COF-C03 Exam Dumps - SnowPro Core Certification 2026 Exam

When a consumer imports a shared database , they must explicitly grant the IMPORTED PRIVILEGES to a role in order to access the shared objects.

The correct answer is C. PARSE_JSON .

PARSE_JSON parses a valid JSON-formatted string and returns a VARIANT value. This is commonly used when inserting semi-structured JSON data into a VARIANT column.

Why C is correct:

A VARIANT column can store semi-structured data such as JSON objects and arrays. When the source value is a JSON string, PARSE_JSON converts it into a Snowflake VARIANT.

Example:

CREATE TABLE json_table (

src VARIANT

);

INSERT INTO json_table

SELECT PARSE_JSON( ' { " customer_id " : 101, " region " : " WEST " } ' );

Why the other options are incorrect:

A. TO_JSON converts a VARIANT value into a JSON string. It is commonly used in the opposite direction.

B. TO_VARCHAR converts a value to a string, not to a semi-structured VARIANT.

D. OBJECT_INSERT inserts or updates a key-value pair inside an existing object, but it is not the primary function used to parse JSON text into a VARIANT column.

Official Snowflake documentation reference:

Snowflake documentation describes PARSE_JSON as a function that interprets an input string as JSON and returns a VARIANT value.

When using theSnowflake Kafka connector, the table schema includes two importantvariant columns:

RECORD_TIMESTAMP: This column stores the timestamp from the Kafka record, enabling time-based analysis of incoming data.

RECORDKEY: This captures the unique key of each Kafka message, useful for uniquely identifying records or managing deduplication.

These columns ensure that each message’s metadata and key information are preserved, facilitating data analysis and real-time processing tasks in Snowflake.

Network policies in Snowflake are used to control access to Snowflake accounts based on IP address ranges. These policies can be activated by specific roles that have the necessary privileges.

Role: ACCOUNTADMIN:

The ACCOUNTADMIN role has full administrative rights across the Snowflake account.

This role can manage all aspects of the Snowflake environment, including network policies.

Role with Global ATTACH POLICY Privilege:

Any role that has been granted the global ATTACH POLICY privilege can activate network policies.

This privilege allows the role to attach policies that control network access to the account.

Snowflake Documentation: Network Policies

Snowflake’s Cloud Services layer handles authentication, access control, metadata management, query parsing, and query optimization. Since the issue is suspected to involve query planning and access validation, the relevant components are access control and query parsing/optimization.

USERADMIN : Used for managing users and roles.

SECURITYADMIN : Can manage users, roles, and access control.

SYSADMIN is used primarily for object creation, not user management.

The correct answer is C. Use row-level security on the source data table used to generate the reports .

The requirement is to let managers see only rows for their respective regions. This is a row-filtering requirement, so Snowflake row-level security is the best fit.

Why C is correct:

Row-level security in Snowflake is implemented using row access policies. A row access policy can dynamically filter table rows based on the current user, current role, or mapping table logic.

Example concept:

CREATE ROW ACCESS POLICY region_policy

AS (region STRING) RETURNS BOOLEAN - >

region IN (

SELECT allowed_region

FROM manager_region_map

WHERE manager_role = CURRENT_ROLE()

);

This allows one shared table or report to serve multiple managers while enforcing region-specific visibility.

Why the other options are incorrect:

A. Creating unique views for each region increases operational overhead as regions or access rules change.

B. Building individual reports for each manager creates the highest operational overhead and is difficult to maintain.

D. Dynamic Data Masking hides or transforms column values. It does not filter rows by region.

Official Snowflake documentation reference:

Snowflake documentation describes row access policies as schema-level objects that determine whether a row is visible in a query result. They are used to implement row-level security.