Online Access Free NAS-C01 Exam Questions

You are preparing to publish a Snowflake Native Application on the Snowflake Marketplace. Your application requires several external functions (UDFs) that need to be securely called. Which of the following steps are crucial to correctly configure these external functions within your application package to ensure they function as expected after installation by consumers?

• A.Grant the ' USAGE privilege on the API integration object to the application role used by the consumer. This will be automatically inherited when the consumer installs the application.
• B.Set the application version as 'TRUSTED' using the 'ALTER APPLICATION VERSION' command after installation.
• C.Provide clear documentation for the consumer to manually configure the API integration object in their Snowflake account after installing the application.
• D.Ensure that the external functions are defined using the 'SECURE' keyword and that the API integration object associated with the functions is included in the application package setup script.
• E.Define external functions with 'VOLATILE keyword to bypass security restrictions. As it needs to be executed during installation, define it in application setup scripts and the API integration object's details will be automatically configured at the consumer end.

You are building a Snowflake Native Application that provides a data transformation service. You want to allow consumers to configure certain aspects of the transformation pipeline (e.g., the name of the target table, specific transformation logic). What are the recommended approach(es) to allow consumers to customize the application's behavior without directly modifying the application code?

• A.Utilize Snowflake's Secure UDFs (User-Defined Functions) and allow consumers to provide their own UDFs as configuration.
• B.Expose parameters within the setup script and stored procedures that consumers can set during application installation or execution.
• C.Implement a configuration table within the application's schema that consumers can update with their desired settings. The application code reads these settings at runtime.
• D.Include default configurations within a file on the external stage, which consumers are expected to download, modify, and then upload back as a different file for the application to load.
• E.Require consumers to fork the application's repository and modify the SQL code directly.

A Snowflake Native App developer wants to utilize a README.md file within their application package. Which of the following statements accurately describe the supported usage and purpose of the README.md file in this context?

• A.The README.md file must adhere to a specific Snowflake schema for metadata to be automatically extracted and displayed within the consumer's Snowflake environment post-installation.
• B.The README.md file can be programmatically accessed within the application logic using a Snowflake-provided API to dynamically generate documentation for the consumer.
• C.The README.md file is a Markdown formatted file and used only for internal documentation by the app developer and is not exposed to consumers through any Snowflake interface.
• D.Snowflake automatically renders the READMmd file as part of the application s user interface within the consumer s account, allowing them to view documentation directly from Snowflake.
• E.The README.md file is automatically displayed to consumers within the Snowflake Marketplace listing, providing a detailed overview of the app's functionality and installation instructions.

You are developing a Snowflake Native Application that requires access to a specific stage in the consumer's account to read configuration files. The application needs to be able to create temporary files in the same stage during its execution. Which set of privileges needs to be granted on the stage to the application's service account, and how do you grant them?

• A.Grant READ and WRITE privileges on the stage using Snowsight, and ensure the application uses a service integration with appropriate permissions.
• B.Grant OWNERSHIP on the stage to the application's service account. No other privileges are required.
• C.Grant USAGE and READ privileges on the stage and CREATE FILE on the schema containing the stage to the application's service account using Snowsight.
• D.Grant READ and WRITE privileges on the stage to the application's service account using the 'GRANT USAGE ON INTEGRATION TO APPLICATION command.
• E.Grant USAGE on the database, USAGE on the schema containing the stage, and READ and WRITE privileges on the stage to the application's service account using a combination of SQL commands and Snowsight.

You are developing a Snowflake Native Application that requires secure access to external services for data enrichment. You choose to implement an External Function with API Integration. Which of the following security best practices are MOST important to implement when configuring the API Integration and the External Function to minimize security risks?

• A.Disable network policies on the API Integration to avoid accidental blocking of traffic.
• B.Use the parameter in the API Integration to restrict access to only the trusted IP addresses of the external service.
• C.Store any sensitive credentials required by the external service directly in the External Function's code body for easy access.
• D.Configure 'AWS IAM ROLE ARNS or similar parameters (depending on cloud provider) to grant Snowflake the least privilege access to the specific resources on the external service required by the function.
• E.Grant usage on the API integration to PUBLIC role to allow all users to invoke the external function.