Snowflake · ADA-C02
SnowPro Advanced: Administrator (ADA-C02) Practice Tests
Validates advanced skills in managing Snowflake accounts including data security, governance, RBAC, performance tuning, data sharing, and disaster recovery. Designed for administrators with 2+ years of hands-on Snowflake production experience.
Exam Details
Practice Questions
600
≈ 6 practice exams
Duration
115 minutes
Passing Score
750/1000
Difficulty
ProfessionalLast Updated
Jun 2026
Topics Covered
Snowflake Security, RBAC, and User AdministrationAuthentication (SSO, MFA, OAuth, Key Pair)Network Policies and Private ConnectivityData Governance and Access ControlDatabase Object and Virtual Warehouse ManagementQuery Performance Monitoring and OptimizationData Sharing and Snowflake MarketplaceDisaster Recovery, Backup, and Data Replication
SnowPro Advanced: Administrator (ADA-C02) Practice Exam Preparation
Use this ADA-C02 practice exam to prepare for SnowPro Advanced: Administrator (ADA-C02) with realistic questions, detailed explanations, and focused study modes. The practice bank includes 600 questions for Snowflake ADA-C02, so you can review the exam steadily instead of relying on one long cram session.
As you practice, pay extra attention to recurring topics such as Snowflake Security, RBAC, and User Administration, Authentication (SSO, MFA, OAuth, Key Pair), Network Policies and Private Connectivity, Data Governance and Access Control, and Database Object and Virtual Warehouse Management. Start with short sessions to identify weak areas, then move into timed quizzes once your accuracy is consistent.
The explanations are especially useful when you want to connect exam wording to the responsibilities and scenarios described in the official certification guidance. Use the free preview first, then unlock the full question bank when you are ready to build a complete study routine.
Exam Domain Breakdown
Snowflake Security, RBAC, and Administration30%
Account Management and Data Governance25%
Exam Overview
The SnowPro® Advanced: Administrator (ADA-C02) is Snowflake's professional-level certification that validates deep expertise in administering, securing, and optimizing Snowflake Data Cloud environments. Launched on January 19, 2026 as the successor to the ADA-C01, this credential covers the full spectrum of advanced administrative responsibilities including role-based access control architecture, federated authentication, data governance policies, virtual warehouse optimization, and cross-cloud replication. It is one of five SnowPro Advanced certifications and sits above the SnowPro Core in Snowflake's certification hierarchy.
The exam tests a candidate's ability to design and enforce security boundaries using network policies, private connectivity, and SCIM-based identity management; implement column-level and row-level security through masking and access policies; tune query performance using Query Profiles and caching strategies; orchestrate data sharing via the Snowflake Marketplace and private exchanges; and build resilient disaster recovery architectures using database replication, Time Travel, and Fail-safe. The ADA-C02 revision notably replaces the former Data Transformation domain with a dedicated Disaster Recovery, Backup, and Replication domain, reflecting Snowflake's growing enterprise focus on operational resilience.
Who Should Take This Exam
The ADA-C02 is designed for experienced practitioners who manage Snowflake environments in production settings. Primary target roles include Snowflake Administrators, Snowflake Data Cloud Administrators, Cloud Infrastructure Administrators, Database Administrators (DBAs), Cloud Data Administrators, and Application Developers who handle platform governance responsibilities. The credential is most relevant for professionals who own account-level configuration, security policy enforcement, cost management, and data sharing arrangements within their organizations.
Candidates should have at least two years of hands-on Snowflake administrative experience in a production environment before attempting the exam. Those transitioning from traditional DBA roles into cloud data platforms, or cloud engineers seeking to formalize their Snowflake expertise, will find this certification a strong signal of advanced capability to employers.
Prerequisites
Snowflake requires candidates to hold an active SnowPro Core Certified credential before sitting for the ADA-C02. The SnowPro Core covers foundational Snowflake concepts including architecture, data loading, query fundamentals, and basic account management, and serves as the essential baseline for the advanced content tested here.
