[Sep 19, 2026] Lesson Brilliant PDF for the NAS-C01 Tests Free Updated Today [Q207-Q225]

NEW QUESTION 207
You are the developer of a Snowflake Native Application. You’ve created a new version of your application package, v2.0. You want to perform a controlled rollout, first releasing it to a subset of your consumers for testing before making it generally available. Which sequence of steps, leveraging Snowflake’s lifecycle management features, would you use to achieve this?

1. Create a new APPLICATION role for beta testers. 2. Grant USAGE privilege on version v2.0 to the beta testers APPLICATION role. 3. Update the default version of the application package to v2.0.

1. Create a new APPLICATION role for beta testers. 2. Grant USAGE privilege on the application package to the beta testers APPLICATION role. 3. Grant USAGE privilege on version v2.0 to the beta testers APPLICATION role. 4. Update the default version of the application package to v2.0.

1. Create a new APPLICATION role for beta testers. 2. Grant USAGE privilege on version v2.0 to the beta testers APPLICATION role. 3. Instruct beta testers to manually specify VERSION = ‘v2.0’ when creating their application instances.

1. Create a dedicated APPLICATION role for the application. 2. Grant OWNERSHIP on the application package to the application’s APPLICATION role. 3. Update the default version of the application package to v2.0.

1. Instruct consumers to use the ‘ALTER APPLICATION’ command to upgrade to v2.0. 2. Monitor consumer feedback on the upgraded version.

NEW QUESTION 208
A Snowflake Native App provider wants to ensure that even future roles created in their provider account will NOT automatically have access to the application database , which was created without the “MANAGED ACCESS’ property initially. After creating a security audit suggested it to be with managed access. Which of the following steps BEST secures the app database?
Note multiple options may be needed

DROP DATABASE CREATE DATABASE WITH MANAGED ACCESS;

ALTER DATABASE SET MANAGED ACCESS = TRUE;

REVOKE ALL PRIVILEGES ON DATABASE FROM PUBLIC;

REVOKE USAGE ON DATABASE FROM ROLE PUBLIC;

GRANT OWNERSHIP ON DATABASE TO ROLE application_role;

NEW QUESTION 209
You are tasked with developing a Snowflake Native App that leverages a Partner provided secret using an external function which will send the processed data to their system. You plan to store the OAuth information to be used by the external function in a secret object managed by Snowflake. Which of the following steps are NECESSARY to ensure secure and correct setup of this app? Select all the options that apply.

Store the OAuth token directly within the external function’s definition as a variable, ensuring it is encrypted using AES ENCRYPT before deployment.

Create a Secret object in Snowflake to store the OAuth token securely and reference it within the external function using ‘SYSTEM$GET_SECRET function. Ensure proper access rights on the Secret object.

Grant the ‘IMPORTED PRIVILEGES privilege on the database containing the Secret object to the application role. GRANT IMPORTED PRIVILEGES ON DATABASE TO APPLICATION ROLE ‘

Grant the ‘USAGE privilege on the API integration to the application role if the external function requires an API integration. GRANT USAGE ON API INTEGRATION TO APPLICATION ROLE

Bypass storing the OAuth token in Snowflake and instead rely on passing it as a parameter to the external function from the consumer account, documented clearly for the consumer’s security responsibilities.

NEW QUESTION 210
You’ve installed a Snowflake Native Application that provides advanced data analytics. The application requires a consumer-defined function (UDF), ‘MASK SENSITIVE DATA, to be created in their account and used by the application. The application’s setup script includes logic to check for the UDF’s existence, but you want to ensure the application gracefully handles the case where the consumer has not yet created the UDF. Which of the following strategies can you implement to improve the application’s resilience and provide a better user experience in this scenario? Select all that apply.

In the application’s setup script, create a placeholder UDF with the same name and signature as ‘MASK SENSITIVE DATA’ that returns ‘NULL’. The application logic can then handle ‘NULL’ values appropriately until the consumer provides the actual UDF.

Within the application’s SQL code, use the ‘TRY FUNCTION’ function to call ‘MASK SENSITIVE DATA’. If the UDF does not exist, ‘TRY FUNCTION’ will return ‘NULL’ instead of raising an error.

Implement error handling within the application’s code to catch the ‘SQL compilation error: UDF does not exists exception. Provide a user-friendly error message and instructions on how to create the UDF.

Require the consumer to create the UDF before installing the application. The application setup script should fail if the UDF is not found, preventing installation.

Dynamically generate the application code using a stored procedure, only including the parts of the code that rely on if the function exists. Use ‘SYSTEM$GET PRIVILEGES()’ to check existence.

