Snowflake SnowPro Specialty - Native Apps : NAS-C01

You are developing a Snowflake Native Application package that provides a set of UDFs for data transformation. The UDFs require specific Snowflake privileges to access data in consumer accounts. Which of the following methods can ensure your application has the necessary privileges when installed in a consumer account? (Choose all that apply)

• A. Leverage 'GRANT APPLICATION ROLE ... ON ..: statements in the setup script to grant the APPLICATION role the required privileges.
• B. Create a separate role in the consumer account and grant the necessary privileges to that role. Have the application assume this role.
• C. Use 'GRANT OWNERSHIP' to grant the APPLICATION role ownership of the target objects in the consumer account.
• D. Instruct consumers to manually grant the necessary privileges to the APPLICATION role after installation.
• E. Request the required privileges in the application package manifest file ('manifest.yml'

A Snowflake Native App developer is creating a new application database. They need to ensure that only the application itself and designated roles within the provider account can access the database. Which of the following CREATE DATABASE statements would BEST achieve this, adhering to best practices for application isolation and security?

• A.
  
• B.
  
• C.
  
• D.
  
• E.
  

You are developing a Snowflake Native App that requires uploading multiple large data files (each > 50MB) to a stage for processing. Due to network limitations, you need to optimize the upload process. You have already created the stage and have necessary privileges. Which of the following approaches would be most effective for uploading the files efficiently?

• A. Use the 'PUT ' command with the 'PARALLEL' option enabled in SnowSQL.
  
• B. Write a Python script leveraging the Snowflake Connector for Python to upload the files using multi-threading or asynchronous operations.
• C. Utilize Snowflake's internal staging using 'PUT command on Internal stage for smaller file and external stage for larger file and then copy the larger file from external to internal by referencing file URL.
• D. Use the Snowflake Visual Studio Code (VS Code) extension's built-in file upload feature, which automatically handles parallel uploads.
• E. Compress the files into a single ZIP archive before uploading using the 'PUT' command.
  

You're developing a Snowflake Native App. Part of your application logic involves using a UDF (User-Defined Function) to perform complex calculations on data residing in a table within the consumer's Snowflake account. Which of the following statements correctly describes how you would package and deploy this UDF within your Native App using the application package?

• A. You must create the UDF within a schema in your application package. No additional privileges need to be granted, as the application role automatically has all necessary privileges within the application's namespace.
• B. You must create the UDF within a schema in your application package, and grant USAGE privilege on the schema to the application role. The consumer will automatically be granted EXECUTE privilege on the UDF.
• C. The UDF definition must be created as an external function, pointing to an external API endpoint that your application controls, enabling the UDF logic to be executed outside of the consumer's Snowflake environment.
• D. The UDF definition must be created directly within the consumer's account after the application is installed, as UDFs cannot be included in the application package.
• E. You must create the UDF within a schema in your application package, and grant USAGE privilege on the schema to the application role. The application code can then execute the UDF without any further privilege grants within the consumer account, and the UDF can be called from SQL or other UDFs using unqualified names.

An application developer is creating a Snowflake Native App that uses a user-defined function (UDF) 'MY UDF' in 'APP SCHEMA' The UDF reads data from a table 'APP TABLE' which is also in "APP SCHEMA'. The application role is 'APP ROLE'. Which of the following 'GRANT' statements are necessary for the application to function correctly within the provider account , assuming the UDF is defined with 'VOLATILE' behavior and is using the caller's rights (i.e., 'EXECUTE AS CALLER)?

• A.
  
• B.
  
• C.
  
• D.
  
• E.