Beyond the formal prerequisite, Snowflake strongly recommends a minimum of two years of hands-on Snowflake administrative experience in a production environment. Candidates should be fluent in both ANSI SQL and Snowflake-extended SQL, comfortable navigating the Snowsight interface and SnowSQL CLI, and familiar with cloud networking concepts (VPC/VNet, private endpoints) across at least one major cloud provider (AWS, Azure, or GCP). Practical experience configuring identity providers for SSO, designing RBAC hierarchies, and working with resource monitors is highly advisable.
Exam Format
The ADA-C02 consists of 65 scored questions for first-time certification candidates, or 40 questions for those recertifying, both within a 115-minute time limit. Questions are primarily scenario-based and situational, requiring candidates to evaluate multiple technically valid options and select the most appropriate or cost-effective solution — not simply recall definitions. The exam is delivered online through Certmetrics and costs $375 USD per attempt.
Scoring follows a scaled system ranging from 0 to 1,000, with a passing score of 750. The certification remains valid for two years from the issue date, after which holders must recertify through Snowflake's Continuing Education program. Snowflake does not publish a breakdown of scored versus unscored (pretest) questions for this exam.
Skills Measured
- 1.Domain 1 – Snowflake Security, RBAC, and Administration (30%): Covers federated authentication and SSO configuration with identity providers, MFA enforcement, key-pair authentication and rotation, OAuth 2.0 token management, SCIM integration for user and group provisioning, network policy design, private connectivity setup (AWS PrivateLink, Azure Private Link, GCP Private Service Connect), RBAC hierarchy design, privilege management, and preventing data exfiltration. This is the highest-weighted domain on the exam.
- 2.Domain 2 – Account Management and Data Governance (25%): Covers Snowflake Organization management, multi-account strategies, Tri-Secret Secure encryption and customer-managed key (CMK) configuration, column-level security via dynamic data masking and external tokenization, row access policies, object tagging and data classification, and auditing through the Account Usage schema and INFORMATION_SCHEMA views.
- 3.Domain 3 – Performance and Cost Optimization (approx. 20%): Covers virtual warehouse sizing, multi-cluster warehouse configuration, auto-suspend and auto-resume tuning, query performance analysis using Query Profile and EXPLAIN plans, result set caching and metadata caching strategies, micro-partition pruning, clustering keys, resource monitor configuration, and credit consumption reporting.
- 4.Domain 4 – Data Sharing and Collaboration (approx. 15%): Covers secure data sharing fundamentals, one-to-one and one-to-many sharing configurations, private data exchange setup and membership management, Snowflake Marketplace listing creation and management, provider profiles, cross-region and cross-cloud data sharing, and Data Clean Rooms concepts.
- 5.Domain 5 – Disaster Recovery, Backup, and Data Replication (approx. 10%): Covers database and account replication across regions and cloud providers, replication group configuration, failover and failback procedures, disaster recovery planning, Time Travel configuration and usage for querying historical data and restoring dropped objects, and Fail-safe retention periods and limitations. This domain is new to the ADA-C02 and replaces the Data Transformation domain from the prior ADA-C01 version.
Study Tips
- Download and structure your study plan around the official ADA-C02 Exam Study Guide available on learn.snowflake.com. It lists every subdomain with linked Snowflake documentation, blog posts, and exercises — treat it as your curriculum rather than a reference to skim at the end.
- Prioritize Domain 1 (Security/RBAC at 30%) and Domain 2 (Governance at 25%) together, as they account for more than half the exam. Build a sandbox Snowflake account and hands-on configure SSO with a free Okta developer tenant, implement dynamic data masking policies on PII columns, and design a multi-role RBAC hierarchy from scratch.
- For Domain 3 performance tuning, practice reading actual Query Profiles in Snowsight. Load a large dataset, run queries with and without clustering keys, observe partition pruning statistics, and deliberately create warehouse contention to understand multi-cluster scaling behavior. The exam favors scenario questions requiring you to diagnose performance issues from Profile output.
