Snowflake NAS-C01 valid exam dumps : SnowPro Specialty - Native Apps

A software company, 'Data Insights Corp', develops a Snowflake Native App. They want to grant users the ability to view limited metadata information about the app's installation without granting them extensive privileges over the app's data or functionality. Which of the following options BEST represent the correct approach for granting Viewer privileges in a Snowflake Native App context to a consumer account user?

• A. Grant the 'APPLY APPLICATION' privilege on the application package to the user role.
• B. Grant the USAGE privilege on the application package to the user role.
• C. Grant the 'SELECT' privilege on all tables within the application instance to the user role.
• D. Grant the 'IMPORTED PRIVILEGES privilege on the application package to the user role.
• E. Create a custom role in the consumer account and grant the 'MONITOR EXECUTION' privilege on the application instance to that role, then grant that role to the user.

You are designing a setup script for a Snowflake Native Application. This script needs to perform the following actions: 1. Create a secure view that exposes a subset of data from a table owned by the provider account. 2. Grant 'SELECT privilege on this secure view to a specific role within the consumer account, but ONLY if that role already exists in the consumer account. 3. Create a UDF in the provider account which calls external function. This UDF needs access to a secret stored in a Snowflake secret object. Which of the following code snippets BEST implements these requirements, ensuring both security and proper privilege management?

• A.
  
• B.
  
• C.
  
• D.
  
• E.
  

You are designing a Snowflake Native App that needs to store temporary state information specific to each consumer account. This state information should not be directly accessible to the consumer but must be persistent across application sessions. Which of the following approaches are valid and recommended for storing this data?

• A. Store the state information in a private schema within the application package, ensuring that consumers do not have direct access.
• B. Utilize internal stages within the application package to store the state data as files.
• C. Create secured views that expose the state data but control access through application roles.
• D. Create a public schema in the application package and store the state information in tables within that schema. Grant SELECT access to the consumer's account on these tables.
• E. Use external stages connected to a provider controlled AWS S3 bucket or similar.

You are tasked with automating the installation of a Snowflake Native Application across multiple consumer accounts using the Snowflake Marketplace. The installation process must be idempotent (running the installation script multiple times should not cause errors or unexpected behavior). You have the following requirements: 1. Check if the application is already installed. 2. If not installed, install the application from the Marketplace. 3. Grant specific privileges on the installed application to a role within the consumer account. Which of the following Snowflake Scripting (SnowSQL) snippets BEST implements this idempotent installation process? Assume 'application name', 'application _ package', 'consumer role', and 'marketplace listing url' are pre-defined variables.

• A.
  
• B.
  
• C.
  
• D.
  
• E.
  

A Snowflake Native App developer encounters an issue where the application fails to install on a consumer's account due to insufficient privileges. The developer has verified that the necessary privileges are declared in the application. privileges section of the manifest file. However, the installation still fails. What could be the most likely cause of this issue, and how can it be resolved?

• A. The privileges were declared in the manifest file, but were not actually granted to the application role in the provider account before creating the version. Grant the declared privileges to the application role using GRANT ON ACCOUNT TO APPLICATION ROLE and create a new version.
• B. The consumer account has object level grants conflicting with the required grants. Revoke the object level grants and try again.
• C. The privileges declared in the manifest file are not supported by the consumer's Snowflake edition. Review and adjust the required privileges.
• D. The consumer's account does not have the SNOWFLAKE.APP_INSTALLER role enabled. Ensure this role is granted to the appropriate user.
• E. The consumer's account is not on the same Snowflake region as the provider account. Verify and align the regions.