Snowflake SnowPro Specialty - Native Apps Sample Questions:

1. A data engineering team is developing a Snowflake Native Application that processes sensitive PII dat a. They need to update the application frequently with bug fixes and performance improvements without disrupting user access. Which of the following strategies BEST balances rapid iteration with data security and minimal downtime? Consider that the application uses a secure UDF that needs to be updated in conjunction with other application code.

A) Release patches as separate SQL scripts that consumers must manually apply to their installed application instances using the ACCOUNTADMIN role.
B) Completely rebuild the application package for each release, pushing a new application to Snowflake Marketplace, forcing users to uninstall and reinstall. This guarantees a clean state but may cause disruptions.
C) Use versioning, leveraging application roles and grants to control access to specific application versions. Employ automated rollout procedures to progressively expose new versions to consumers using application lifecycle management features.
D) Use versioning, creating a new version of the application package for each set of changes, and instruct consumers to manually update their application instances to the latest version.
E) Implement in-place upgrades to the application package every time a bug fix is released, granting UPDATE privileges on the underlying data tables to the application.

2. You are developing a Native Application that needs to access data from a consumer's table. The data contains personally identifiable information (PII), and your application requires explicit consent from the consumer to access this dat a. You have implemented a consent mechanism within your application's UI. Which of the following steps are NECESSARY to ensure compliance with data privacy regulations when accessing the consumer's data?

A) Implement a secure view that filters the PII data unless the consumer's consent flag is set to TRUE in a separate consent table. Grant SELECT on the secure view to the application's service account.
B) Implement a row access policy on the table based on the consumer's consent flag, ensuring the application only sees data for consumers who have granted consent. Grant the SELECT privilege on the table to the application.
C) Use Snowflake's dynamic data masking policies on the PII columns and grant the application's service account the APPLY MASKING POLICY privilege. Revoke the UNMASK privilege from the application's service account.
D) Implement a stored procedure that checks the consumer's consent flag. If consent is granted, the stored procedure retrieves and returns the requested data. Grant EXECUTE TASK privilege on the stored procedure to the application's service account.
E) Grant the SELECT privilege on the table directly to the application's service account after the consumer provides consent.

3. You are preparing to list your Snowflake Native Application on the Snowflake Marketplace. You want to restrict its availability to specific Snowflake regions and also require consumers to agree to a custom End User License Agreement (EULA) before installation. Which steps are essential during the listing creation process to achieve this?

A) During listing creation, select the 'Custom EULA' option and provide the EULA text directly within the designated field. Configure the 'Availability' section to specify the allowed regions.
B) Configure the 'Availability' section of the listing to specify allowed regions. Upload the EULA as a PDF document within the 'Documentation' section.
C) Use the Snowflake CLI to programmatically set the allowed regions using the 'snowflake marketplace application update' command. Include a link to an external website hosting the EULA in the listing description.
D) Regions are inherently globally available so it cannot be restricted. Include the EULA within the code of the application, forcing the user to acknowledge it through the code.
E) Specify the allowed regions in the 'Availability' section of the listing. Upload a text file containing the EULA and mark it as 'Required Agreement' in the listing settings.

4. A Snowflake Native Application relies on a warehouse named 'ANALYTICS WH' for processing dat a. The application provider wants to implement a cost-effective strategy for managing the warehouse, ensuring it's only active when needed. Which of the following combinations of warehouse parameters will lead to the most efficient cost management?

A)

B)

C)

D)

E)

5. You are packaging a Snowflake Native App that includes a Streamlit application for data visualization. The Streamlit application needs to access a table named 'SALES DATA within the app's data container. Which of the following steps are REQUIRED to correctly grant the Streamlit application the necessary permissions to read the data? (Select all that apply)

A) Create a service account within the Snowflake Native App and grant the 'SELECT' privilege on the 'SALES_DATR table to the service account.
B) Grant the 'APPLOG' privilege to the application role defined in the setup script on the internal stage.
C) Create a secure view on the ' SALES_DATX table, using the function in the view definition, and grant the 'SELECT privilege on the secure view to the application role.
D) Grant the 'IMPORTED PRIVILEGES' on the database containing the 'SALES DATA' table to the application role.
E) Grant the 'SELECT privilege on the 'SALES_DATX table directly to the application role defined in the setup script.

Solutions: