SnowPro Advanced: Administrator Real Exam Questions and Answers FREE ADA-C01 Updated on Feb 14, 2026 [Q46-Q70]

4/5 - (1 vote)

SnowPro Advanced: Administrator ADA-C01 Real Exam Questions and Answers FREE Updated on Feb 14, 2026

ADA-C01 Ultimate Study Guide – TestKingFree

Snowflake ADA-C01 Exam Syllabus Topics:

Topic	Details
Topic 1	Snowflake Security, Role-Based Access Control (RBAC), and User Administration: This section of the exam measures the skills of Snowflake Administrators and Cloud Security Engineers and covers authentication, access control, and network management in Snowflake. Candidates must understand how to configure authentication methods such as SSO, MFA, OAuth, and key-pair authentication, and how to manage network policies and private connectivity. The domain also tests knowledge of user and role management using SCIM, designing access control architecture, and applying the RBAC framework to ensure secure user authorization and data protection within Snowflake environments.
Topic 2	Account Management and Data Governance: This section of the exam measures the skills of Data Governance Managers and Database Administrators and covers account organization, access control, and regulatory data protection. Candidates will learn how to manage organizational accounts, encryption keys, and Tri-Secret Secure implementations. It focuses on applying best practices in ORGADMIN and ACCOUNTADMIN roles, implementing masking and row access policies, and performing data classification and tagging. The domain also emphasizes data auditing, account identifiers, and effective management of tables, views, and query operations to support enterprise-wide governance standards.
Topic 3	Performance Monitoring and Tuning: This section of the exam measures the skills of Cloud Infrastructure Engineers and Performance Analysts and focuses on optimizing Snowflake compute and storage resources. Candidates will need to understand how to configure and manage virtual warehouses, evaluate query profiles, and apply caching and clustering strategies for performance tuning. It also includes monitoring concurrency, resource utilization, and implementing cost optimization strategies. The ability to interpret, explain plans, apply search optimization, and manage cost controls is key for maintaining efficient Snowflake environments.
Topic 4	Data Sharing, Data Exchange, and Snowflake Marketplace: This section of the exam measures the skills of Data Integration Specialists and Data Platform Administrators and covers managing and implementing data-sharing solutions within Snowflake. It evaluates understanding of data sharing models across regions and clouds, secure data sharing methods, and managing provider-consumer relationships. The domain also includes the use of Snowflake Data Exchange and Marketplace to publish, consume, and manage data listings, ensuring secure collaboration and efficient data monetization.
Topic 5	Disaster Recovery, Backup, and Data Replication: This section of the exam measures the skills of Disaster Recovery Engineers and Cloud Operations Managers and covers Snowflake methods for ensuring business continuity. Candidates must understand how to replicate databases and account-level objects, implement failover strategies, and perform backup and restoration through Time Travel and Fail-safe features. The domain emphasizes replication across accounts, handling data consistency during failover, and applying cost-efficient disaster recovery strategies to maintain availability during outages or regional failures.

NO.46 A retailer uses a TRANSACTIONS table (100M rows, 1.2 TB) that has been clustered by the STORE_ID column (varchar(50)). The vast majority of analyses on this table are grouped by STORE_ID to look at store performance.
There are 1000 stores operated by the retailer but most sales come from only 20 stores. The Administrator notes that most queries are currently experiencing poor pruning, with large amounts of bytes processed by even simple queries.
Why is this occurring?

The STORE_ID should be numeric.

The table is not big enough to take advantage of the clustering key.

Sales across stores are not uniformly distributed.

The cardinality of the stores to transaction count ratio is too low to use the STORE_ID as a clustering key.

NO.47 A team of developers created a new schema for a new project. The developers are assigned the role DEV_TEAM which was set up using the following statements:
USE ROLE SECURITYADMIN;
CREATE ROLE DEV TEAM;
GRANT USAGE, CREATE SCHEMA ON DATABASE DEV_DB01 TO ROLE DEV_TEAM;
GRANT USAGE ON WAREHOUSE DEV_WH TO ROLE DEV_TEAM;
Each team member’s access is set up using the following statements:
USE ROLE SECURITYADMIN;
CREATE ROLE JDOE_PROFILE;
CREATE USER JDOE LOGIN NAME = ‘JDOE’ DEFAULT_ROLE=’JDOE_PROFILE’;
GRANT ROLE JDOE_PROFILE TO USER JDOE;
GRANT ROLE DEV_TEAM TO ROLE JDOE_PROFILE;
New tables created by any of the developers are not accessible by the team as a whole.
How can an Administrator address this problem?

Assign ownership privilege to DEV_TEAM on the newly-created schema.