NEW QUESTION 211
A Native Application provider has created a database named ‘app_db’ using ‘CREATE DATABASE app_db WITH MANAGED ACCESS;’. They now need to create a secure view that exposes a subset of data from an underlying table ‘sensitive_data’ within the schema ‘internal_schema’ of ‘app_db’ to a consumer’s role named ‘consumer role’. They wish to minimize data exposure while adhering to managed access principles. Which set of SQL statements represents the MOST secure and correct approach?

CREATE VIEW app_db.internal_schema.consumer_view AS SELECT coll , c012 FROM app_db.internal_schema.sensitive_data; GRANT SELECT ON VIEW app_db.internal_schema.consumer_view TO ROLE consumer_role;

CREATE OR REPLACE SECURE VIEW app_db.internal_schema.consumer_view AS SELECT coll , c012 FROM app_db.internal_schema.sensitive_data; GRANT SELECT ON VIEW TO ROLE consumer_role;

CREATE OR REPLACE VIEW app_db.internal_schema.consumer_view AS SELECT coll , c012 FROM app_db.internal_schema.sensitive_data; GRANT ALL PRIVILEGES ON VIEW TO ROLE consumer_role;

CREATE OR REPLACE SECURE VIEW app_db.internal_schema.consumer_view AS SELECT coll , c012 FROM app_db.internal_schema.sensitive_data; GRANT ALL PRIVILEGES ON VIEW TO ROLE consumer_role;

CREATE OR REPLACE SECURE VIEW app_db.internal_schema.consumer_view AS SELECT coll , c012 FROM app_db.internal_schema.sensitive_data; GRANT SELECT ON VIEW TO ROLE consumer_role; REVOKE ALL PRIVILEGES ON VIEW app_db.internal_schema.consumer_view FROM ROLE PUBLIC;

NEW QUESTION 212
You are developing a Snowflake Native Application that manages customer dat a. You need to ensure that updates to customer records are idempotent. Your application uses a stored procedure ‘update_customer(customer_id INT, new_email VARCHAR)’ to update customer emails. How can you modify this procedure to guarantee idempotency, assuming that customer data changes are tracked with a ‘last_updated’ column of type TIMESTAMP NTZ?

Implement optimistic locking using a version number for each customer record and checking the version before updating.

Add a ‘COMMIT statement at the end of the stored procedure to ensure all changes are persisted immediately.

Use ‘ MERGE statement, comparing the new email with the existing email and updating only if they are different, while also ensuring that the update only happens if the new ‘ last_updated’ timestamp is later than the stored one.

Create a separate table to store only the changes to customer emails and query this table to determine the latest email.

Enclose the entire stored procedure within a ‘TRY…CATCH’ block and retry if any exception occurs.

NEW QUESTION 213
You are troubleshooting an issue where a Snowflake Native Application’s Scala UDF, ‘process_data’ , is sporadically failing with an ‘OutOfMemoryError’. The UDF processes large XML files. You need to identify the cause and implement a solution. Which strategies are most appropriate for diagnosing and resolving this issue within the constraints of a Snowflake Native Application?

Increase the warehouse size for the consumer’s account. This provides more memory to the UDF execution environment.

Use a memory profiler to analyze the UDF’s memory usage. Identify memory leaks or inefficient data structures that contribute to the ‘OutOfMemoryErroN.

Modify the ‘process_data’ UDF to stream the XML file instead of loading the entire file into memory at once. Use a streaming XML parser to process the data incrementally.

Implement caching mechanisms within the UDF to reuse previously processed XML data, reducing the need to load and parse the same data repeatedly.

Break down the large XML files into smaller chunks before processing them with the UDF. This reduces the memory footprint of each individual UDF execution. Implement a system to orchestrate processing chunks.

NEW QUESTION 214
You are developing a Snowflake Native Application that integrates with an external API to enrich data within the consumer’s account. You need to design the setup script to handle API credentials securely and ensure that consumers can configure their own API keys. Which of the following methods is the MOST secure and recommended approach for managing API credentials within a Snowflake Native Application?

Hardcode the API credentials directly into the setup script and distribute them to consumers.

Store the API credentials in a publicly accessible stage and instruct consumers to download and configure them manually.

Use Snowflake’s secret management capabilities (e.g., SECRETS feature) to store the API credentials securely, allowing consumers to create and manage their own secrets and reference them within the application.

Store the API credentials as environment variables within the application’s deployment environment.

Encrypt the API credentials using a simple symmetric key and include the decryption key in the setup script.

