Question

A security engineer configures an account-level network policy with an allowed IP list of 203.0.113.0/24 and a blocked IP list that includes 203.0.113.55. A user attempts to connect to Snowflake from the IP address 203.0.113.55. What is the result of the connection attempt?

Accepted Answer

The connection is denied because the blocked IP list takes precedence over the allowed IP list.

Answer

The connection is allowed because the address falls within the allowed CIDR range.

Answer

The connection is allowed because specific addresses always override CIDR ranges.

Answer

The connection produces a configuration error since an address cannot appear in both effective ranges.