Assign usage privilege on the virtual warehouse DEV_WH to the role JDOE_PROFILE.

Set up future grants on the newly-created schemas.

Set up the new schema as a managed-access schema.

NO.48 Which command can temporarily disable Multi-factor Authentication (MFA) for the Snowflake username user1 for 24 hours?

alter user userl set MINS_TO_BYPASS_MFA=1440;

alter user userl set DISABLE_MFA=1440;

alter user userl set TEMPORARY_MFA_BYPASS=1440;

alter user userl set HOURS_TO_BYPASS_MFA=24;

NO.49 A Snowflake Administrator created a role ROLE_MANAGED_ACCESS and a schema SCHEMA_MANAGED_ACCESS as follows:
USE ROLE SECURITYADMIN;
CREATE ROLE ROLE_MANAGED_ACCESS;
GRANT ROLE ROLE_MANAGED_ACCESS TO ROLE SYSADMIN;
GRANT USAGE ON WAREHOUSE COMPUTE_WH TO ROLE ROLE_MANAGED_ACCESS;
GRANT ALL privileges ON DATABASE WORK TO ROLE ROLE_MANAGED_ACCESS;
USE ROLE ROLE_MANAGED_ACCESS;
CREATE SCHEMA SCHEMA_MANAGED_ACCESS WITH MANAGED ACCESS;
USE ROLE SECURITYADMIN;
GRANT SELECT, INSERT ON FUTURE TABLES IN SCHEMA SCHEMA MANAGED ACCESS to ROLE_MANAGED_ACCESS; The Administrator now wants to disable the managed access on the schema.
How can this be accomplished?

ALTER SCHEMA SCHEMA MANAGED ACCESS DISABLE MANAGED ACCESS;

USE ROLE ROLE MANAGED_ACCESS;
DROP SCHEMA WORK. SCHEMA_MANAGED_ACCESS;
CREATE SCHEMA SCHEMA_MANAGED_ACCESS;
Then recreate all needed objects.

REVOKE SELECT, INSERT ON FUTURE TABLES IN SCHEMA SCHEMA_MANAGED_ACCESS FROM ROLE_MANAGED_ACCESS; ALTER SCHEMA SCHEMA MANAGED ACCESS DISABLE MANAGED ACCESS;

USE ROLE ROLE_MANAGED_ACCESS;
DROP SCHEMA WORK. SCHEMA MANAGED_ACCESS;
CREATE SCHEMA SCHEMA_MANAGED_ACCESS WITHOUT MANAGED ACCESS;
Then recreate all needed objects.

NO.50 What access control policy will be put into place when future grants are assigned to both database and schema objects?

Database privileges will take precedence over schema privileges.

Schema privileges will take precedence over database privileges.

An access policy combining both the database object and the schema object will be used, with the most permissive policy taking precedence.

An access policy combining both the database object and the schema object will be used, with the most restrictive policy taking precedence.

NO.51 In general, the monthly billing for database replication is proportional to which variables? (Select TWO).

The frequency of changes to the primary database as a result of data loading or DML operations

The amount of table data in the primary database that changes as a result of data loading or DML operations

The frequency of the secondary database refreshes from the primary database

The number of times data moves across regions and/or cloud service providers between the primary and secondary database accounts

The number and size of warehouses defined in the primary account

NO.52 An Administrator has a user who needs to be able to suspend and resume a task based on the current virtual warehouse load, but this user should not be able to modify the task or start a new run.
What privileges should be granted to the user to meet these requirements? (Select TWO).

OWNERSHIP on the task

OWNERSHIP on the database and schema containing the task

USAGE on the database and schema containing the task

OPERATE on the task

EXECUTE TASK on the task

NO.53 An Administrator wants to delegate the administration of a company’s data exchange to users who do not have access to the ACCOUNTADMIN role.
How can this requirement be met?

Grant imported privileges on data exchange EXCHANGE_NAME to ROLE_NAME;

Grant modify on data exchange EXCHANGE_NAME to ROLE_NAME;

Grant ownership on data exchange EXCHANGE_NAME to ROLE NAME;

Grant usage on data exchange EXCHANGE_NAME to ROLE_NAME;

NO.54 What are benefits of using Snowflake organizations? (Select TWO).

Administrators can change Snowflake account editions on-demand based on need.

Administrators can monitor and understand usage across all accounts in the organization.

Administrators can simplify data movement across all accounts within the organization.

User administration is simplified across all accounts within the organization.

Administrators have the ability to create accounts in any available cloud provider or region.