NEW QUESTION 215
You are developing a Snowflake Native Application that needs to securely access data in a consumer’s account. The application requires the consumer to grant specific privileges to a custom role created and managed within the application package. Which of the following steps are absolutely essential for correctly configuring the application package to ensure this secure data access, and how should the setup script handle the privilege granting?

Create a share from the provider account to the consumer account, granting the consumer read access to the application package’s data. Then, use a setup script to grant ownership of the data to the application role after installation.

Define the required privileges in the application package manifest (snowflake.yml). Ensure that the setup script includes commands to grant the specific privileges on the consumer’s data to the application’s custom role, using ‘GRANT ON TO ROLE within an EXECUTE IMMEDIATE statement in the setup script. The setup script should also define the application role.

The consumer must manually grant the necessary privileges to the application’s role after the application is installed, as the application package cannot automatically modify the consumer’s security settings.

Utilize a service account to access the data, providing the service account’s credentials as part of the application setup. The application will then use the service account to access the consumer’s data.

Grant the ‘USAGE privilege on the consumer’s database and schema to the application’s role within the setup script. This implicitly allows the application to read all data within that schema.

NEW QUESTION 216
You are developing a Snowflake Native Application with a complex custom billing model. Your application measures several consumption metrics, including data processed, API calls, and unique users. You want to offer consumers flexible pricing plans that combine fixed monthly fees with usage-based charges, and provide detailed invoices. What is the most appropriate way to construct your Snowflake native application to perform the custom billing?

Use Snowflake’s native metering functions to calculate storage and compute costs, and manually calculate the other metrics outside of Snowflake. Combine these values to generate the invoices using an external billing system.

Implement all metering logic within stored procedures in your Snowflake Native App package. Create a scheduled task that runs daily to calculate the billing amounts and store them in a billing table. Use Snowflake’s data sharing to expose billing information to an external billing system.

Utilize Snowflake’s resource monitors to track overall consumption and apply a fixed cost per resource unit consumed.

Develop a separate application outside of Snowflake to poll the application’s internal tables for usage metrics and perform all billing calculations externally.

Develop stored procedures within the application to measure each metric, apply the complex pricing logic, and generate invoices directly within Snowflake as JSON documents. Offer these invoices as output from a ‘GET INVOICE stored procedure exposed to the customer.

NEW QUESTION 217
You are developing a Snowflake Native Application that processes customer dat a. To comply with data residency requirements, you need to ensure the application processes data within the customer’s Snowflake account. The application logic resides in a Snowpark Python stored procedure. During development, you test this procedure using the ‘CALL’ command. However, after installing the application in a customer’s account, the procedure fails with a ‘privilege insufficient’ error. What are the MOST likely reasons for this and how can you rectify them within the package definition?

The stored procedure is missing the EXECUTE MANAGED ACCOUNT privilege. Add ‘GRANT EXECUTE MANAGED ACCOUNT ON PROCEDURE TO APPLICATION ROLE to the setup script.

The application role lacks sufficient privileges on the data sources within the customer’s account. Grant the appropriate privileges (e.g., ‘SELECT , ‘INSERT) on the required tables/views to the application role in the setup script using ‘GRANT SELECT ON TABLE TO APPLICATION ROLE

The procedure owner is not the application. This can be resolved by transferring ownership to the application role using ‘ALTER PROCEDURE (…) OWNER TO APPLICATION ROLE in the setup script.

The application manifest is missing the ‘external_network_accesS property set to ‘true’. Add this to the manifest and use network rules if the application requires access to external resources.

The stored procedure requires the ‘IMPORTED PRIVILEGES on the database. Grant this using ‘GRANT IMPORTED PRIVILEGES ON DATABASE TO APPLICATION ROLE in the setup script.

NEW QUESTION 218
You’re designing a Snowflake Native Application that leverages Snowpark Container Services (SPCS) and you are creating a CI/CD pipeline for deploying your application to multiple Snowflake regions. As part of the pipeline, you want to automate the creation of a Compute Pool. Which of the following approaches represents the MOST robust and repeatable method for creating the Compute Pool across all regions, considering factors like consistency and potential differences in available instance families?

Manually create the Compute Pool in each region using the Snowflake web interface, ensuring the parameters are identical across all instances.

Use a Snowflake Script (SnowSQL) to create the Compute Pool, hardcoding the instance family and other parameters directly into the script.

Use a Snowflake Script (SnowSQL) to create the Compute Pool, retrieving the available instance families dynamically using ‘SYSTEM$GET_CP POLICY’ and selecting the appropriate instance family based on regional availability. Store common configurations in environment variables.

Create a Compute Pool in one region and then clone it to all other regions using the ‘CREATE CLONE syntax.

Compute Pools created are global objects, so the pool automatically exists across all regions.