- Study the ADA-C02 with a focus on cost-versus-functionality trade-offs, as many scenario questions present multiple technically correct options and test whether you can identify the most cost-effective approach. For example, understand when cross-region replication via replication groups is preferable to ETL-based duplication, and when a single-cluster warehouse suffices over a multi-cluster configuration.
- Use the Snowflake Account Usage schema (SNOWFLAKE.ACCOUNT_USAGE) and INFORMATION_SCHEMA views as hands-on study tools. Query LOGIN_HISTORY, QUERY_HISTORY, ACCESS_HISTORY, and DATA_TRANSFER_HISTORY to understand governance auditing — these views appear frequently in Domain 2 and Domain 3 questions.
- Since Domain 5 (Disaster Recovery) is entirely new in ADA-C02 and replacing a previously tested area, allocate dedicated study time to Snowflake's documentation on replication groups, failover/failback, and the operational differences between Time Travel (configurable, up to 90 days on Enterprise+) and Fail-safe (fixed 7 days, non-configurable, Snowflake-managed recovery only).
- Take at least two timed full-length practice exams under exam conditions before your attempt. The 65-question, 115-minute format averages under 2 minutes per question, and many scenario questions are lengthy — time management is a practical skill to develop, not just content knowledge.
Career Benefits
Earning the ADA-C02 positions administrators for senior and principal-level roles in organizations that run Snowflake at scale, including titles such as Senior Snowflake Administrator, Cloud Data Platform Engineer, Data Infrastructure Architect, and Database Reliability Engineer. Snowflake-certified administrators report salaries in the range of $120,000 to $150,000 USD annually at the mid-level, with senior professionals commanding $150,000 to $185,000 base in 2025–2026. Principal-level architects with SnowPro Advanced credentials alongside complementary cloud certifications (AWS, Azure, or GCP) can reach $210,000 to $265,000 in total compensation at larger enterprises.
Snowflake's rapid enterprise adoption — with over 10,000 enterprise customers and a significant demand-supply gap for experienced administrators — means the ADA-C02 carries strong market signal value. Compared to the entry-level SnowPro Core, the Advanced Administrator credential demonstrates the operational depth that platform engineering and data infrastructure teams require when entrusting someone with account-level security, compliance enforcement, and cross-cloud replication. It is frequently listed alongside cloud provider certifications as a preferred or required qualification in senior data platform engineering job postings.
Sample Questions
5 sample questions with answers and explanations. The full bank has 600 questions, enough for 6 full-length practice exams.
Preview — answers shown1. Blue Yonder Corp's Snowflake administrator issues two future grant commands in sequence. First, a GRANT SELECT ON FUTURE TABLES IN DATABASE analytics_db TO ROLE reporting_role is issued. Second, a GRANT SELECT ON FUTURE TABLES IN SCHEMA analytics_db.sales_schema TO ROLE sales_team_role is issued. A developer then creates a new table called q4_results inside analytics_db.sales_schema. Which role automatically receives the SELECT privilege on q4_results? (Select one!)
ABoth reporting_role and sales_team_role receive SELECT because future grants from different scopes are applied cumulatively
Breporting_role receives SELECT because the database-level future grant was configured before the schema-level grant
CNeither role receives SELECT because future grants do not apply retroactively and must be reissued after table creation
Dsales_team_role receives SELECT because schema-level future grants take precedence over database-level future grants for the same object type
Explanation
In Snowflake, schema-level future grants take precedence over database-level future grants for the same object type within that schema. When both a database-level and a schema-level future grant exist for the same privilege on the same object type, the schema-level grant overrides the database-level grant — only the schema-level grant is applied to new objects created in that schema. The order in which the grants were created does not determine precedence; scope specificity does. The database-level grant does not supplement the schema-level grant — it is superseded by it. Future grants from different scopes are not additive; the more specific scope wins. The non-retroactivity rule applies to objects that already existed before the future grant was established, not to brand-new objects created after the grant is in place.
