The correct answer is C. Rotation .
Key-pair authentication uses a public/private key pair to authenticate users or applications. To improve security, keys should be replaced periodically or when there is a possibility that a key has been exposed. This process is called key rotation .
Why C is correct:
Key rotation allows an organization to replace active keys with new keys. In Snowflake, users can have public keys assigned for key-pair authentication, and rotating keys helps maintain secure authentication practices.
Why the other options are incorrect:
A). Authentication is the overall process of verifying identity, not the specific feature for replacing keys.
B). Passkeys are a different authentication mechanism and are not the feature used to replace active key-pair authentication keys.
D). Time-based one-time passcodes are associated with MFA, not key-pair replacement.
Official Snowflake documentation reference:
Snowflake documentation describes key-pair authentication and includes key rotation as a security practice for replacing public/private key pairs.
Reference: Snowflake Documentation - Key-pair authentication; Snowflake Documentation - Key rotation; SnowPro Core Study Guide - Security and Access Control.
==