NO.55 Which command can temporarily disable Multi-factor Authentication (MFA) for the Snowflake username user1 for 24 hours?

alter user userl set MINS_TO_BYPASS_MFA=1440;

alter user userl set DISABLE_MFA=1440;

alter user userl set TEMPORARY_MFA_BYPASS=1440;

alter user userl set HOURS_TO_BYPASS_MFA=24;

NO.56 Which commands can be performed by a user with the ORGADMIN role but not the ACCOUNTADMIN role? (Select TWO).

SHOW REGIONS;

SHOW USERS;

SHOW ORGANIZATION ACCOUNTS;

GRANT ROLE ORGADMIN TO USER <username>;

SELECT SYSTEM$GLOBAL_ACCOUNT_SET_PARAMETER (

NO.57 If the query matches the definition, will Snowflake always dynamically rewrite the query to use a materialized view?

No, because joins are not supported by materialized views.

No, because the optimizer might decide against it.

No, because the materialized view may not be up-to-date.

Yes, because materialized views are always faster.

NO.58 What are characteristics of Dynamic Data Masking? (Select TWO).

A masking policy that is currently set on a table can be dropped.

A single masking policy can be applied to columns in different tables.

A masking policy can be applied to the VALUE column of an external table.

The role that creates the masking policy will always see unmasked data in query results.

A single masking policy can be applied to columns with different data types.

NO.59 A Snowflake account is configured with SCIM provisioning for user accounts and has bi-directional synchronization for user identities. An Administrator with access to SECURITYADMIN uses the Snowflake UI to create a user by issuing the following commands:
use role USERADMIN;
create or replace role DEVELOPER_ROLE;
create user PTORRES PASSWORD = ‘hello world!’ MUST_CHANGE_PASSWORD = FALSE default_role = DEVELOPER_ROLE; The new user named PTORRES successfully logs in, but sees a default role of PUBLIC in the web UI. When attempted, the following command fails:
use DEVELOPER_ROLE;
Why does this command fail?

The DEVELOPER_ROLE needs to be granted to SYSADMIN before user PTORRES will be able to use the role.

The new role can only take effect after USERADMIN has logged out.

USERADMIN needs to explicitly grant the DEVELOPER_ROLE to the new USER.

The new role will only take effect once the identity provider has synchronized by way of SCIM with the Snowflake account.

NO.60 When does auto-suspend occur for a multi-cluster virtual warehouse?

When there has been no activity on any cluster for the specified period of time.

After a specified period of time when an additional cluster has started on the maximum number of clusters specified for a warehouse.

When the minimum number of clusters is running and there is no activity for the specified period of time.

Auto-suspend does not apply for multi-cluster warehouses.

NO.61 A data provider wants to share data from multiple databases with a data consumer account.
How can this be accomplished?

The data provider needs to create a secure view and grant the USAGE privilege on each database referenced by the secure view.

The data provider needs to create a secure view and grant the REFERENCE_USAGE privilege on each database referenced by the secure view.

The data provider needs to create a secure view and grant the REFERENCE_USAGE privilege to a database role to include objects from multiple databases in a share

The data provider needs to create a secure view and must grant the REFERENCE_USAGE privilege on the database where the secure view is created.

NO.62 A Snowflake account is configured with SCIM provisioning for user accounts and has bi-directional synchronization for user identities. An Administrator with access to SECURITYADMIN uses the Snowflake UI to create a user by issuing the following commands:
use role USERADMIN;
create or replace role DEVELOPER_ROLE;
create user PTORRES PASSWORD = ‘hello world!’ MUST_CHANGE_PASSWORD = FALSE default_role = DEVELOPER_ROLE; The new user named PTORRES successfully logs in, but sees a default role of PUBLIC in the web UI. When attempted, the following command fails:
use DEVELOPER_ROLE;
Why does this command fail?

The DEVELOPER_ROLE needs to be granted to SYSADMIN before user PTORRES will be able to use the role.

The new role can only take effect after USERADMIN has logged out.

USERADMIN needs to explicitly grant the DEVELOPER_ROLE to the new USER.

The new role will only take effect once the identity provider has synchronized by way of SCIM with the Snowflake account.

NO.63 An Administrator has been asked to support the company’s application team need to build a loyalty program for its customers. The customer table contains Personal Identifiable Information (PII), and the application team’s role is DEVELOPER.
CREATE TABLE customer_data (
customer_first_name string,
customer_last_name string,
customer_address string,
customer_email string,
… some other columns,
);
The application team would like to access the customer data, but the email field must be obfuscated.
How can the Administrator protect the sensitive information, while maintaining the usability of the data?