2. A Snowflake security administrator at Proseware Corp is implementing an MFA enforcement policy for all Snowflake users. The organization has interactive BI analysts who log in through Snowsight, automated ETL pipelines authenticating via RSA key pairs, and a third-party reporting tool authenticating via OAuth tokens. Which statement accurately describes how Snowflake MFA enforcement applies across these different authentication paths? (Select one!)
AMFA applies to username/password authentication only; RSA key pair authentication, OAuth, and federated SAML authentication are exempt from MFA enforcement by design
BMFA applies to both username/password and RSA key pair authentication, but OAuth and federated SAML logins are exempt from MFA challenges
CMFA is enforced for all authentication methods including RSA key pair, OAuth, and username/password logins, with no exceptions permitted
DMFA enforcement cannot be scoped by authentication method; when enabled at the account level, all users are prompted regardless of how they authenticate
Explanation
Snowflake MFA, powered by Duo Security, applies exclusively to username and password authentication. Authentication mechanisms that operate outside the username/password credential flow are inherently exempt from MFA requirements. RSA key pair authentication uses cryptographic public/private key validation rather than a password, so no MFA challenge is generated. OAuth authentication relies on token-based authorization flows that bypass the password authentication path entirely. Federated authentication via SAML delegates the authentication decision to an external identity provider, which independently handles its own MFA enforcement if configured. This design ensures automated ETL pipelines using key pair authentication continue operating without interactive MFA prompts, while interactive BI analysts authenticating with usernames and passwords are subject to MFA challenges. Organizations should configure service accounts to use key pair or OAuth authentication both to avoid MFA friction for automated processes and to provide stronger credential security than password-based accounts.
3. An administrator at Fabrikam Analytics needs to create a multi-cluster warehouse named ANALYTICS_WH for a large team of business analysts whose query concurrency varies significantly throughout the day. The warehouse must automatically add clusters when queries begin queuing and remove them as demand subsides, prioritizing query responsiveness over credit conservation. Which SQL statement correctly implements this configuration? (Select one!)
ACREATE WAREHOUSE ANALYTICS_WH WITH WAREHOUSE_SIZE = 'MEDIUM' MAX_CLUSTER_COUNT = 4 MIN_CLUSTER_COUNT = 1 SCALING_POLICY = 'AUTO_SCALE'
BCREATE WAREHOUSE ANALYTICS_WH WITH WAREHOUSE_SIZE = 'MEDIUM' MAX_CLUSTER_COUNT = 4 MIN_CLUSTER_COUNT = 4 SCALING_POLICY = 'STANDARD'
CCREATE WAREHOUSE ANALYTICS_WH WITH WAREHOUSE_SIZE = 'MEDIUM' MAX_CLUSTER_COUNT = 4 MIN_CLUSTER_COUNT = 1 SCALING_POLICY = 'ECONOMY'
DCREATE WAREHOUSE ANALYTICS_WH WITH WAREHOUSE_SIZE = 'MEDIUM' MAX_CLUSTER_COUNT = 4 MIN_CLUSTER_COUNT = 1 SCALING_POLICY = 'STANDARD'
Explanation
Setting MAX_CLUSTER_COUNT greater than MIN_CLUSTER_COUNT activates auto-scale mode, where Snowflake dynamically adjusts the number of running clusters between the minimum and maximum values based on real-time query demand. SCALING_POLICY = 'STANDARD' is the correct value for responsiveness-first scenarios: it favors starting additional clusters as soon as queries begin queuing, minimizing user wait times at the cost of higher credit consumption during demand spikes. SCALING_POLICY = 'AUTO_SCALE' is not a valid Snowflake parameter value — the only supported values are STANDARD and ECONOMY. SCALING_POLICY = 'ECONOMY' conserves credits by requiring the system to estimate at least 6 minutes of sustained load before starting a new cluster; this is appropriate for cost-sensitive environments but intentionally accepts some queuing delay, making it unsuitable when responsiveness is the priority. Setting MAX_CLUSTER_COUNT equal to MIN_CLUSTER_COUNT (both at 4) puts the warehouse into maximized mode, where all four clusters run continuously regardless of demand — this does not auto-scale and wastes credits during low-usage periods.
