COF-C03 Exam Dumps - SnowPro Core Certification 2026 Exam

The correct answer is B. To track DML changes that have been made to tables .

A stream is a Snowflake object used for change data capture. It records changes made to a source table so those changes can be consumed later by SQL logic, usually as part of an incremental processing pipeline.

Why B is correct:

Streams track DML changes such as:

INSERT

UPDATE

DELETE

They also expose metadata columns such as:

METADATA$ACTION

METADATA$ISUPDATE

METADATA$ROW_ID

These columns help identify the type of change and the affected row.

Why the other options are incorrect:

A. Tasks execute scheduled SQL and can be used to run data pipelines. Streams track the changes consumed by those pipelines.

C. File formats define how staged files are interpreted during loading or unloading. Streams are unrelated to file format definitions.

D. Caching is handled by Snowflake result cache and warehouse cache mechanisms, not by streams.

Official Snowflake documentation reference:

Snowflake documentation describes streams as objects that record DML changes made to tables, including inserts, updates, and deletes.

Queued queries from many concurrent BI users indicate a concurrency issue. A multi-cluster warehouse improves concurrency by adding clusters as query demand increases. Increasing warehouse size helps individual query speed, but adding clusters is better for concurrent query queuing.

TheRemote Disk I/Ostatistic in the Query Profile reflectstime spent waiting on remote disk access, which can occur when data needs to be retrieved from external storage (remote). This metric is crucial for identifying bottlenecks related to I/O delays, often suggesting a need for performance optimization in data retrieval paths.

The other options relate to caching and network activity, but Remote Disk I/O specifically measures the wait time for data access from remote storage locations.

Access History in Snowflake is primarily utilized for compliance auditing. The Access History feature provides detailed logs that track data access and modifications, includingqueries that read from or write to database objects. This information is crucial for organizations to meet regulatory requirements and to perform audits related to data access and usage.

Role of Access History:Access History logs are designed to help organizations understand who accessed what data and when. This is particularly important for compliance with various regulations that require detailed auditing capabilities.

How Access History Supports Compliance Auditing:

By providing a detailed log of access events, organizations can trace data access patterns, identify unauthorized access, and ensure that data handling complies with relevant data protection laws and regulations.

Access History can be queried to extract specific events, users, time frames, and accessed objects, making it an invaluable tool for compliance officers and auditors.

In Snowflake,SAMPLE (5 ROWS)ensures an exact count of 5 rows is returned from MY_TABLE, regardless of table size. This is different from SAMPLE SYSTEM or SAMPLE BERNOULLI, which use percentage-based sampling, potentially returning varying row counts based on probabilistic methods.

The ROWS option is deterministic and does not depend on percentage, making it ideal when an exact row count is required.

The correct answer is A. Multi-Factor Authentication, or MFA .

Multi-Factor Authentication reduces the risk of relying only on a username and password. Even if a password is compromised, MFA requires an additional verification factor before the user can access Snowflake.

Why A is correct:

MFA strengthens password-based authentication by requiring an extra factor, such as a push approval, passcode, or other verification method. Snowflake’s native MFA is powered by Duo Security.

Why the other options are incorrect:

B. Standard authentication usually refers to username and password authentication, which is exactly the risk the question wants to reduce.

C. Snowflake OAuth is an authorization/authentication integration method, but MFA is the direct feature designed to reduce password-only risk.

D. External OAuth can centralize authentication through an external identity provider, but the best Snowflake security feature for reducing password authentication risk is MFA.

Official Snowflake documentation reference:

Snowflake documentation describes MFA as an additional layer of security for user login and explains that Snowflake MFA is powered by Duo Security.

The correct answer is B. Snowflake CLI is primarily used for managing workloads and applications, while SnowSQL is used for executing operations .

SnowSQL is Snowflake’s command-line client that is primarily used to connect to Snowflake and execute SQL statements. It is commonly used for SQL operations, including running queries, loading data, unloading data, and executing scripts.

Snowflake CLI is a broader command-line tool designed for managing Snowflake workloads and application development workflows. It supports tasks related to Snowflake Native Apps, Snowpark, Streamlit, stages, tasks, and other development or deployment activities.

Why B is correct:

Snowflake CLI is more focused on managing Snowflake workloads, projects, and applications. SnowSQL is primarily used as a SQL command-line client to execute SQL operations against Snowflake.

Why the other options are incorrect:

A. This reverses the primary purposes of the tools. SnowSQL is not mainly for managing workloads and applications.

C. SnowSQL is not limited to DDL, and Snowflake CLI is not limited to DML.

D. Snowflake CLI is not limited to query execution, and SnowSQL is not a Python package management tool.

Official Snowflake documentation reference:

Snowflake documentation describes SnowSQL as the command-line client for connecting to Snowflake and executing SQL queries. Snowflake CLI is described as a command-line tool for developer workflows and managing Snowflake workloads and applications.