Which security, governance, and data protection features require, at a MINIMUM, the Business Critical edition of Snowflake? (Choose two.)

Snowflake's Business Critical edition is designed for organizations with stringent security and data protection requirements. Two key features that are introduced at this level are Tri-Secret Secure and private connectivity. Tri-Secret Secure allows customers to use their own encryption keys, providing an extra layer of security and control. Private connectivity, using services like AWS PrivateLink, Azure Private Link, or Google Cloud Private Service Connect, ensures that all communication with Snowflake occurs over a private network, completely isolating it from the public internet. Both features are fundamental to meeting high-level compliance standards and are available starting with the Business Critical edition.

A. Extended Time Travel (up to 90 days): This feature is available starting with the Enterprise edition, which is a lower tier than Business Critical.
C. Periodic rekeying of encrypted data: This is a standard, built-in security practice managed by Snowflake across all editions and is not an optional feature.
E. Federated authentication and SSO: This capability is available starting with the Enterprise edition, a tier below Business Critical.

1. Snowflake Documentation: Snowflake Editions. This official comparison table explicitly lists "Support for customer-managed keys (Tri-Secret Secure)" and "Support for AWS PrivateLink, Azure Private Link, and Google Cloud Private Service Connect" as features of the Business Critical Edition. It also shows "Extended Time Travel" and "Federated authentication" as Enterprise Edition features.

Source: Snowflake Documentation, Section: User Guide > Introduction to Snowflake > Snowflake Editions.

2. Snowflake Documentation: Customer-Managed Keys (Tri-Secret Secure). This document confirms the edition requirement.

Source: Snowflake Documentation, Section: Security > End-to-end Encryption > Customer-Managed Keys (Tri-Secret Secure). The first paragraph states, "Tri-Secret Secure is available for Snowflake accounts on Business Critical Edition (or higher)."

3. Snowflake Documentation: Overview of Private Connectivity to the Snowflake Service. This document specifies the edition needed for private connectivity.

Source: Snowflake Documentation, Section: Security > Private Connectivity to the Snowflake Service > Overview of Private Connectivity to the Snowflake Service. The introductory section states, "This feature requires Business Critical Edition (or higher)."

4. Snowflake Documentation: Understanding & Using Time Travel. This page details the edition requirements for extending the Time Travel retention period.

Source: Snowflake Documentation, Section: Data Loading & Unloading > Continuous Data Protection > Understanding & Using Time Travel. The section on "Setting the Retention Period" notes that extending it up to 90 days requires "Snowflake Enterprise Edition (or higher)".