Study with NAS-C01 Actual Test Questions

A software vendor is developing a Snowflake Native App that provides data enrichment services. As part of the application lifecycle, they need to automate the process of packaging, deploying, and upgrading their application across multiple Snowflake regions. Which of the following approaches provide the MOST efficient and reliable way to automate the deployment and upgrade process for this Native App? Select TWO options.

• A. Use Snowflake's CLI (SnowSQL) in conjunction with scripting tools (e.g., Bash, Python) to automate the creation of application packages and deployments.
• B. Manually create application packages for each region and upload them to Snowflake using the web interface.
• C. Integrate with CI/CD pipelines, creating packages and updating versions to control the application's deployment and upgrade process.
• D. Leverage Snowflake's Native Apps API (if available) to programmatically manage the application package lifecycle.
• E. Create a custom deployment tool that directly manipulates Snowflake's metadata tables to register the application package.

You are developing a Snowflake Native Application package and want to publish it. You have created the necessary setup script, version, and patch. However, you encounter an error during the 'ALTER APPLICATION PACKAGE' command. The error message indicates an issue with the setup script. Identify the most probable cause of this error and the solution.

• A. The setup script lacks necessary privileges on the objects it attempts to create or modify. Grant appropriate privileges to the application package owner role.
• B. The setup script uses unqualified object names (e.g., TABLEI instead of MY DATABASE.MY SCHEMA.TABLEI). Fully qualify all object names in the setup script.
• C. All of the above.
• D. The setup script contains syntax errors. Run the setup script manually in a Snowflake worksheet to identify and correct the errors before creating the application package version.
• E. The setup script attempts to create objects that already exist. Implement IF NOT EXISTS clauses in your CREATE statements to prevent errors.

You are developing a Snowflake Native Application that includes a TASK which calls a stored procedure. The stored procedure interacts with an external API using an external function. The external function is defined with an API integration. To ensure secure access to the external API, how should the privileges be granted so that the TASK can execute successfully and access the external function within the consumer account?

• A. Grant OWNERSHIP on the API integration and EXECUTE TASK privilege on the TASK to the 'app_public' role.
• B. Grant USAGE privilege on the API integration and EXECUTE TASK privilege on the TASK to the 'app_owner' role.
• C. Grant USAGE privilege on the API integration and EXECUTE TASK privilege on the TASK to the 'app_public' role.
• D. Grant USAGE privilege on the API integration to the 'application' role and EXECUTE TASK privilege on the TASK to the 'app_public' role.
• E. Grant USAGE privilege on the API integration to the 'app_public' role and no specific privilege on the TASK, as task execution is implicitly granted.

You are developing a Snowflake Native Application that needs to track usage metrics within consumer accounts. Specifically, you want to log the number of times a particular function within your application is called, and also store certain operational statistics. Which of the following storage options are available to you within the application package to persist these metrics, and what are their implications?
(Select TWO)

• A. Creating permanent tables within the application package using the 'APPLICATION' schema. These tables persist across installations and updates.
• B. Using the 'APPLICATION' schema to create persistent internal stages. Data written to these stages will persist across installations and updates.
• C. Using temporary tables within the application. These tables are automatically dropped at the end of the session.
• D. Leveraging external stages (e.g., AWS S3) to store the metrics. The application would need the necessary IAM roles and stage configuration.
• E. Utilizing User-Defined Functions (UDFs) with external network access to push metrics to an external logging service.

You are developing a Snowflake Native Application that utilizes Snowpark Container Services (SPCS) to run a machine learning model within the customer's Snowflake environment. The application requires access to data stored in a secure stage within the customer's account. Considering security best practices and the limitations of SPCS in Native Apps, what is the most secure and recommended approach to grant the container access to the customer's data stage?

• A. Utilizing a Snowflake external function that proxies the data access request to an external API gateway managed by the provider, which then fetches the data from the secure stage. This keeps the access credentials out of the customer's environment completely.
• B. Packaging the data within the application package during the build process. This eliminates the need for runtime access to the customer's data stage.
• C. Creating a Snowflake UDF that reads data from the secure stage and exposes it through a secure view, which the container accesses using the application's service account.
• D. Creating a Snowflake Stored Procedure with 'EXECUTE AS CALLER rights and granting the application's service account execute access to the stored procedure. The stored procedure reads data from the secure stage and returns it to the container via a secure data sharing mechanism.
• E. Granting the application's service account the 'READ privilege directly on the secure stage. This ensures the container can directly access the data.