最も有効な NAS-C01 試験参考書

You are designing a Snowflake Native App that processes sensitive customer dat a. To comply with data residency requirements, you need to ensure the application processes data exclusively within the consumer's Snowflake account and does not transmit data outside.
Which features of the Snowflake Native App Framework support this requirement? (Select all that apply)

• A. Snowflake Marketplace: Provides a secure and governed platform for distributing the application without requiring direct access to the consumer's account.
• B. Application Packages: Package the entire application including code and configuration, ensuring data locality and not data transfer outside environment
• C. External Functions: Enables the application to call external services for data processing and enrichment, ensuring all data remains within the Snowflake environment.
• D. Stored Procedures: Allows the application to execute custom logic within the consumer's Snowflake environment, processing data locally.
• E. Secure Data Sharing: Allows the application to access data directly within the consumer's account without copying or moving it.

A Native App provider has released a new version of their application. After installation, some consumers report encountering 'SQL compilation errors' when using certain features that rely on Java UDFs. The provider has thoroughly tested the application and cannot reproduce the error in their development environment. What are the MOST LIKELY causes of this issue and how can the provider systematically troubleshoot and resolve it? (Select TWO)

• A. The consumer's Snowflake account has insufficient compute resources to execute the Java UDFs. The provider should instruct the consumer to upgrade their virtual warehouse size.
• B. The provider's development environment is using a newer version of the Snowflake Java runtime than the consumer's environment. The provider should downgrade their development environment to match the oldest supported version and re-test the application.
• C. The Java UDFs are using external libraries that are not compatible with the consumer's Snowflake environment or are missing entirely. The provider should explicitly declare all dependencies in the application manifest and ensure they are properly packaged and deployed.
• D. Consumer-side firewall rules are blocking access to external resources used by the Java UDF. The provider should thoroughly document the necessary network configurations for consumers.
• E. The Java UDFs are encountering data type mismatches due to differences in regional settings or data formats between the provider's and consumer's environments. The provider should enforce strict data validation and type conversion within the UDFs.

You are designing a Snowflake Native Application that allows consumer accounts to customize certain aspects of its behavior. Specifically, the application needs to support consumer-defined thresholds for alerting, stored as parameters. You want to allow consumers to set these thresholds through the 'ALTER APPLICATION' command. How can you achieve this MOST effectively while ensuring that these parameters are securely managed and accessible within your application code?

• A. Define parameters within the application manifest (manifest.yml) with mutable set to True. Use the SYSTEM$GET PARAMETER function within your application logic to retrieve these consumer-configurable values.
• B. Use 'ALTER APPLICATION' to modify session variables, which are then accessible within the application code via 'SYSTEM$GET_VARIABLE'.
• C. Use 'ALTER APPLICATION' to directly modify values within a consumer-managed table, reading values from that table in your stored procedures.
• D. Define parameters within the application manifest (manifest.yml) with mutable set to True. Use the APPLICATION PARAMETER function within your application logic to retrieve these consumer-configurable values.
• E. Define parameters using the 'USING' clause during application deployment in the provider account. Then, use 'ALTER APPLICATION' to modify these parameters in the consumer account.

You are developing a Snowflake Native Application that offers a data anonymization service to consumers using Snowpark Container Services. The service accepts a dataset from the consumer's Snowflake account, performs anonymization within the container, and then writes the anonymized data back to a new table in the consumer's account. Which of the following is a correct and secure combination of actions required to successfully achieve this data transfer, assuming the container is already built and pushed to Snowflake's registry? (Select all that apply)

• A. The consumer must grant CREATE TABLE privilege on the database where the anonymized data should be stored to the application's service account via an entitlement.
• B. The container service must use Snowflake's internal API to authenticate and authorize access to the consumer's data using a database role assigned via entitlement.
• C. The consumer must grant the USAGE privilege on the database containing the table to be anonymized to the application during installation.
• D. The application package must contain a setup script that creates a new stage in the consumer's account to facilitate data transfer.
• E. The application package owner must grant the 'IMPORTED PRIVILEGES' privilege on the database containing the anonymization logic to the consumer's account before installation.

A Native Application is being developed that requires access to the consumer's Snowflake account for billing purposes. The application needs to record the query history of the consumer's account to estimate resource usage. Which is the MOST secure and efficient method for the Native App to access this data, minimizing the permissions granted to the app and considering the governance aspects?

• A. Grant the ' USAGE privilege on the 'SNOWFLAKE' database to the Native App's service account, allowing it to query all tables and views in that database.
• B. Grant the ' MONITOR USAGE' privilege to the Native App's service account, allowing it to query the view.
• C. Grant the 'ACCOUNTADMIN' role to the Native App's service account. This provides full access to the account's query history.
• D. Create a stored procedure within the Native App that executes as the 'OWNER and queries the view. The stored procedure is granted to the Native App's service account with 'EXECUTE privileges.
• E. Use the 'READ SESSION' privilege to allow the application to read the current session context and infer the resource usage from it.