Prep and try our NAS-C01 valid and latest training questions & answers

Snowflake NAS-C01 Exam Overview:

Snowflake NAS-C01 Exam Syllabus Topics:

Snowflake SnowPro Specialty - Native Apps Sample Questions:

Question 1

You are developing a Snowflake Native Application that provides data transformation services. You want to provide example SQL scripts to consumers within the application package to showcase how to use the application's functions. Where should these example scripts be stored to ensure they are accessible to consumers upon installation?

A. Store the example SQL scripts as files within the application package itself (e.g., in a 'scripts' directory) and use relative paths to access them from within the application code.
B. Embed the example SQL scripts directly as string literals within the setup script.
C. Store the example SQL scripts in an external stage (e.g., AWS S3) and provide instructions to the consumer to load them.
D. Store the example SQL scripts in a separate stage within the provider account and grant USAGE on the stage to the application role.
E. Store the example SQL scripts in a table within the application database and provide a view to access them.

Question 2

A Snowflake Native Application is designed to process customer data using a series of stored procedures. One of the stored procedures, process data', requires access to a stage named 'customer stage' in the consumer's account to load dat a. The application role 'app_role' is intended to manage all access within the application. However, the procedure fails with a permission error during testing in the consumer environment. Which of the following combination of steps is required to fix the problem?

A. The stored procedure needs to be defined with 'EXECUTE AS CALLER rights to assume the privileges of the role executing the procedure.
B. Grant 'USAGE privilege on the database and schema containing 'customer_stage' to the 'app_role', and grant 'READ privilege on 'customer_stage' to the app_role' .
C. Grant 'READ and ' WRITE privilege on 'customer_stage' directly to the provider account.
D. Grant 'USAGE privilege on the database and schema containing 'customer_stage' to the 'app_role', and create a new role in the consumer account, grant 'READ on the 'customer_stage' to this new role, then grant this new role to 'app_role' .
E. Grant 'USAGE privilege on the database and schema containing 'customer_stage' to the provider account, and grant privilege on 'customer_stage' to the 'app_role' .

Question 3

You are developing a Snowflake Native Application that leverages user-defined functions (UDFs) and stored procedures. During the security scanning process before listing on the Snowflake Marketplace, you encounter a 'Failed to Detect Secrets' error. After investigation, you determine that the error stems from hardcoded API keys within a Python UDF that are being used to interact with a third-party service. Which of the following strategies would be MOST effective and secure to resolve this issue and pass the security scan?

A. Remove the Python UDF entirely and rewrite the logic in SQL stored procedures. Store the API keys as environment variables within the stored procedure's definition.
B. Obfuscate the API keys within the Python UDF using a string manipulation technique. This will make it harder for unauthorized users to discover the keys.
C. Replace the hardcoded API keys with references to Snowflake secrets and grant the necessary privileges to the application role. Access the secrets within the UDF using the 'SYSTEM$GET SECRET function.
D. Encrypt the API keys within the Python UDF using a symmetric encryption algorithm and store the encryption key in a secure string within the application package.
E. Store the API keys in a separate, secured table within the application's data container and access them dynamically within the Python UDF using SQL queries.

Question 4

A Native Application deployed on Snowflake uses a warehouse 'APP WH'. You want to monitor the warehouse usage costs specifically attributed to this application. Which of the following approaches provides the MOST granular and accurate way to track these costs?

A. Create a separate warehouse solely for the application and then examine the 'WAREHOUSE METERING HISTORY view.
B. Examine the 'WAREHOUSE METERING HISTORY view in the 'SNOWFLAKE database without any filtering.
C. Use the view and filter by 'USER_NAME associated with the application role.
D. Tag all queries originating from the application with a specific tag and then filter the 'QUERY_HISTORY view based on this tag and the warehouse name.
E. Rely on the total credits consumed by the account, as the application's usage is insignificant.

Question 5

You're developing a Snowflake Native App that includes a function, , which retrieves sensitive customer dat a. You want to ensure that this data is only accessible by authorized roles within the consumer's account, even after the application is installed. Which of the following strategies are appropriate for securing the application's data and function access? (Choose two)

A. Grant the 'EXECUTE privilege on the function to specific, consumer-defined roles within the consumer's account via the provider's setup script.
B. Use a secure UDF to encapsulate the data retrieval logic, preventing direct access to the underlying tables.
C. Rely solely on the consumer's account administrator to manage access to the function and data after installation.
D. Grant the 'EXECUTE privilege on the function to the 'application role'.
E. Implement a masking policy on the underlying customer data table that restricts access based on the current role.

Solutions: