COF-C03 - Data Collaboration - Section 5.1

Describe secure data sharing including shares, providers and consumers, reader accounts, and what can be shared.

Describe how Snowflake shares live data without copying it: a provider creates a share that grants access to selected objects, and a consumer account references that share as a read-only database. Recognise that the consumer uses its own compute, that reader accounts let a provider share with parties who are not Snowflake customers, and that secure views and secure UDFs protect shared logic.

secure data sharingsharesprovider and consumerreader accountsno data copy

Practice question for this objective

Free sampleData Collaborationeasy

A provider wants to distribute an application that runs stored procedures and user-defined functions inside each consumer's own Snowflake account, so the provider's proprietary logic executes on the consumer's data without the provider seeing that data. Which Snowflake capability is designed for this?

  • AA secure data share containing the procedures, because sharing the database that holds the stored procedures lets each consumer run the provider's logic over their own data in place
  • BA scheduled task in the provider account, because a task can reach into each consumer account on a schedule to execute the provider's procedures against the consumer's data
  • CAn application built with the Snowflake Native Apps Framework, because it packages procedures and functions that install and run inside the consumer account against the consumer's own data Correct
  • DA materialized view published to the Marketplace, because the view precomputes the provider's transformations and refreshes them automatically inside each consumer account
Recognise that the Snowflake Native Apps Framework packages provider logic to install and run inside a consumer account on the consumer's own data. The Native Apps Framework lets providers package application logic, including stored procedures and user-defined functions, into a distributable app that consumers install and run within their own account. The code executes against the consumer's data locally, so the provider distributes proprietary logic and the consumer keeps their data private, which plain data sharing of read-only objects cannot achieve.

Why A is wrong: A secure data share grants read access to data objects and shared views, but it is built to share data rather than to package and install an application with its own logic running in the consumer account, so it does not fit.

Why B is wrong: A task runs only within its own account and cannot execute against another account's data, so it cannot deliver provider logic into consumer accounts and is the wrong mechanism entirely.

Why C is correct: The Snowflake Native Apps Framework lets a provider package logic such as stored procedures and functions into an app that installs and executes inside the consumer's account, so the provider's code runs on consumer data without the provider accessing it.

Why D is wrong: A materialized view stores precomputed query results, not executable application logic such as procedures and functions, so it cannot package and distribute a running application to consumers.

See more COF-C03 practice questions, answers explained.

More in this domain

Back to all Data Collaboration objectives, or the COF-C03 cert hub.

Examworthy is not affiliated with or endorsed by Snowflake. Original, blueprint-aligned practice material only.