COF-C03 Question 113
Single answerStandardA company is designing a new Snowflake environment and wants to minimize licensing cost by using the Standard Edition. The security team has two requirements: analysts must connect using federated single sign-on (SSO) through the company's identity provider, and sensitive customer columns must be protected using Dynamic Data Masking policies managed natively in Snowflake. Which statement accurately describes what the architect should recommend?
- A
Standard Edition supports both federated SSO and Dynamic Data Masking, so no edition change is required.
- B
Standard Edition supports federated SSO, but Dynamic Data Masking requires upgrading to Enterprise Edition or higher.
- C
Standard Edition supports Dynamic Data Masking, but federated SSO requires upgrading to Enterprise Edition or higher.
- D
Neither federated SSO nor Dynamic Data Masking is available in Standard Edition, so both requirements require an upgrade.
Show answer and explanation
Correct answer: B
Explanation
This question tests understanding of Snowflake edition-based feature availability in a practical architecture scenario. For SnowPro Core, candidates should know that some governance and advanced data protection features are edition-specific, while authentication integrations such as federated SSO are available in Standard Edition. Dynamic Data Masking is part of Snowflake's advanced data governance capabilities and requires Enterprise Edition or higher. In contrast, federated authentication with an external identity provider is supported in Standard Edition. This distinction is important when balancing cost against security requirements during solution design. Candidates should verify edition-specific capabilities in Snowflake documentation covering editions/features and security features such as masking policies.
- A. Incorrect.
Incorrect. This combines two different feature assumptions. Snowflake Standard Edition does support federated authentication / SSO scenarios, but Dynamic Data Masking is not a Standard Edition feature. Masking policies are part of higher editions, so an edition change would be needed for that requirement.
- B. Correct.
Correct. Federated SSO is supported in Standard Edition, which allows integration with a supported identity provider for authentication. However, Dynamic Data Masking is an edition-dependent data protection feature that requires Enterprise Edition or higher. Therefore, the architect can meet the SSO requirement on Standard, but must upgrade to satisfy the masking requirement.
- C. Incorrect.
Incorrect. This reverses the edition boundaries. Dynamic Data Masking is not included in Standard Edition, while federated SSO is available without needing Enterprise Edition. A candidate might choose this if they confuse authentication features with governance/security features that are edition-gated.
- D. Incorrect.
Incorrect. This is too broad. Although Dynamic Data Masking does require a higher edition, federated SSO does not. The misconception here is assuming all advanced security-related capabilities are excluded from Standard Edition.