Pass with professional NAS-C01 actual quiz materials

Snowflake NAS-C01 Exam Overview:

Snowflake NAS-C01 Exam Syllabus Topics:

Snowflake SnowPro Specialty - Native Apps Sample Questions:

1. You are developing a Snowflake Native Application that utilizes the 'APPLICATION ROLE' within a secure data sharing context. The application needs to perform different actions based on the role assigned to the user accessing the shared dat a. Consider the following code snippet in a stored procedure:

Which of the following modifications is necessary for the stored procedure to correctly utilize the 'APPLICATION ROLE and function as intended within the context of a Snowflake Native Application and a share?

A)

B) No modification is needed. The function will automatically return the active 'APPLICATION_ROLE' within the share.
C)

D)

E)

2. You are developing a Snowflake Native Application that utilizes Snowpark Container Services (SPCS). Your application requires a Compute Pool configured with autoscaling capabilities to handle fluctuating workloads. However, you want to minimize costs when the application is idle. Which of the following considerations are MOST important when defining the 'MIN NODES' and 'MAX NODES' parameters for your Compute Pool, along with the 'AUTO RESUME setting?

A) Compute Pool autoscaling is managed entirely by the underlying container orchestration system and Snowflake only provides basic resource allocation. The 'MIN NODES' and 'MAX NODES parameters are advisory only.
B) Setting to 0 allows the Compute Pool to scale down completely when idle, eliminating costs. 'AUTO_RESUME should be set to TRUE to automatically start the pool when a new request is received.
C) The 'AUTO_RESUME parameter is irrelevant as the compute pool automatically scales based on current workload. should be set to the expected average workload.
D) The optimal configuration depends on the balance between cost and performance. A higher 'MIN_NODES' value provides faster initial response times but incurs higher costs when idle. 'AUTO RESUME should be set to TRUE if you want the pool to automatically restart based on incoming requests.
E) Setting to a non-zero value ensures that some resources are always available, leading to faster response times for initial requests. 'AUTO RESUME' should be set to FALSE to prevent unnecessary resource usage.

3. You are designing the setup script for a Snowflake Native Application. This application requires the creation of several views based on data residing in the consumer's account. These views need to be dynamically created based on a configuration table that is part of your application package. The configuration table contains view names, the underlying tables in the consumer's account, and the specific SQL queries for each view. The design must adhere to best practices for security and data governance. Which approach would you use for designing this setup script, considering security vulnerabilities and execution context?

A) Use a stored procedure, owned by the application, to dynamically generate and execute the 'CREATE VIEW statements. The stored procedure reads the view definitions from the configuration table and creates the views using dynamic SQL.
B) Use dynamic SQL generation with proper escaping functions (e.g., to prevent SQL injection. Store the generated SQL in a temporary table, and then execute each statement from the temporary table using 'EXECUTE IMMEDIATE
C) Directly construct and execute the 'CREATE VIEW' statements within the setup script using string concatenation, reading the view definitions from the configuration table. This minimizes code complexity and ensures immediate view creation.
D) Employ parameterized SQL (using '?' 7 placeholders) within the 'CREATE VIEW' statements, binding the view names and queries read from the configuration table. Execute these statements using 'EXECUTE IMMEDIATE to prevent SQL injection vulnerabilities.
E) Create a series of static 'CREATE VIEW' statements within the setup script, each targeting a predefined table in the consumer's account. The application will handle data filtering within these views.

4. You are developing a Snowflake Native Application that uses Streamlit to provide a user interface for data analysts. The application accesses sensitive customer data residing in a managed database. To enhance security, you want to implement row-level security (RLS) based on the user's role. You have the following Streamlit code snippet:

Which of the following actions should you take to implement RLS in the Snowflake Native App, ensuring only authorized users can view specific rows of 'customer_data'? Assume the already contains necessary credentials. Choose the most secure and efficient method.

A) Use Snowflake's masking policies combined with a secure view. The masking policy reveals data based on the user's role. Grant the Streamlit application's role access to the secure view.
B) Modify the SQL query within the 'get_data' function to include a 'WHERE clause that filters data based on the current Streamlit user's username obtained using 'st.session_state.user.username' .
C) Create a secure view in Snowflake that implements RLS based on the role of the user executing the query. Grant the Streamlit user access to this view instead of the base table, and modify the 'get_data' function to query the view.
D) Implement RLS directly within the Streamlit application by filtering the 'data' DataFrame based on the user's role before displaying it using 'st.dataframe'. Store user roles in a separate table and fetch them using a different database connection.
E) Implement a custom Python decorator that checks user roles before executing the 'get_data' function. Raise an exception if the user lacks the necessary role.

5. You are developing a Snowflake Native Application that offers a data anonymization service to consumers using Snowpark Container Services. The service accepts a dataset from the consumer's Snowflake account, performs anonymization within the container, and then writes the anonymized data back to a new table in the consumer's account. Which of the following is a correct and secure combination of actions required to successfully achieve this data transfer, assuming the container is already built and pushed to Snowflake's registry? (Select all that apply)

A) The consumer must grant the USAGE privilege on the database containing the table to be anonymized to the application during installation.
B) The application package must contain a setup script that creates a new stage in the consumer's account to facilitate data transfer.
C) The application package owner must grant the 'IMPORTED PRIVILEGES' privilege on the database containing the anonymization logic to the consumer's account before installation.
D) The consumer must grant CREATE TABLE privilege on the database where the anonymized data should be stored to the application's service account via an entitlement.
E) The container service must use Snowflake's internal API to authenticate and authorize access to the consumer's data using a database role assigned via entitlement.

Solutions: