Free Snowflake NAS-C01 Exam Dumps Questions & Answers

You are developing a Snowflake Native Application that integrates with an external API to enrich data within the consumer's account. You need to design the setup script to handle API credentials securely and ensure that consumers can configure their own API keys. Which of the following methods is the MOST secure and recommended approach for managing API credentials within a Snowflake Native Application?

• A.  Use Snowflake's secret management capabilities (e.g., SECRETS feature) to store the API credentials securely, allowing consumers to create and manage their own secrets and reference them within the application.
• B.  Store the API credentials in a publicly accessible stage and instruct consumers to download and configure them manually.
• C.  Hardcode the API credentials directly into the setup script and distribute them to consumers.
• D.  Store the API credentials as environment variables within the application's deployment environment.
• E.  Encrypt the API credentials using a simple symmetric key and include the decryption key in the setup script.

You are developing a Snowflake Native Application for a financial institution that needs to be deployed across multiple cloud providers (AWS, Azure, GCP) to minimize latency for their global customer base. The application relies on a secure and consistent method for accessing external services for real-time market dat a. Which of the following strategies would BEST ensure cross-cloud functionality and adherence to Snowflake Marketplace best practices for secure data access?

• A.  Use Snowflake's Network Rules feature in conjunction with external functions that leverage API integration objects, storing the secret material necessary to authenticate with the external API. Leverage Snowflake's built-in cross-cloud replication capabilities to ensure data consistency.
• B.  Use Snowflake's external functions with secure OAuth authentication to access the external services, leveraging Snowflake's built-in cross-cloud replication capabilities to ensure data consistency.
• C.  Hardcode cloud-specific endpoint URLs for the external services in your application code, using conditional statements to determine the correct endpoint based on the Snowflake cloud region.
• D.  Create separate versions of the Native Application for each cloud provider, each with customized configurations for accessing the external services. Publish each version separately on the Snowflake Marketplace.
• E.  Package the external service client libraries directly within the Native Application and configure the application to dynamically discover the nearest available endpoint at runtime, storing credentials within a Snowflake secret.

You are developing a Snowflake Native App that requires specific privileges to access data in the consumer's account. In your manifest file, you want to request these privileges. Which of the following statements best describes the correct way to request these privileges within the 'privileges' section of the manifest file?

• A.  Privileges are managed entirely through the application's setup scripts. The manifest file does not play a role in privilege management.
• B.  Use the 'allowed_roles' section in the manifest to list the roles that are allowed to access data in the consumer's account, Snowflake automatically grants necessary privileges to these roles.
• C.  Specify a list of required privileges under the 'privileges' section, detailing the specific objects (databases, schemas, tables) and actions (SELECT, INSERT, UPDATE) the application needs to perform.
• D.  Privileges are automatically granted to the application based on the roles specified in the application code. No explicit declaration is needed in the manifest file.
• E.  You can only request privileges for future grants. Existing object grants are not supported in manifest file.

You are developing a Snowflake Native Application that processes sensitive dat a. During the application lifecycle management, including version updates, what steps should you take to ensure the data security and privacy of the consumers' data, especially considering that your development team might need access to a subset of the data for testing?

• A.  Create a separate Snowflake account for testing and populate it with synthetic data that mimics the structure and characteristics of the consumer's data.
• B.  Utilize Snowflake's external functions to process the data in a secure enclave outside of Snowflake, minimizing the risk of data exposure. Ensure external functions called are encrypted.
• C.  Use Snowflake's data classification features to identify sensitive data and implement row-level security to restrict access to the development team.
• D.  Implement data masking and anonymization techniques to create a sanitized test dataset derived from the consumer's data. Provide the development team with access only to the masked data, via data sharing from the producer to consumer account.
• E.  Grant the development team direct access to the consumer's data warehouse to facilitate testing. Ensure proper auditing is enabled.

A software company, 'Datalnsights', is developing a Snowflake Native Application that requires restricted access to a source data table in the consumer's account. Datalnsights wants to ensure that only the application can access the data, and the consumer cannot directly query it. What is the MOST secure and recommended approach Datalnsights should use within their application package to grant access?

• A.  Granting 'SELECT privilege directly on the source data table to the application role.
• B.  Using a secure UDF within the application to access the source data table, ensuring data masking and redaction, with only the UDF being granted SELECT privileges on the table.
• C.  Creating a secure view on top of the source data table and granting 'SELECT privilege to the application role on the view.
• D.  Granting the ' USAGE privilege on the database and schema containing the source data table directly to the application role.
• E.  Exposing the table directly through the application's setup script using 'GRANT SELECT ON TABLE TO APPLICATION ROLE app_role' .