Free Snowflake NAS-C01 Exam Dumps Questions & Answers

You are developing a Snowflake Native Application that relies on external Python packages. You've successfully added the necessary packages to the stage associated with your application package using 'snowflake-cli' during development. However, when testing the application in a consumer account, you encounter errors indicating that these packages are not found. What are the most likely reasons for this issue and how can you resolve them?

• A.The 'snowflake.yml' file does not correctly specify the stage where the Python packages are located. Update the 'snowflake.yml' file to include the correct stage URL and ensure the application's setup script creates the stage and uploads the packages.
• B.The consumer account's Python environment is incompatible with the packages used by the application. Instruct the consumer to update their Python environment to match the application's requirements.
• C.The stage is not automatically shared with the consumer account as part of the application package. Ensure that your setup script includes a step to create a share and grant usage on the stage to the consumer account.
• D.The packages were not correctly added to the stage. Verify that the packages are in the stage specified in the 'snowflake.yml' file, and that the application has the necessary permissions to read from the stage within the setup script.
• E.The consumer account does not have access to the Snowflake Marketplace where the packages are hosted. Request the consumer to enable access to the required marketplace listings.

Your Snowflake Native Application, 'Advanced Analytics Suite', utilizes dynamically generated SQL queries based on user input. To prevent SQL injection vulnerabilities when publishing this application, which of the following coding practices should you implement?

• A.Rely solely on Snowflake's built-in security features and assume they automatically prevent all SQL injection attempts.
• B.Use parameterized queries (also known as prepared statements) to separate SQL code from user-supplied data, treating user input as data rather than executable code.
• C.Enclose all dynamically generated SQL queries within a 'TRY...CATCH' block to catch and handle any potential SQL injection errors.
• D.Limit user input to a predefined set of options through dropdown menus or radio buttons to avoid arbitrary SQL code injection.
• E.Sanitize all user inputs using Snowflake's built-in functions like 'regexp_replace' or 'replace' to remove potentially harmful characters or SQL keywords.

You are developing a Snowflake Native App that needs to access a secured external API to enrich customer dat a. The API requires an OAuth 2.0 token stored securely. Which of the following approaches would you use within the application manifest and Snowflake objects to securely store and access this token, minimizing exposure and adhering to best practices?

• A.Use Snowflake's SECRET object type to securely store the OAuth 2.0 token. Reference the SECRET object within the application using PARAMETERS in the manifest and utilize function in application code to retrieve it at runtime.
• B.Store the OAuth 2.0 token as a cleartext secret in a Snowflake stage and access it using external functions.
  
• C.Hardcode the OAuth 2.0 token within the application's stored procedures. This ensures the token is readily available.
• D.Store the OAuth 2.0 token directly in the application's manifest file as a PARAMETER. This simplifies access within the application code.
• E.Store the OAuth 2.0 token as a masked comment within the application's SQL code. This will provide sufficient obfuscation.

You are developing a Snowflake Native Application that requires access to an external API to enrich data within the consumer's account. You need to implement secure authentication and authorization to this external API. Which of the following methods provide the MOST secure and compliant approach for storing and managing the API credentials within your Snowflake Native Application package, while minimizing the risk of exposure to the consumer?

• A.Prompt the consumer to provide the API credentials during the application installation process, storing them in a secure configuration table within their account and referencing them from your application through secure views.
• B.Store the API credentials as environment variables within the Snowflake function code that calls the API. These variables are automatically encrypted by Snowflake.
• C.Store the API credentials in a secure configuration table within your application package, encrypted using a symmetric key managed by Snowflake's KMS.
• D.Store the API credentials as plain text within the setup script, as this script is only executed once during installation and is not accessible to consumers.
• E.Store the API credentials as a secret within Snowflake's Secret Management feature, referencing the secret from within your application's functions. Grant access to the secret through the application role.

You are developing a Snowflake Native App that requires specific privileges to be granted to the consumer account. These privileges are necessary for the app to access and process data within the consumer's Snowflake environment. Which section of the manifest file is primarily used to declare these required consumer-side privileges?

• A.
• B.
• C.
• D.
• E.