Snowflake Exam ADA-C01 Topic 3 Question 20 Discussion

Actual exam question for Snowflake's ADA-C01 exam

Question #: 20
Topic #: 3

A user has enrolled in Multi-factor Authentication (MFA) for connecting to Snowflake. The user informs the Snowflake Administrator that they lost their mobile phone the previous evening.

Which step should the Administrator take to allow the user to log in to the system, without revoking their MFA enrollment?

AAlter the user and set MINS TO BYPASS MFA to a value that will disable MFA long enough for the user to log in.

BAlter the user and set DISABLE_MFA to true, which will suspend the MFA requirement for 24 hours.

CInstruct the user to connect to Snowflake using SnowSQL, which does not support MFA authentication.

DInstruct the user to append the normal URL with /?mode=mfa_bypass&code= to log on.

Show Suggested Answer

Suggested Answer: A

The MINS_TO_BYPASS_MFA property allows the account administrator to temporarily disable MFA for a user who has lost their phone or changed their phone number1. The user can log in without MFA for the specified number of minutes, and then re-enroll in MFA using their new phone1. This does not revoke their MFA enrollment, unlike the DISABLE_MFA property, which cancels their enrollment and requires them to re-enroll from scratch1. The other options are not valid ways to bypass MFA, as SnowSQL does support MFA authentication2, and there is no such URL parameter as /?mode=mfa_bypass&code= for Snowflake3

by Fallon at Aug 06, 2024, 04:35 AM

Limited Time Offer

25%

Off

Get Premium ADA-C01 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tonette

3 months ago

I think both options could work, but I would go with option B just to be on the safe side and ensure the user can log in without any issues.

upvoted 0 times

...

Golda

3 months ago

I'm not sure about that, I think setting DISABLE_MFA to true might be a safer choice to suspend MFA requirement for 24 hours.

upvoted 0 times

...

Zena

3 months ago

Ah, the old 'I lost my phone' excuse. Classic! But in all seriousness, we need to find a secure way to let this user in without compromising the entire system. Maybe we can look into temporary backup authentication methods or something.

upvoted 0 times

...

Franklyn

3 months ago

Appending a URL with a bypass code? That's a new one. I'm curious to see if that actually works, but it also sounds a bit sketchy. Maybe we should look into a more official way to handle this situation.

upvoted 0 times