Answer-first summary for fast verification
Answer: Snowflake applies the BLOCKED_IP_LIST first.
According to Snowflake's official documentation and the community discussion consensus (with multiple upvoted comments confirming this), when a network policy includes values in both the allowed and blocked IP address lists, Snowflake applies the blocked IP address list first. This means blocked IPs are evaluated before allowed IPs, which is a security best practice that prioritizes blocking potentially malicious traffic over allowing legitimate traffic. Option B correctly states this precedence, while options A, C, and D are incorrect as they either misstate the order of evaluation or suggest ignoring one of the lists entirely.
Author: LeetQuiz Editorial Team
Ultimate access to all questions.
When a network policy specifies values for both the ALLOWED_IP_LIST and the BLOCKED_IP_LIST, which list takes precedence for determining access?
A
Snowflake ignores the BLOCKED_IP_LIST first.
B
Snowflake applies the BLOCKED_IP_LIST first.
C
Snowflake applies the ALLOWED_IP_LIST first.
D
Snowflake ignores the ALLOWED_IP_LIST first.
No comments yet.