Snowflake NAS-C01 : SnowPro Specialty - Native Apps

You are developing a Snowflake Native App that leverages shared data from the consumer's account. The app needs to dynamically determine the existence of a specific table (e.g., 'CUSTOMER DATA) in the consumer's shared database before attempting to query it. Which of the following SQL commands or approaches within the application package provides the MOST reliable way to programmatically check for the existence of the table?

• A. Use the 'INFORMATION SCHEMA.TABLES' view and query it to check if a table with the name 'CUSTOMER DATA' exists in the shared database.
• B. Use the ' SHOW TABLES LIKE 'CUSTOMER_DATA" command and check if any rows are returned.
• C. Use the 'DESCRIBE TABLE CUSTOMER_DATX command within a 'TRY...CATCH' block and handle the exception if the table does not exist.
• D. Attempt to grant SELECT privilege on the table and check if an error occurs
• E. Execute a 'SELECT 1 FROM CUSTOMER_DATA LIMIT 1' query within a 'TRY...CATCH' block and handle the exception if the table does not exist.

You are publishing a Snowflake Native Application to the Marketplace. You've completed initial testing, and the application appears to function as expected. However, the security scan consistently fails with a 'Data Exfiltration' error. The application includes a stored procedure that aggregates data from several tables within the application container and writes the results to an external stage using the 'COPY INTO' command. Review the following code snippet:

Which of the following changes is MOST likely to resolve the 'Data Exfiltration' error during the security scan?

• A. Encrypt the data written to the external stage using client-side encryption with a key managed by the application provider.
• B. Require the consumer to explicitly grant the application usage privilege on a secure external stage controlled by the consumer, and modify the procedure to validate the stage's existence and permissions before exporting data.
• C. Modify the stored procedure to only export data to a table within the application container instead of an external stage.
• D. Implement row-level security policies on the 'aggregated_data' table to restrict access to sensitive rows.
• E. Remove the 'GRANT EXECUTE privilege on the 'export_data' procedure from the 'app_public' role.

You are packaging a Snowflake Native App that includes a file. During the packaging process, you encounter an error stating that a required Python package, 'pandas', is not found. However, you have included a 'requirements.txt' file in the application bundle with 'pandas' listed as a dependency. What is the MOST likely cause of this error, and what steps can you take to resolve it?

• A. Snowflake does not automatically install packages from 'requirements.txt' during packaging. You must manually upload the pandas package to a Snowflake stage and import it within your 'streamlit.py' file.
• B. The 'requirements.txt' file needs to be converted to a 'setup.py' file for Snowflake to recognize the dependencies correctly.
• C. Snowflake automatically installs all packages listed in 'requirements.txt' when the application is packaged, so the issue must lie elsewhere, such as a typo in the package name.
• D. The 'requirements.txt' file is not being correctly processed by the Snowflake Native App build system. Ensure the file is in the root directory of the application bundle and is properly formatted.

An application provider creates a Snowflake Native App that needs to access sensitive data within the consumer's account. The provider has already defined an APPLICATION ROLE named Which of the following combination of actions are required to grant the 'app_role' the ability to select data from a table named 'customer_data' in schema of database 'consumer_db' within the consumer's account? (Choose two)

• A. Grant the 'IMPORTED PRIVILEGES' privilege on the 'consumer_db' database to the 'APPLICATION PACKAGE.
• B. Grant the 'USAGE privilege on the schema to the 'APPLICATION ROLE app_role' .
• C. Grant the 'SELECT privilege on the 'consumer_db.app_schema.customer_data' table to the 'APPLICATION ROLE app_role'.
• D. Grant the 'SELECT privilege on the 'consumer_db.app_schema.customer_data' table to the 'APPLICATION PACKAGE
• E. No privileges are needed as the Application already installed in consumer account.

You are developing a Snowflake Native Application that needs to securely access data in a consumer's account. The application requires the consumer to grant specific privileges to a custom role created and managed within the application package. Which of the following steps are absolutely essential for correctly configuring the application package to ensure this secure data access, and how should the setup script handle the privilege granting?

• A. Define the required privileges in the application package manifest (snowflake.yml). Ensure that the setup script includes commands to grant the specific privileges on the consumer's data to the application's custom role, using 'GRANT ON TO ROLE within an EXECUTE IMMEDIATE statement in the setup script. The setup script should also define the application role.
• B. Utilize a service account to access the data, providing the service account's credentials as part of the application setup. The application will then use the service account to access the consumer's data.
• C. Create a share from the provider account to the consumer account, granting the consumer read access to the application package's data. Then, use a setup script to grant ownership of the data to the application role after installation.
• D. The consumer must manually grant the necessary privileges to the application's role after the application is installed, as the application package cannot automatically modify the consumer's security settings.
• E. Grant the 'USAGE privilege on the consumer's database and schema to the application's role within the setup script. This implicitly allows the application to read all data within that schema.