Snowflake NAS-C01 Exam : SnowPro Specialty - Native Apps

Your team is building a Snowflake Native App that uses a UDF (User-Defined Function) for data enrichment. The UDF needs to access an external API key. Which of the following approaches are valid and secure methods for providing the API key to the UDF within the Native App framework?

• A. Pass the API key as a parameter to the UDF when it's called.
• B. Use a secure parameter in the MANIFEST.yml and access it within the UDF.
• C. Store the API key directly in the UDF's code.
• D. Store the API key using Snowflake's Secret Management feature and grant the UDF access to the secret.
• E. Store the API key in a database table within the consumer's account and grant the UDF access to that table.

You are designing a Snowflake Native Application that uses Snowpark Container Services to process dat a. The application needs to store intermediate results in a Snowflake table. You have the following requirements: 1. The table should only be accessible to the Native App. 2. The table schema should be automatically updated when the application is upgraded. 3. You want to minimize the privileges granted to the container service's service account. Which of the following approaches should you use? (Select TWO)

• A. Create the table manually in the consumer's account and grant 'USAGE' and 'SELECT privileges on the table to the Native App's service account.
• B. Grant 'ALL PRIVILEGES on the database containing the table to the Native App's service account. This allows the application to manage the table and its schema.
• C. Create the table within the application's package using a setup script. Grant the 'USAGE privilege on the application's schema to the Native App's service account.
• D. Create a separate database for the Native App's internal data and grant the 'OWNERSHIP' privilege on this database to the Native App's service account.
• E. Create the table within the application's package using a setup script. The setup script should execute during the application installation and upgrade process.

You are developing a Snowflake Native App that needs to be deployed across multiple regions. Your application relies on data stored in internal stages. Considering the limitations of Snowflake Native App Framework regarding regional availability and data residency, which of the following strategies is the MOST appropriate to ensure data availability and minimize latency for users in different regions?

• A. Utilize Snowflake's data replication feature to replicate the internal stages and associated data to regional Snowflake accounts.
• B. Package all necessary data within the application itself, eliminating the need for external data sources.
• C. Design the application to use external stages (e.g., AWS S3, Azure Blob Storage) in each region and implement logic to access the nearest stage based on the user's location.
• D. Replicate the entire Snowflake account across all regions where the app is deployed.
• E. Configure the application to access data in a central, globally accessible stage, regardless of the user's region.

You are developing a Snowflake Native Application that processes customer orders. The application needs to securely store sensitive customer data (e.g., credit card numbers) within the provider's account but must grant the consumer's account access to analyze aggregated, de-identified order statistics. Which combination of features is BEST suited to achieve this while adhering to security best practices and Snowflake Native App constraints?

• A. Store sensitive data in a secured view within the provider account. Grant the consumer account usage privileges on this secured view. Create a setup script using 'CREATE APPLICATION ROLE and 'GRANT to give the consumer's application role access to the secured view.
• B. Store sensitive data in a table within the provider account. Create a stored procedure that aggregates and de-identifies the data, writing the results to a new table. Share this new, aggregated table with the consumer account via a data share.
• C. Store sensitive data in a table within the provider account. Create a user-defined function (UDF) that aggregates and de-identifies the data. Share the table and the UDF with the consumer account through a share. The consumer application can then use the UDF to query the data.
• D. Store sensitive data in a table within the provider account. Use dynamic data masking policies to de-identify the data when accessed by the consumer account. Share the underlying table directly with the consumer account through a share.
• E. Store sensitive data in an internal stage within the provider account. Create a stored procedure that reads data from the stage, aggregates and de-identifies it, and writes the results to a shareable table. The consumer application can query the shareable table.

You are developing a Snowflake Native Application that uses Streamlit to present dat a. The application relies on a UDF to perform calculations. The UDF resides in the application's schema within the container. The application package is named and the application itself is named 'my_app'. You need to grant the application the necessary privileges to execute this UDF. Which of the following SQL statements, executed by the application provider, will correctly grant the required privilege to the application?

• A.
  
• B.
  
• C.
  
• D.
  
• E.