The correct answers are A. SHOW USERS and B. DESCRIBE USER .
Snowflake user metadata includes information related to MFA enrollment and configuration. To inspect user- level properties, administrators can use SHOW USERS or DESCRIBE USER.
Why A is correct:
SHOW USERS returns information about users in the account. Its output can include user properties that indicate MFA status or related authentication details.
Why B is correct:
DESCRIBE USER returns detailed properties for a specific user. This can be used to inspect whether MFA has been enabled for that user.
Example:
DESCRIBE USER my_user;
Why the other options are incorrect:
C). SHOW PARAMETERS displays parameters, not user MFA enrollment status.
D). SHOW USER FUNCTIONS lists user-defined functions, not Snowflake users.
E). SHOW CONNECTIONS displays connection objects and does not indicate MFA status for a specific user.
Official Snowflake documentation reference:
Snowflake documentation describes SHOW USERS and DESCRIBE USER as commands for viewing user metadata and user properties.
Reference: Snowflake Documentation - SHOW USERS; DESCRIBE USER; Multi-Factor Authentication; SnowPro Core Study Guide - Security and Access Control.
==

The REVOKE ROLE command is used to remove a role from another role or a user in Snowflake. This command is part of Snowflake's role-based access control system, allowing administrators to manage permissions and access to database objects efficiently by adding or removing roles from users or other roles.
References:
Snowflake Documentation: REVOKE ROLE

In Snowflake, shares are used to share data between Snowflake accounts. When creating a share, it is possible to grant access to the share to roles within the Snowflake account that is creating the share. The type of role that can be granted to a share is a Custom role. Custom roles are user-defined roles that account administrators can create to manage access control in a more granular way. Unlike predefined roles such as ACCOUNTADMIN or SYSADMIN, custom roles can be tailored with specific privileges to meet the security and access requirements of different groups within an organization.
Granting a custom role access to a share enables users associated with that role to access the shared data if the share is received by another Snowflake account. It is important to carefully manage the privileges granted to custom roles to ensure that data sharing aligns with organizational policies and data governance standards.
References:
Snowflake Documentation on Shares: Shares
Snowflake Documentation on Roles: Access Control