CloudGuild · Blog · Cheat sheets · Lessons · Certifications
SnowPro Core Certification COF-C02: Enforcing MFA in Snowflake
Understanding how to enforce multi-factor authentication (MFA) in Snowflake is crucial for the SnowPro exam. Let's break down the question and answer.
To enhance security, your organization requires that users authenticate through a multi-factor authentication (MFA) method. What is the primary way to enforce MFA in Snowflake?
A. Enable MFA in the Snowflake user profile settings.
B. Set up SSO with an identity provider that supports MFA.
C. Use a network policy to restrict access.
D. Implement row-level security on sensitive data.
Think before you scroll
Consider how multi-factor authentication is implemented in Snowflake. Pay attention to the features that directly support MFA and those that don't address user authentication.
The answer
The correct option is B. Set up SSO with an identity provider that supports MFA. This option directly integrates with Snowflake's security framework to enforce MFA.
Why the other options lose
A. Enable MFA in the Snowflake user profile settings. This option may seem plausible, but Snowflake does not provide a direct feature for enabling MFA within individual user settings. This option does not achieve the desired outcome.
C. Use a network policy to restrict access. While network policies can enhance security, they do not enforce multi-factor authentication. They primarily restrict access based on network criteria, which does not relate to user authentication methods.
D. Implement row-level security on sensitive data. This option pertains to data access controls, not user authentication. Row-level security protects data visibility but does not enforce MFA for user logins.
The concept behind it
Multi-factor authentication in Snowflake is best enforced through integration with an identity provider that supports MFA. This approach ensures that users must provide multiple forms of verification before gaining access. Understanding this integration helps in adapting to different authentication scenarios.
Exam trap to remember
To enforce MFA in Snowflake, remember: SSO with an MFA-supporting identity provider is key.