Snowflake NAS-C01 Actual Tests : SnowPro Specialty - Native Apps

You are packaging a Snowflake Native App and need to ensure that consumer accounts can only access specific data views you've created within your application schem a. You want to prevent consumers from directly querying the underlying tables. Which of the following security measures, when implemented together, BEST achieve this objective? (Choose two)

• A. Grant 'SELECT privilege only on the views to the 'application role' within the application package.
• B. Use secure views to expose data, ensuring data access is controlled through the view's definition.
• C. Grant 'SELECT' privilege on the underlying tables to the 'application role' within the application package.
• D. Grant "OWNERSHIP' on the views to the 'application role' within the application package.
• E. Do not grant any privileges on the underlying tables to the 'application role' within the application package.

You are designing a Streamlit application within a Snowflake Native App package. This application displays data from a customer's Snowflake account. The application needs to enforce strict data governance policies, ensuring that users only see the data they are authorized to view based on their roles and permissions within the customer's account. Which strategies and Snowflake features should be employed to achieve this?

• A. Use external tables to fetch the data.
• B. Leverage Snowflake's row access policies to automatically filter data based on the user's role and context at the database level.
• C. Use Snowflake's masking policies to redact sensitive data based on the user's role and context at the database level.
• D. Implement row-level security policies directly within the Streamlit application using Python code to filter the data.
• E. Create separate Streamlit applications for each user role, each with its own data access configuration.

You are developing a Snowflake Native Application that needs to access user-provided data through a Secure Data Sharing. The consumer must explicitly grant access to their data container. Which approach provides the MOST secure and efficient method for allowing your application to access this data and ensure proper governance?

• A. Request the consumer to create a share containing the desired data and grant usage on the share to your application's account. The application then imports this share into its own environment.
• B. Require the consumer to create a database from their share within your application's environment.
• C. Implement a custom API endpoint that the consumer must call to securely transmit their data to your application.
• D. Instruct the consumer to create a database role in their account and grant it all necessary privileges on the data container, then grant that role to your application's account.
• E. Your application creates a secure view on the consumer's data container, allowing only specific data to be accessed.

A Snowflake Native App installed in a consumer account needs to access data in a specific table within the consumer's account to perform its core functionality. Which of the following is the MOST secure and recommended way for the application to gain access to this data? (Assume the application developer does not have direct access to the consumer's Snowflake account.)

• A. The application prompts the consumer for their Snowflake account credentials and uses those credentials to access the data.
• B. The consumer shares the table directly with the application provider's Snowflake account.
• C. The consumer grants the "GLOBAL' privilege 'SELECT on the table directly to the application package name.
• D. The consumer creates a secure view on top of the table and grants 'SELECT privilege on the secure view to the application's installed application object (application instance).
• E. The application provider requests the 'IMPORTED PRIVILEGES on the consumer account, allowing the application to access any object within the account.

You are developing a Snowflake Native Application that requires maintaining multiple live versions for different customer segments. Some customers need to stay on an older version for compatibility reasons, while new customers should use the latest version. How can you best manage these different versions using Snowflake Native App features?

• A. By using streams and tasks to replicate data and logic between different versions of the application, ensuring data consistency.
• B. By creating separate Snowflake accounts for each customer segment, each with a different version of the application installed.
• C. By creating separate application packages for each version and managing them independently, allowing consumers to choose which version to install. The 'APPLICATION ROLE is used to define application-level access.
• D. By leveraging the 'APPLICATION ROLE to control access to different versions using conditional logic within the application code.
• E. By implementing a custom versioning system within the application's stored procedures and functions, relying on consumer-provided parameters to determine which version of the logic to execute.