Free Snowflake NAS-C01 Exam Dumps Questions & Answers

You are developing a Snowflake Native Application that interacts with sensitive customer dat a. You want to implement robust security scanning before publishing to the Snowflake Marketplace. Which of the following strategies are MOST effective to detect and prevent potential vulnerabilities before submitting your application, considering limitations on marketplace pre-publication scanning capabilities?

• A.Only use Snowflake provided templates and example codes as these are already pre-approved from security perspectives
• B.Implement a comprehensive CI/CD pipeline that includes static code analysis (SAST) using tools like SonarQube or similar, focusing on SQL injection, cross-site scripting (XSS), and insecure deserialization vulnerabilities. Include unit and integration tests with parameterized inputs. Regularly update dependency versions and scan for known vulnerabilities in third-party libraries included in your application's code (e.g., Python libraries).
• C.Rely solely on Snowflake's built-in scanning during the Marketplace submission process, as it covers all known vulnerabilities.
• D.Employ a third-party penetration testing service to perform a black-box test of the application after deployment in a staging environment but prior to Marketplace submission.
• E.Manually review all code for potential security flaws and ensure adherence to secure coding practices.

You are managing the release of a new version (v2.0) of your Snowflake Native Application that introduces significant schema changes to shared tables accessed by consumer accounts. To minimize disruption during the upgrade, you want to implement a phased rollout while ensuring backward compatibility for consumers who haven't yet upgraded. Which of the following strategies would allow you to achieve this goal effectively? (Select TWO)

• A.Publish v2.0 without any schema changes and rely on consumers to manually migrate their data to new tables after upgrading.
• B.Implement API versioning within your application code and provide compatibility layers to handle requests from consumers running older versions.
• C.Create views on top of the new schema in v2.0 that emulate the old schema from vl .0. Grant consumers 'USAGE' on these views until they upgrade.
• D.Use dynamic SQL within stored procedures to conditionally access either the old or new schema based on the consumer's account ID, identified through a custom configuration table.
• E.Create separate versions of the shared tables for vl .0 and v2.0, using views to present a unified interface. Grant consumer 'USAGE on view after upgrading.

A Snowflake Native Application uses a task 'aggregate_data' to aggregate dat a. This task is owned by the 'app_public' role and executes a stored procedure 'aggregate data proc'. Consumers have reported the task sometimes fails intermittently, citing permission issues, specifically related to accessing a specific table in the consumer account. The application provider has granted 'SELECT' privilege on the table to the 'app_public' role. However, the failures persist. What is the MOST LIKELY cause of the intermittent failures related to executing the task?

• A.The stored procedure is executed with caller's rights (CALLER), but the application role 'app_public' doesn't have the ACTIVATION privilege on the task.
• B.The stored procedure is executed with definer's rights (OWNER), so the privilege check occurs against the application provider's account, not the consumer's account.
• C.The stored procedure is executed with caller's rights (CALLER), but the application role 'app_public' doesn't have sufficient warehouse privileges in the consumer account.
• D.The stored procedure is executed with caller's rights (CALLER), and the 'EXECUTE TASK privilege wasn't granted correctly, which causes the user to randomly lose access on the Snowflake Ul.
• E.The task 'aggregate_data' is executing with definer's rights (OWNER) of the application, so the grant of SELECT privilege to 'app_public' is sufficient, and there is likely an issue with transient network connectivity.

A Snowflake Native App installed in a consumer account needs to access data in a specific table within the consumer's account to perform its core functionality. Which of the following is the MOST secure and recommended way for the application to gain access to this data? (Assume the application developer does not have direct access to the consumer's Snowflake account.)

• A.The application provider requests the 'IMPORTED PRIVILEGES on the consumer account, allowing the application to access any object within the account.
• B.The application prompts the consumer for their Snowflake account credentials and uses those credentials to access the data.
• C.The consumer grants the "GLOBAL' privilege 'SELECT on the table directly to the application package name.
• D.The consumer shares the table directly with the application provider's Snowflake account.
• E.The consumer creates a secure view on top of the table and grants 'SELECT privilege on the secure view to the application's installed application object (application instance).

You are packaging a Snowflake Native App for distribution. Which of the following artifacts are essential components of the application bundle that must be included?

• A.The application's source code (e.g., SQL scripts, Python files).
• B.Binary executables compiled for a specific operating system.
• C.Compiled Java JAR files if the app includes Java UDFs.
• D.The manifest file (snowflake.yml).
• E.The 'setup.sql file containing the application's initialization logic.