested privileges, not a handover of ACCOUNTADMIN. B) is wrong because apps commonly bundle both data and logic.

Which best describes a Clean Room in Snowflake?

1. An environment where parties run approved queries on joined data
2. A maintenance routine that purges unused tables and stale stages
3. An encryption key hierarchy used for customer-managed key setups
4. A network policy restricting account access to allowed IP address ranges

Answer: A — An environment where parties run approved queries on joined data

A) Correct — a Snowflake Data Clean Room lets collaborators analyze combined data under agreed policies without exposing each other's raw rows. B) Clean room refers to privacy, not housekeeping. C) Key hierarchies are a separate encryption topic. D) Network policies control connection sources.

Cross-region data sharing requires:

1. Nothing extra; a direct share works across any two regions
2. An on-premises proxy host relaying data between the accounts
3. A VPN tunnel established between the two Snowflake accounts
4. Replicating the database to the target region, then sharing

Answer: D — Replicating the database to the target region, then sharing

D) Correct — cross-region sharing requires replicating the database to a secondary account in that region and sharing from the replica. A) Direct shares work only within a region. B) No proxy host is involved. C) Sharing does not use customer VPN tunnels.

Failover groups (Business Critical+) provide:

1. Free storage for replicated databases in the secondary region
2. Coordinated replication and failover of grouped objects
3. Multi-factor authentication enforced for all account users
4. Multi-cluster warehouses that scale out under concurrency

Answer: B — Coordinated replication and failover of grouped objects

B) Correct — failover groups replicate a defined set of objects together and support coordinated failover and failback across regions or clouds. A) Replicated storage is still billed. C) MFA is an authentication control. D) Multi-cluster warehouses address concurrency, not disaster recovery.

A provider must make a dataset available to consumers in a different cloud region without the consumers managing anything. The MOST appropriate approach is:

1. Ask each consumer to create an account in the provider's region
2. Export the data to a public cloud bucket in each target region
3. Create a direct share and add the remote consumer accounts to it
4. Publish a listing and enable auto-fulfillment to the target regions

Answer: D — Publish a listing and enable auto-fulfillment to the target regions

D) Correct — listings support auto-fulfillment, which handles replicating the underlying data into the consumer's region transparently. A) shifts the burden onto consumers and defeats the requirement. C) fails because a direct share works only within a single region and cloud. B) abandons governed sharing for an unmanaged copy.

A provider revokes a consumer's access to a shared table. When does the consumer lose access to the data?

1. After the consumer's Time Travel retention on the shared database expires
2. Immediately, because the consumer never held a copy of the data
3. At the end of the current billing period for the share
4. Only after the provider drops and recreates the share object

Answer: B — Immediately, because the consumer never held a copy of the data

B) Correct — sharing is access by reference, so revoking the grant removes visibility right away with nothing left behind. A) is wrong because consumers do not hold Time Travel on shared data. C) invents a billing-linked delay. D) is unnecessary: revoking access to the share is sufficient.

A provider adds a secure view to a share, but the view's base table lives in a different database from the view. What additional step is required?

1. Grant REFERENCE_USAGE on the base table's database to the share
2. Move the base table into the same database as the secure view
3. Recreate the view as a materialized view over the base table
4. Add the base table itself to the share alongside the secure view

Answer: A — Grant REFERENCE_USAGE on the base table's database to the share

A) Correct — cross-database secure views require REFERENCE_USAGE on the referenced database to be granted to the share. B) works but is a disruptive schema change when a grant suffices. C) does not address the cross-database reference and reduces flexibility. D) defeats the purpose of the secure view by exposing the base data directly.

A Reader Account is created by:

1. The consumer, who provisions it inside their own Snowflake org
2. The provider, who also pays for the reader's compute usage
3. Snowflake support, on request from the sharing provider
4. Automatically, whenever a share targets a non-customer

Answer: B — The provider, who also pays for the reader's compute usage

B) Correct — a provider creates and owns a reader account to share with parties who have no Snowflake account, and absorbs its compute cost. A) A reader account holder is not a Snowflake customer. C) The provider creates it directly in Snowsight. D) Creation is an explicit action.

The Snowflake Marketplace is BEST described as:

1. A billing portal for reconciling credit consumption across accounts
2. A catalog where providers publish data, apps and services for consumers
3. A repository of Snowflake-authored SQL templates and sample scripts
4. An internal-only catalog restricted to accounts within a single organization

Answer: B — A catalog where providers publish data, apps and services for consumers

B) Correct — the Marketplace lets providers publish listings for datasets, native applications and services that any consumer account can discover. A) describes cost management features. C) describes documentation and Quickstart material, not the Marketplace. D) describes a private, organization-scoped sharing hub rather than the public Marketplace.

A provider wants to share data with a partner that has no Snowflake account and does not want one. The MOST appropriate mechanism is:

1. Publish a free Marketplace listing the partner can request access to
2. Add the partner's cloud storage account directly to the share definition
3. Unload the data to cloud storage the partner reads with its own tools
4. Create a reader account, which the provider creates and pays compute for

Answer: D — Create a reader account, which the provider creates and pays compute for

D) Correct — reader accounts exist exactly for consumers without their own Snowflake account, and the provider owns and pays for them. A) still requires the partner to have a Snowflake account to consume the listing. C) abandons live sharing and creates a copy the provider must maintain and secure. B) is not possible; shares target Snowflake accounts, not storage buckets.

Secure Data Sharing?

Share live data with other Snowflake accounts (or via reader accounts) WITHOUT copying. Provider grants Share; Consumer attaches DB.

Clean Rooms?

Compute on combined sensitive data from multiple parties WITHOUT raw access. Privacy-preserving analytics.

What is a reader account and who pays for it?

A reader account is a Snowflake account created and managed by a provider so that an organization without its own Snowflake account can consume a share. It is read-only, and the provider owns and pays for its compute usage.