Snowflake NAS-C01 Exam Syllabus Topics:

Snowflake SnowPro Specialty - Native Apps Sample Questions:

1. Consider a scenario where a Snowflake Native Application contains a task named "daily data sync'. This task needs to be executed in the consumer's account. To enable proper monitoring and governance within the consumer's account, the consumer wants to tag the executions of this task. Which of the following actions must the application provider take to ensure that the consumer can successfully tag the 'daily data sync' task executions without compromising the security of the application or requiring the consumer to have elevated privileges on the application database?

A) The provider cannot enable the consumer to tag the task executions without granting elevated privileges on the application database or compromising security; tagging is solely the provider's responsibility.
B) The provider must grant the OWNERSHIP privilege on the task to the consumer's account role, allowing the consumer to set tags directly.
C) The provider must grant the APPLY MASKING POLICY privilege on the task to the consumer's account role, enabling the consumer to configure tags via masking policies.
D) The provider must grant the APPLY TAG privilege on the account to the consumer s account role.
E) The provider must grant the APPLY TAG privilege on the task to the consumer's account role. No other configuration is necessary.

2. You are designing a Snowflake Native App that interacts with sensitive customer dat a. You need to ensure that the application only accesses the data it absolutely needs and adheres to the principle of least privilege. Which of the following strategies are crucial for maintaining data security within your application?

A) Grant the application role the 'OWNERSHIP' privilege on all tables containing customer data.
B) Create specific roles with granular access privileges (e.g., 'SELECT on specific columns) and grant these roles to the application's managed service account.
C) Utilize Snowflake's secure UDFs with invoker's rights to perform data transformations and access control based on the user's role.
D) Implement data masking policies to redact sensitive information before it's accessed by the application.
E) Store sensitive customer data directly within the application package to avoid external access.

3. You are building a Snowflake Native App that needs to store configuration settings specific to each consumer account. These settings will influence the behavior of the application. Which of the following methods is the MOST secure and recommended approach for managing these configuration settings within the Snowflake Native App Framework?

A) Store the configuration settings directly within the application's code. This allows for easy access and modification during development.
B) Utilize parameters defined in the 'setup.sql' script and accessible via SQL commands like 'SYSTEM$GET APP PARAMETER. This allows consumers to configure the application during installation.
C) Use external configuration files stored in an Amazon S3 bucket and accessed via external functions. This provides flexibility and scalability.
D) Hardcode the configuration settings directly into the manifest file as environment variables.
E) Store the configuration settings in a public database table within the application's share. This makes the settings easily accessible to all consumers.

4. You are developing a Snowflake Native App that needs to be configurable by the consumer during installation. You define parameters in the 'manifest.ymr file. During application installation, the consumer provides values for these parameters. How can you access these parameter values within your application's setup script ('setup.sql')?

A) Use the ' SYSTEM$GET PARAMETER function within the 'setup.sqr script, passing the parameter name as an argument. This function retrieves the current value of the specified parameter for the application.
B) You must use the 'GET_DDL' function to retrieve the parameter values from the application object definition. The returned DDL string will contain the parameter values, which you need to parse.
C) Parameter values are automatically available as global variables within the 'setup.sqr script. You can reference them directly by their name as defined in the 'manifest.yml'.
D) Parameter values are stored in a dedicated table automatically created by Snowflake during application installation. You can query this table using standard SQL to retrieve the parameter values.
E) Parameter values are passed as arguments to the 'setup.sqr script. You need to define input parameters in the script declaration and then access them by their position or name.

5. You are designing a Snowflake Native Application that provides a data enrichment service. Consumers provide their data via a secure data share, and your application enriches it with external datasets within your provider account. To ensure data security and prevent accidental data leakage, which of the following strategies should you implement when designing the application's logic (select all that apply)?

A) Create a dedicated service user within your provider account with restricted privileges to access the shared data. The application's logic should execute using this service user's context.
B) Use fully qualified names when referencing objects within the consumer's shared data (e.g.,
C) Grant the consumer's application role 'OWNERSHIP' privilege on the data share. This simplifies data management for the consumer.
D) Log all data access and modifications performed by the application, including the user context (application role), timestamps, and objects accessed, for auditing purposes.
E) Implement strict input validation and sanitization of the data received from the consumer to prevent SQL injection or other malicious attacks that could lead to data exfiltration.

Solutions: