NAS-C01 무료 덤프문제 온라인 액세스

You are developing a Snowflake Native Application for a financial institution that needs to be deployed across multiple cloud providers (AWS, Azure, GCP) to minimize latency for their global customer base. The application relies on a secure and consistent method for accessing external services for real-time market dat a. Which of the following strategies would BEST ensure cross-cloud functionality and adherence to Snowflake Marketplace best practices for secure data access?

• A.Package the external service client libraries directly within the Native Application and configure the application to dynamically discover the nearest available endpoint at runtime, storing credentials within a Snowflake secret.
• B.Hardcode cloud-specific endpoint URLs for the external services in your application code, using conditional statements to determine the correct endpoint based on the Snowflake cloud region.
• C.Use Snowflake's external functions with secure OAuth authentication to access the external services, leveraging Snowflake's built-in cross-cloud replication capabilities to ensure data consistency.
• D.Create separate versions of the Native Application for each cloud provider, each with customized configurations for accessing the external services. Publish each version separately on the Snowflake Marketplace.
• E.Use Snowflake's Network Rules feature in conjunction with external functions that leverage API integration objects, storing the secret material necessary to authenticate with the external API. Leverage Snowflake's built-in cross-cloud replication capabilities to ensure data consistency.

You are developing a Snowflake Native Application designed to be deployed by various consumers from the Snowflake Marketplace. The application interacts with user-provided data through secure UDFs and external functions. To ensure minimal impact and prevent unintended data access, how should you configure the application's security context and privileges when creating the application package?

• A.Define roles within the application and grant 'USAGE' on all schemas and 'SELECT on all tables to these roles.
• B.Grant 'ALL PRIVILEGES on the database containing consumer data to the application role.
• C.Create a separate application role with minimal privileges, and grant only 'USAGES on the database and 'EXECUTE' on the relevant functions to that role. Use 'CALL to grant USAGE on the share.
• D.Use the 'CALL APPLICATION.API GRANT PRIVILEGE command, and grant only the 'USAGE privilege on the shared database containing consumer data, along with the ' EXECUTE privilege on the UDFs and external functions.
• E.Grant OWNERSHIP privilege on all schemas and tables to the application's service account.

A Native Application provider wants to grant the 'SELECT privilege on a view, 'CUSTOMER DATA, in a shared database 'SALES DATA DB' to consumers installing their application. The provider also wants to ensure that future views created in 'SALES DATA DB' are automatically accessible to the application. Which of the following SQL statements, executed by the provider, achieves this with the LEAST amount of privilege escalation risk?

• A.
• B.
• C.
• D.
• E.

A Snowflake Native App provider wants to ensure that even future roles created in their provider account will NOT automatically have access to the application database , which was created without the "MANAGED ACCESS' property initially. After creating a security audit suggested it to be with managed access. Which of the following steps BEST secures the app database?
Note multiple options may be needed

• A.REVOKE ALL PRIVILEGES ON DATABASE FROM PUBLIC;
• B.ALTER DATABASE SET MANAGED ACCESS = TRUE;
• C.GRANT OWNERSHIP ON DATABASE TO ROLE application_role;
• D.REVOKE USAGE ON DATABASE FROM ROLE PUBLIC;
• E.DROP DATABASE CREATE DATABASE WITH MANAGED ACCESS;

Your Snowflake Native Application provides a data transformation service. A consumer reports slow performance when processing large datasets. Profiling indicates that a specific SQL query within a UDF is the bottleneck. The query aggregates data from a table and uses a custom function to calculate a derived value. Assume the UDF runs with invoker rights. Which of the following strategies, used in combination, would MOST effectively improve the query's performance while adhering to security best practices for native applications and least privileges?

• A.Rewrite the UDF to use a SQL UDF instead of a Python UDF, grant the necessary privileges to the application's invoker role, and create appropriate indexes on the underlying table in consumer account.
• B.Implement caching for the custom function's results using Snowflake's result caching mechanism, rewrite the UDF to use a SQL UDF instead ofa Python UDF, and utilize a data access framework using secure view, which enables the invoker right to be succesfull.
• C.Rewrite the UDF to use a SQL UDF instead of a Python UDF, create a secure view exposing only the necessary data, and use clustering on the underlying consumer table.
• D.Distribute the processing workload by using Snowflake's Snowpark to create a DataFrame, distribute using custom python code and scale out.
• E.Replace the UDF with a materialized view in the consumer's account that pre-computes the derived value, and grant SELECT privilege on the materialized view to the consumer role.