Study with NAS-C01 most valid questions & verified answers

You are managing a Snowflake Marketplace listing for your native application. You need to update the application logic and schem a. Which of the following actions is the correct sequence to perform the update in a non-breaking way for existing consumers?

• A. Modify the existing application's code and schema, create a new listing for the updated version, and remove the old listing.
• B. Directly modify the application's code and schema in the production environment, then announce the changes to consumers.
• C. Create a new version of the application with the updated logic and schema, test it thoroughly, and then release it as an upgrade on the Marketplace.
• D. Deprecate the existing version of the application and force all consumers to upgrade to the new version within 24 hours.
• E. Create a patch version with bug fixes and create a new minor version with schema changes, and release it as an upgrade on the Marketplace.

A Snowflake Native App developer is building an application package that contains multiple versions. They want to ensure that a consumer upgrading from version 1.0 to version 2.0 MUST execute a specific set of SQL scripts as part of the upgrade process to migrate existing application dat a. Which Snowflake Native App feature should they leverage to achieve this?

• A. A version change handler defined within the application package.
• B. Snowflake Pipes to load and transform the existing data.
• C. A post-install script defined in the setup script.
• D. Snowflake Streams and Tasks to monitor the application version and trigger the migration scripts automatically.
• E. Application Role-Based Access Control (RBAC)

A Snowflake Native App includes a managed task 'app_db.app_schema.daily_data_processing'. You, as the application provider, need to ensure that consumer accounts can only execute this managed task and have no other privileges. You also need to implement robust error handling to log any failed execution attempts within the consumer account. Which of the following SQL statements, when executed within the application's installation script, provides the most secure and complete solution to achieve these requirements, including error logging within the consumer account (assuming an existing table exists)?

• A. GRANT EXECUTE MANAGED TASK ON MANAGED TASK TO APPLICATION ROLE app_public;
• B.
  
• C. GRANT EXECUTE MANAGED TASK ON MANAGED TASK TO APPLICATION ROLE app_public WITH GRANT OPTION;
• D.
  
• E.
  

You are creating a Snowflake Native App using the Native Apps Framework. Your application needs to perform a task that must execute on a regular schedule (e.g., daily data refresh). Which Snowflake feature(s) can you leverage to achieve this, and what considerations are important when using them within the Native App context?

• A. Snowflake Pipes are the preferred method for scheduled data ingestion within Native Apps, as they are designed for continuous data loading from external sources.
• B. Use Snowflake Alerts with a cron schedule to trigger a stored procedure owned by the APPLICATION role. The procedure executes any scheduled task.
• C. Snowflake Streams should be used to track data changes and trigger the refresh process. The Stream must be defined in the application package, and a separate task can be configured to consume the stream data.
• D. Snowflake Tasks can be used directly within the Native App, but you must ensure the task definition is part of the application package and the task is resumed upon installation in the consumer account. The task must use the APPLICATION role.
• E. You should implement an external scheduler (e.g., AWS Lambda, Azure Functions) that triggers a Snowflake Stored Procedure via the Snowflake API. The Stored Procedure should be owned by the APPLICATION role.

You are tasked with developing a Snowflake Native App that leverages a Partner provided secret using an external function which will send the processed data to their system. You plan to store the OAuth information to be used by the external function in a secret object managed by Snowflake. Which of the following steps are NECESSARY to ensure secure and correct setup of this app? Select all the options that apply.

• A. Grant the 'IMPORTED PRIVILEGES privilege on the database containing the Secret object to the application role. GRANT IMPORTED PRIVILEGES ON DATABASE TO APPLICATION ROLE '
• B. Store the OAuth token directly within the external function's definition as a variable, ensuring it is encrypted using AES ENCRYPT before deployment.
• C. Create a Secret object in Snowflake to store the OAuth token securely and reference it within the external function using 'SYSTEM$GET_SECRET function. Ensure proper access rights on the Secret object.
• D. Grant the 'USAGE privilege on the API integration to the application role if the external function requires an API integration. GRANT USAGE ON API INTEGRATION TO APPLICATION ROLE
• E. Bypass storing the OAuth token in Snowflake and instead rely on passing it as a parameter to the external function from the consumer account, documented clearly for the consumer's security responsibilities.