다운로드 Snowflake : NAS-C01 질문 & 답 PDF & Test Software

You are developing a Snowflake Native Application that processes sensitive customer dat a. You want to ensure that your application has undergone a thorough security review before it is listed on the Snowflake Marketplace. Which of the following steps are mandatory to ensure that your application meets Snowflake's security requirements for a secure native application?

• A. Enforce multi-factor authentication for all users accessing the application.
• B. Obtain a third-party penetration test report for the application's code and infrastructure.
• C. Ensure all sensitive data is encrypted at rest and in transit using Snowflake's built-in encryption features.
• D. Submit your application for Snowflake Native App Security Review by filling out the security review intake form with all the necessary documentation.
• E. Implement data masking policies on all sensitive data within the application.

You are designing a Snowflake Native Application that requires granular control over the privileges granted to different application roles. You want to follow the principle of least privilege. You have the following requirements: Application roles , and app_read_only'. What is the most effective strategy to implement this using definer's rights?

• A. Create views for each application role, granting SELECT privilege on the necessary tables to each view. Then, grant SELECT privilege on the appropriate view to each application role.
• B. Create separate schemas for each application role, placing objects with different privileges into these schemas. Then, grant the appropriate privileges on each schema to the corresponding application role.
• C. Create stored procedures owned by the application, with each stored procedure explicitly granting the required privileges to the corresponding role. Consumers must then grant USAGE on these procedures to their desired roles.
• D. Grant all privileges on all application objects to the 'app_admin' role and rely on the consumer to manage privilege inheritance for other roles.
• E. Create stored procedures owned by the application, with each stored procedure performing actions within the app. Grant OWNERSHIP on each stored procedure to the application admin. Consumers must then grant USAGE on these procedures to their desired roles.

A Native Application developer, Alice, is building a data processing pipeline within her Snowflake Native App that includes a scheduled task. The task executes a stored procedure which needs to access data from a table owned by the consumer account. The application package version '1.0.0' has been released to a consumer. The task has been created and suspended. Which of the following SQL commands are required for Alice, as the application provider, to grant the necessary privileges on the consumer's environment to enable the task to execute successfully when it is resumed? Select ALL that apply.

• A. GRANT EXECUTE TASK ON TASK my_task TO APPLICATION ROLE app_public;
• B. GRANT EXECUTE TASK ON TASK my_task TO APPLICATION ROLE app_owner;
• C. GRANT EXECUTE TASK ON DATABASE TO APPLICATION ROLE app_public;
• D. GRANT EXECUTE MANAGED TASK ON ACCOUNT TO SHARE;
• E. GRANT EXECUTE TASK ON ACCOUNT TO SHARE;

You are creating a Snowflake Native App using the Native Apps Framework. Your application needs to perform a task that must execute on a regular schedule (e.g., daily data refresh). Which Snowflake feature(s) can you leverage to achieve this, and what considerations are important when using them within the Native App context?

• A. Snowflake Pipes are the preferred method for scheduled data ingestion within Native Apps, as they are designed for continuous data loading from external sources.
• B. Use Snowflake Alerts with a cron schedule to trigger a stored procedure owned by the APPLICATION role. The procedure executes any scheduled task.
• C. Snowflake Tasks can be used directly within the Native App, but you must ensure the task definition is part of the application package and the task is resumed upon installation in the consumer account. The task must use the APPLICATION role.
• D. Snowflake Streams should be used to track data changes and trigger the refresh process. The Stream must be defined in the application package, and a separate task can be configured to consume the stream data.
• E. You should implement an external scheduler (e.g., AWS Lambda, Azure Functions) that triggers a Snowflake Stored Procedure via the Snowflake API. The Stored Procedure should be owned by the APPLICATION role.

You are packaging a Snowflake Native App and need to ensure that consumer accounts can only access specific data views you've created within your application schem a. You want to prevent consumers from directly querying the underlying tables. Which of the following security measures, when implemented together, BEST achieve this objective? (Choose two)

• A. Grant 'SELECT privilege only on the views to the 'application role' within the application package.
• B. Grant "OWNERSHIP' on the views to the 'application role' within the application package.
• C. Do not grant any privileges on the underlying tables to the 'application role' within the application package.
• D. Grant 'SELECT' privilege on the underlying tables to the 'application role' within the application package.
• E. Use secure views to expose data, ensuring data access is controlled through the view's definition.