NAS-C01 무료 덤프문제 온라인 액세스

A data engineer, Alice, is developing a Snowflake Native Application that exposes a stored procedure, 'calculate_aggregate' , within the application schema 'app_schema'. She initially granted privilege on the application database to the 'analyst_role' and EXECUTE privilege on 'calculate_aggregate' to the same role. Later, due to a security audit, she needs to revoke the 'EXECUTE privilege from 'analyst_role' but wants to ensure users assigned to 'analyst_role' can still access other objects in the application database (but not execute this specific stored procedure). Which of the following actions achieves this goal MOST efficiently and securely?

• A.
• B.
• C.
• D.
• E.

A software vendor is developing a Snowflake Native Application for fraud detection. They plan to distribute it via the Snowflake Marketplace. They have implemented robust data governance policies within their application. What steps must they take to ensure that these policies are enforced and clearly communicated to consumers using the application in their own Snowflake accounts, specifically related to data masking policies?

• A.The vendor must create all masking policies using the WITH MASKING POLICY clause to ensure policies are enforced on the consumer side.
• B.The vendor should create masking policies. Policies created with the 'OWNERSHIP clause will be granted to the application database role. If the application creates and then shares tables, the table owner (database role) will have the ability to grant 'APPLY MASKING POLICY on those objects.
• C.The vendor should create a separate documentation detailing the data governance policies and provide it alongside the Snowflake Marketplace listing. Consumers are responsible for implementing these policies in their accounts.
• D.Data governance policies should be implemented within the application's UI and enforced programmatically through stored procedures.
• E.Data governance policies are automatically inherited by consumer accounts when they install the application.

You have a Snowflake Native Application that utilizes a managed table. After upgrading your application to version 2.0, some users report that they are missing data in the managed table. After investigation, you realize version 2.0 changed the schema of the managed table and also did not properly migrate all the data from old format into new format. Which of the following steps should be taken to address the missing data after upgrading a Snowflake Native Application?

• A.Create a new version 2.1 that includes a data migration script to transfer data from the old schema (as it existed in version 1.0) to the new schema in version 2.0. Use release directives to upgrade affected users to version 2.1 after staging.
• B.Manually insert the missing data into the managed table in each consumer's account, contacting affected users to coordinate the data entry.
• C.Rollback all users to version 1.0 and then perform the schema migration directly on the consumer's account using custom SQL scripts.
• D.Create a new version 2.1. Within version 2.1's setup script, dynamically detect if the application is an upgrade from 1.0 and, if so, execute the data migration script to transfer data from the old schema to the new schema.
• E.Since managed tables are fully managed by Snowflake, contact Snowflake support to initiate a data recovery process in each affected consumer account.

You are developing a subscription-based Snowflake Native Application that offers tiered pricing (Basic, Premium, Enterprise) based on resource consumption (e.g., compute hours, data storage). Consumers select their desired tier during the subscription process. Your application needs to dynamically adjust resource limits based on the selected tier. Which combination of the following actions should you take to correctly implement this?

• A.Store tier-specific resource limits (e.g., compute hours, data storage limits) in a configuration table within the application. Implement stored procedures that enforce these limits during runtime using custom logic.
• B.Use 'ALTER WAREHOUSE commands within the application to dynamically adjust warehouse sizes based on the selected tier, after retrieving the selected tier information via the application's configuration metadata.
• C.Leverage Snowflake's data governance features, creating row access policies for each tier and assigning them based on the consumer's subscription status
• D.Implement role-based access control (RBAC) using different roles for each tier, granting each role appropriate privileges for data access and compute resources. Assign users to roles based on their subscription tier.
• E.Create separate resource monitors for each tier and associate the consumer's account with the appropriate resource monitor based on their selected tier during application installation.

You are developing a Snowflake Native Application using Snowpark Container Services. The application needs to access sensitive data stored in an internal stage, but you want to ensure that only the application's container service can access this stage and no other users or processes. How can you achieve this using network policies and ingress/egress rules?

• A.Create a network policy that allows inbound traffic from all IP addresses and attach it to the account. Grant 'READ and 'WRITE' privileges on the internal stage to the Native App's service account.
• B.Create an egress rule for the container service that allows outbound traffic only to Snowflake's internal IP address range. Create a network policy that allows inbound traffic only from the container service's egress IP address. Grant 'READ and 'WRITE privileges on the internal stage to the Native App's service account.
• C.Create an ingress rule for the container service that specifies allowed inbound connections and egress rule for the container service that only allows outbound traffic to Snowflake's internal endpoint for stage access. Grant 'READ and 'WRITE privileges on the internal stage to the Native App's service account.
• D.Create a network policy that allows inbound traffic only from the specific IP address range of the Snowflake region where the container service is running. Grant READ and 'WRITE privileges on the internal stage to the Native App's service account.
• E.Create an ingress rule for the container service that allows only outbound traffic to the internet. Grant 'READ and 'WRITE privileges on the internal stage to the Native App's service account.