4. A data governance team at Wide World Importers wants to automatically discover personally identifiable information across their Snowflake data warehouse without manually tagging thousands of columns. They require a solution that analyzes both column names and sample data values to categorize columns into standardized privacy categories. Which Snowflake feature provides this automated PII discovery capability? (Select one!)
AData Quality metric monitoring with anomaly detection algorithms that flag columns containing unusual statistical distributions
BDynamic Data Masking with automatic policy inference that scans column naming conventions and assigns masking policies based on detected patterns
CSnowflake sensitive data classification using system-defined category tags and the EXTRACT_SEMANTIC_CATEGORIES function to analyze columns and recommend appropriate classifications
DTag-based masking policies applied at the database level that propagate automatically to all child schemas and newly created columns
Explanation
Snowflake sensitive data classification uses machine learning to analyze both column names and sample data values to automatically categorize columns by their privacy sensitivity level. The EXTRACT_SEMANTIC_CATEGORIES function and CLASSIFY procedure scan tables and schemas, returning recommended system-defined classification tags such as identifier categories for email addresses, phone numbers, and national IDs, as well as quasi-identifier categories for fields like age, gender, and postal codes. Administrators can review and apply these recommendations as Snowflake system tags and associated masking policies. Dynamic Data Masking requires manual policy creation and column assignment and cannot perform automatic data discovery. Tag-based masking policies provide governance scalability but still require tags to be applied to columns either manually or through classification. Data Quality monitoring focuses on accuracy and completeness metrics, not sensitive data identification.
5. A Snowflake administrator at Contoso Corp has an account-level network policy permitting only the corporate IP range 10.0.0.0/8. A data scientist DS_USER needs to connect from a cloud IDE with IP range 34.125.0.0/16, so the administrator creates a user-level network policy allowing only 34.125.0.0/16 and assigns it to DS_USER. The data scientist reports they can now connect from the cloud IDE but can no longer connect from the corporate office. What is the most likely explanation for this behavior? (Select one!)
ANetwork policies cannot be assigned at the user level in Snowflake, so the observed behavior indicates a misconfiguration in the account-level policy
BThe user-level network policy supplements the account-level policy, and a separate misconfiguration must be blocking the corporate IP range for this user
CThe user-level network policy completely replaces the account-level policy for DS_USER, meaning only IP ranges explicitly listed in the user-level policy are permitted for that user
DThe account-level network policy always takes precedence for corporate network connections, preventing user-level policy overrides from affecting those IP ranges
Explanation
When a network policy is assigned directly to a Snowflake user, it completely replaces the account-level network policy for that specific user — it does not combine with or supplement it. Because the user-level policy was configured to allow only 34.125.0.0/16, the corporate range 10.0.0.0/8 defined in the account-level policy is no longer evaluated for DS_USER at all. To permit connections from both IP ranges, the administrator must include both ranges explicitly within the user-level policy. The account-level policy continues to govern all other users who have no user-level policy assigned to them.
More Snowflake Practice Exams
SnowPro Specialty: Gen AI (GES-C01)
GES-C01 · 600 questions
SnowPro Specialty: Native Apps (NAS-C01)
NAS-C01 · 600 questions
SnowPro® Specialty: Snowpark (SPS-C01)
SPS-C01 · 599 questions
SnowPro Advanced: Architect (ARA-C01)
ARA-C01 · 592 questions
SnowPro Advanced: Data Analyst (DAA-C01)
DAA-C01 · 600 questions
SnowPro Advanced: Data Engineer (DEA-C02)
DEA-C02 · 597 questions
$17.99
One-time access to this exam
600 questions (6 practice exams' worth)
Unlimited timed exam simulations
Yours forever — no subscription
Detailed explanations
Free preview stays available