Create a view on the customer_data table to eliminate the email column by omitting it from the SELECT clause. Grant the role DEVELOPER access to the view.

Create a separate table for all the non-Pll columns and grant the role DEVELOPER access to the new table.

Use the CURRENT_ROLE and CURRENT_USER context functions to integrate with a secure view and filter the sensitive data.

Use the CURRENT_ROLE context function to integrate with a masking policy on the fields that contain sensitive data.

NO.64 Which masking policy will mask a column whenever it is queried through a view owned by a role named MASKED_VIEW_ROLE?

create or replace masking policy maskstring as (val string) returns string -> case when is_role_in_session (‘MASKED_VIEW_ROLE’) then ‘ ** else val end;
*,

create or replace masking policy maskString as (val string) returns string -> case when array_contains (‘MASKED_VIEW_ROLE’ :: variant, parse_json (current_available_roles ())) then
‘*
else val
end;
** ‘

create or replace masking policy maskstring as (val string) returns string -> case when invoker_role() in (‘MASKED_VIEW_ROLE’) then else val end;
‘ **

create or replace masking policy maskString as (val string) returns string -> case when current_role() in (‘MASKED_VIEW_ROLE’) then ‘ ********* ‘ else val end;

NO.65 What are the requirements when creating a new account within an organization in Snowflake? (Select TWO).

The account requires at least one ORGADMIN role within one of the organization’s accounts.

The account name is immutable and cannot be changed.

The account name must be specified when the account is created.

The account name must be unique among all Snowflake customers.

The account name must be unique within the organization.

NO.66 Review the output of the SHOW statement below which displays the current grants on the table DB1. S1. T1:

This statement is executed:
USE ROLE ACCOUNTADMIN;
DROP ROLE A;
What will occur?

The table object DB1. S1. T1 will be dropped.

The OWNERSHIP privilege on table DB1. S1. T1 will be transferred to the ACCOUNTADMIN role.

The SELECT privilege on table DB1. S1. T1 to role B will be shown as GRANTED_BY the role ACCOUNTADMIN.

The SELECT privileges for roles B and C will remain.

NO.67 What is a characteristic of Snowflake’s transaction locking and concurrency modeling?

A deadlock cannot occur in Snowflake, since concurrently executed queries and DML statements do not block one another.

If two queries are concurrently executed against the same table, one of the two queries will be blocked until the other query completes.

Transaction locking in Snowflake is enforced exclusively at the row and table levels.

Queries executed within a given transaction see that transaction’s uncommitted changes.

NO.68 DatabaseA has a single schema called Schema1. This schema contains many tables and views. The ANALYST role has privileges to select from all objects in Database A. Schema1.
The SYSADMIN role clones DatabaseA to DatabaseA_clone.
What privileges does the ANALYST role have on tables and views in DatabaseA_clone? (Select TWO).

USAGE on the schema DatabaseA clone

USAGE on the database DatabaseA_clone. Schemal

SELECT on all tables, and only non-secure views in DatabaseA_clone. Schemal

SELECT on all tables, and only secure views in DatabaseA_clone. Schemal

SELECT on all tables and views in DatabaseA_clone. Schema1

NO.69 What roles can be used to create network policies within Snowflake accounts? (Select THREE).

SYSADMIN

SECURITYADMIN

ACCOUNTADMIN

ORGADMIN

Any role with the global permission of CREATE NETWORK POLICY

Any role that owns the database where the network policy is created

NO.70 A company has set up a new Snowflake account. An Identity Provider (IdP) has been configured for both Single Sign-On (SSO) and SCIM provisioning.
What maintenance is required to ensure that the SCIM provisioning process continues to operate without errors?

The IdP service account requires a new RSA key pair to be generated every six months.

The Administrator must issue a POST RENEW call to the REST API at least once every six months.

The OAuth Bearer Tokens have a lifespan of six months and must be regenerated prior to expiration.

The IdP Administrator must issue a REFRESH transaction at least once every six months to synchronize all users and roles.

Ultimate Guide to Prepare ADA-C01 Certification Exam for SnowPro Advanced: Administrator: https://www.testkingfree.com/Snowflake/ADA-C01-practice-exam-dumps.html

SnowPro Advanced: Administrator Real Exam Questions and Answers FREE ADA-C01 Updated on Feb 14, 2026 [Q46-Q70]

Snowflake ADA-C01 Exam Syllabus Topics:

Related Posts

[Q408-Q431] Get up-to-date Real Exam Questions for COF-C02 UPDATED [2024]

[Q95-Q113] COF-C02 by Snowflake Actual Free Exam Questions And Answers [UPDATED 2022]

Leave a Reply Cancel reply