Snowflake NAS-C01 : SnowPro Specialty - Native Apps

You are developing a Snowflake Native Application that processes sensitive customer dat a. You want to ensure that your application has undergone a thorough security review before it is listed on the Snowflake Marketplace. Which of the following steps are mandatory to ensure that your application meets Snowflake's security requirements for a secure native application?

• A. Obtain a third-party penetration test report for the application's code and infrastructure.
• B. Submit your application for Snowflake Native App Security Review by filling out the security review intake form with all the necessary documentation.
• C. Implement data masking policies on all sensitive data within the application.
• D. Enforce multi-factor authentication for all users accessing the application.
• E. Ensure all sensitive data is encrypted at rest and in transit using Snowflake's built-in encryption features.

A Snowflake Native App provider is using a Snowpark Python UDF to process data before writing it to an event table for consumption by consumer applications. The UDF fails intermittently with a 'Java heap space' error. Which of the following strategies are MOST effective in mitigating this error?

• A. Increase the warehouse size used by the consumer application instance, as this controls the memory available to the UDF during event processing.
• B. Implement batch processing within the UDF to process data in smaller chunks, reducing the memory footprint at any given time.
• C. Optimize the Python UDF code to use more memory-efficient data structures and algorithms, reducing overall memory consumption.
• D. Configure the event table function to use a larger warehouse size using the EXECUTE AS OWNER clause.
• E. Switch to a Java UDF instead of a Python UDF, as Java UDFs inherently have better memory management in Snowflake.

A data science team is developing a Snowflake Native Application that provides predictive analytics for financial institutions. The application requires access to usage data from consumer accounts, but only aggregated and anonymized data should be exposed. As the application provider, you need to grant the necessary privileges while adhering to the principle of least privilege. Which combination of global privileges and application logic will achieve this?

• A. Grant the ACCOUNTADMIN role to the application and rely on the application code to filter and anonymize the data.
• B. Grant the READ global privilege on the account metadata and use Snowflake's masking policies within the application to anonymize sensitive data.
• C. Grant the IMPORTED PRIVILEGES global privilege on the account and rely on data sharing agreements to control access to the aggregated and anonymized data.
• D. Grant the USAGE global privilege on the account and implement stored procedures within the application that perform the aggregation and anonymizatiom
• E. Create a custom role with the MONITOR USAGE global privilege, grant this role to the application, and use secure views within the application to expose only the aggregated and anonymized data.

You are packaging a Snowflake Native App that includes a file. During the packaging process, you encounter an error stating that a required Python package, 'pandas', is not found. However, you have included a 'requirements.txt' file in the application bundle with 'pandas' listed as a dependency. What is the MOST likely cause of this error, and what steps can you take to resolve it?

• A. Snowflake does not automatically install packages from 'requirements.txt' during packaging. You must manually upload the pandas package to a Snowflake stage and import it within your 'streamlit.py' file.
• B. The 'requirements.txt' file needs to be converted to a 'setup.py' file for Snowflake to recognize the dependencies correctly.
• C. Snowflake automatically installs all packages listed in 'requirements.txt' when the application is packaged, so the issue must lie elsewhere, such as a typo in the package name.
• D. The 'requirements.txt' file is not being correctly processed by the Snowflake Native App build system. Ensure the file is in the root directory of the application bundle and is properly formatted.

You are preparing a Snowflake Native Application for its initial release. You have a 'setup.sqP file that creates necessary tables and roles. You are also planning for future updates. Which of the following practices will BEST ensure smooth, version-upgrade compatible deployments for your application's consumers?

• A. Always drop and recreate all application objects in each new version's 'setup.sqr to ensure a clean slate.
• B. Include detailed comments in 'setup.sql' explaining the purpose of each SQL statement and the logic behind schema changes.
• C. Use stored procedures within 'setup.sqr to encapsulate schema changes and data migrations, making them idempotent.
• D. Avoid using 'CREATE OR REPLACE TABLE in 'setup.sqr and always use 'CREATE TABLE IF NOT EXISTS.
• E. Use a consistent naming convention for all application objects and clearly document any breaking changes in release notes.