Snowflake NAS-C01 Actual Tests : SnowPro Specialty - Native Apps

A data science team is developing a Native App on Snowflake that requires access to data from multiple customer accounts (Reader Accounts). They need to ensure strict data governance and minimize the risk of data leakage. Which of the following approaches provides the MOST secure and scalable solution for accessing and managing this cross-account data?

• A. Grant SELECT privileges directly to the application role on all relevant tables in the consumer accounts.
• B. Implement a data access service within the Native App that uses external functions to query data from consumer accounts, relying on network policies for security.
• C. Utilize secure data sharing with data clean rooms, exposing the required datasets via views on each data clean room.
• D. Create a shared database from each consumer account containing views over the required tables, granting SELECT privileges on these views to the application role.
• E. Package the data extraction logic directly into the Native App using User-Defined Functions (UDFs) that establish secure connections to each consumer account using separate credentials stored securely within the application package.

You are developing a Snowflake Native App that allows consumers to enhance their existing customer data with enrichment data provided by your app. The app relies on secure data sharing. To minimize data duplication and maximize query performance within the consumer's account, which of the following approaches offers the MOST optimized and secure way to deliver the enrichment data?

• A. Utilize Snowflake Secure Data Sharing to directly share the enrichment data tables from the provider account to the consumer account. The consumer can then create views on the shared tables or query them directly.
• B. Create a staging table in the provider account, load the enrichment data into it, and grant the consumer account SELECT privileges on this staging table. The consumer then creates their own table and copies the data.
• C. Create a secure view within the application package itself, which joins the application's enrichment data with consumer-provided data via an API integration. The consumer queries this secure view.
• D. Use Snowflake Data Marketplace listing to provide enrichment data.
• E. Develop a Snowflake UDF (User-Defined Function) that, when called in the consumer account, retrieves the enrichment data from an external API endpoint (maintained in the provider account) and returns it.

Your Snowflake Native Application persists data within its managed container. You need to implement a robust review process for logging to ensure compliance and prevent the exposure of sensitive information. Which of the following steps should be included in your review process? (Select all that apply)

• A. Granting all application developers full access to all log data to facilitate debugging and troubleshooting.
• B. Automated scanning of log messages for Personally Identifiable Information (PII) using regular expressions or pattern matching, and automatic redaction or masking of detected PII.
• C. Periodic manual reviews of a sample of log messages by a designated security officer to ensure compliance with data privacy policies and identify any potential logging gaps or issues.
• D. Implementation of role-based access control (RBAC) to restrict access to log data based on job function and the principle of least privilege.
• E. Disabling logging in production environments to minimize the risk of data exposure.

You are developing a Snowflake Native Application that leverages Snowflake's Snowpark API for data processing. The application performs a series of complex transformations on a DataFrame. You need to optimize the application's performance and minimize resource consumption. Which of the following strategies would be MOST effective in achieving this goal?

• A. Break down the DataFrame processing into smaller steps and store the intermediate results in temporary tables within the application's sandbox database.
• B. Rely on Snowpark's query optimizer to automatically optimize the entire data processing pipeline without any manual intervention.
• C. Employ lazy evaluation by chaining together transformations on the DataFrame and only triggering execution when the final result is needed.
• D. Use the method frequently to materialize intermediate DataFrames and inspect the data.
• E. Explicitly specify the execution order of the transformations using 'cache()' on each intermediate DataFrame to force immediate materialization.

You are developing a Snowflake Native Application intended for the Snowflake Marketplace. The application provides data transformation services, leveraging external functions (UDFs) that invoke a REST API hosted on AWS Lambd a. You need to ensure the secure and compliant invocation of this external API from your application while adhering to Snowflake's best practices. Which of the following steps represent the MOST secure and recommended approach for configuring and invoking the external function?

• A. Expose the AWS Lambda function publicly with no authentication. Configure the external function in Snowflake to point to the public Lambda URL. Document to consumers that the API has no security.
• B. Create an API integration object in Snowflake that stores the AWS Lambda function's URL and credentials (API key) directly within the integration. Grant the necessary permissions to the application's roles to use the API integration. Define the external function to call the Lambda function URL directly, referencing the API key from the integration object.
• C. Create an API integration object in Snowflake, configuring a secure authentication mechanism such as AWS IAM roles or OAuth 2.0. Define the external function to use the API integration, providing the necessary parameters for authentication. Configure network policies and secrets (using Snowflake secrets) to secure the connection. Ensure your AWS Lambda function validates the incoming request's identity.
• D. Store the AWS Lambda function's URL and credentials (API key) in a configuration table within the Snowflake Native Application package. The external function retrieves these credentials from the configuration table at runtime. Configure an alert if the configuration table is modified.
• E. Use Snowflake's built-in network rules to allow outbound traffic to all AWS IP ranges. Store the API key directly in the UDF definition as an environment variable.