SnowPro Advanced: Security Engineer Question 286
Single answerCredit consumption of advanced features, for example AI, Snowpark and Container ServicesA financial services company enables several advanced capabilities in Snowflake: analysts call Cortex AI functions from SQL, developers run Snowpark workloads on warehouses, and an internal application is deployed with Snowpark Container Services. The security engineering team has been asked to improve cost accountability without breaking least-privilege controls. They want each team to understand which advanced features can generate additional credit consumption beyond standard data storage, and to align monitoring with the correct billing model. Which statement is the MOST accurate?
- A
Only Snowpark Container Services can consume credits independently of a virtual warehouse; Cortex AI functions and Snowpark workloads do not affect compute charges.
- B
Cortex AI functions may incur usage charges, Snowpark workloads consume warehouse compute when executed on warehouses, and Snowpark Container Services consumes compute resources that are billed separately from virtual warehouses.
- C
Snowpark workloads and Cortex AI functions are both included at no additional cost when QUERY_TAG is set, but Snowpark Container Services requires credits only for image storage.
- D
All three capabilities consume credits only through the same virtual warehouse billing model, so a single warehouse monitor is sufficient for complete cost governance.
Show answer and explanation
Correct answer: B
Explanation
The key governance point is that advanced Snowflake features do not all map to the same compute billing mechanism. Snowpark workloads commonly run on virtual warehouses and therefore consume warehouse credits. Snowpark Container Services runs on compute pools, which are billed separately from warehouses, so warehouse monitors alone are insufficient for full oversight. Snowflake Cortex AI features can also introduce additional usage-based charges depending on the function or service used. In practice, security engineers should combine least-privilege access design with cost visibility controls such as resource monitors where applicable, account usage views, query tagging, and role separation for teams that manage warehouses, compute pools, and AI-enabled workloads. This aligns with Snowflake documentation on warehouse billing, Snowpark Container Services compute pools, and Cortex/AI feature consumption.
- A. Incorrect.
Incorrect. This understates the billing impact of Cortex AI and Snowpark. Snowpark code executed using a warehouse still uses that warehouse's compute credits. In addition, certain AI features, such as Cortex AI functions, can have separate usage-based charges depending on the feature. Snowpark Container Services does have its own compute model, but it is not the only advanced capability that can increase credit consumption.
- B. Correct.
Correct. This is the most accurate summary of how these advanced features affect cost. Snowpark jobs executed on warehouses consume warehouse credits just like other compute on those warehouses. Snowpark Container Services uses compute pools rather than virtual warehouses, and those resources are billed separately. Cortex AI functions can also incur usage charges, so organizations should not assume they are covered entirely by standard warehouse billing. From a security engineering perspective, this matters because monitoring and governance must account for multiple billing surfaces while preserving role-based access controls.
- C. Incorrect.
Incorrect. QUERY_TAG is useful for attribution and observability, but it does not change billing or make advanced features free. Snowpark workloads still consume warehouse compute, and Cortex AI functions are not generally free simply because queries are tagged. For Snowpark Container Services, charges are tied to compute pool usage and related service resources, not just image storage.
- D. Incorrect.
Incorrect. This reflects a common misconception that every Snowflake workload is billed only through virtual warehouses. Snowpark Container Services is billed through compute pools, not warehouses, so warehouse monitors alone do not provide complete coverage. In addition, some AI capabilities may have their own usage-based billing considerations, so relying on a single warehouse monitor can leave gaps in cost governance.