NEW QUESTION 219
You are developing a Snowflake Native Application that uses Snowpark Container Services. Your application consists of multiple containerized services that require varying levels of computational resources. You want to optimize resource utilization and minimize costs by using a single Compute Pool for all services, while ensuring that each service has guaranteed access to resources. Which of the following strategies and SQL commands (or configurations) can be used to achieve this?

Create separate Compute Pools for each service, sizing each pool according to the service’s peak resource requirements.

Use a single Compute Pool and rely on the container orchestration system to dynamically allocate resources among the services. Monitor utilization and adjust the Compute Pool size as needed. No SQL commands are needed.

Create a single Compute Pool and configure resource quotas for each service using container orchestration-specific configurations (e.g., Kubernetes resource quotas). While not directly managed via SQL, proper configuration of the container orchestrator is required.

Use a single Compute Pool, create separate user-defined functions (UDFs) for each service and control resource allocation using the ‘RESOURCE MONITOR parameter for each UDF.

Create a resource monitor and assign it to the COMPUTE POOL to manage cost. Resource monitors cannot be used to granular control the compute pool usage for native applications.

NEW QUESTION 220
A Native Application provider wants to grant the ‘SELECT privilege on a view, ‘CUSTOMER DATA, in a shared database ‘SALES DATA DB’ to consumers installing their application. The provider also wants to ensure that future views created in ‘SALES DATA DB’ are automatically accessible to the application. Which of the following SQL statements, executed by the provider, achieves this with the LEAST amount of privilege escalation risk?

NEW QUESTION 221
A Native App provider has created an application package and wants to control the versions of the application available to different consumers. They need to ensure that a specific consumer account, ‘CUSTOMER R, only has access to version ‘1.0’ of the application. Which of the following steps are necessary to achieve this?

No specific steps are required. By default, consumers will automatically receive the latest version of the application.

Specify the version ‘1.0’ when creating the share object for ‘CUSTOMER_A’.

When creating the authorization grant for for the APPLICATION ROLE, specify VERSION = ‘1.01.

Create a new application package specifically for ‘CUSTOMER A’ and only include version ‘1.0’ in that package.

The provider must first create a new version of the application package containing only version 1 .C , and then create an authorization grant for the role to CUSTOMER A that includes version ‘1.0’

NEW QUESTION 222
You are developing the setup script for a Snowflake Native Application. The application requires a specific Snowflake Edition (e.g., Enterprise) to function correctly due to certain feature dependencies. How can you ensure that the installation fails gracefully and provides a clear error message if the consumer’s account does NOT meet the required edition?

Use the ‘SYSTEM$GET SNOWFLAKE EDITION()’ function within the setup script and raise an exception using ‘RAISE’ if the edition is not compatible. Provide a descriptive error message.

Include a comment in the setup script indicating the required Snowflake Edition. Rely on the consumer to manually verify their edition before installation.

Attempt to create objects that are specific to the required Snowflake Edition within the setup script. If the creation fails due to edition limitations, the installation will automatically fail.

The Snowflake Marketplace automatically checks for edition compatibility before allowing installation of a Native Application. No explicit checks are needed in the setup script.

Use a configuration file included in the application package to specify the required Snowflake Edition. The setup script reads this file and displays an error message if the edition is not compatible.

NEW QUESTION 223
Consider the following Python code snippet used within a Streamlit application deployed as a Snowflake Native App:

The code will execute without any privilege errors, assuming the necessary database and schema privileges are granted to the ‘app_public’ role.

The code will fail because the Snowflake Connector for Python requires explicit connection parameters to be defined even within a Native App context.

The code will fail with a privilege error if the ‘app_public’ role does not have OWNERSHIP of the table ‘my_table’ .

The code will execute successfully, assuming that Smy_table’ exists, and the ‘app_public’ role has at least SELECT privilege on ‘my_table’ and USAGE privilege on the schema containing ‘my_table’ .

The code requires using the ‘snowflake.snowpark’ library instead of for optimized performance within native apps.

NEW QUESTION 224
A Snowflake Native Application, leveraging Snowpark Container Services (SPCS), is designed to perform complex data transformations on data residing within the customer’s Snowflake account. The transformations require significant computational resources, and the container occasionally encounters resource constraints, leading to performance degradation. Which of the following strategies can you employ to optimize resource utilization and ensure the container runs efficiently within the customer’s SPCS environment?

Increase the size of the virtual warehouse associated with the SPCS compute pool. This directly provides more computational resources to the container.

Optimize the container image by removing unnecessary dependencies and libraries, reducing its overall size and startup time.

Implement horizontal scaling within the container by deploying multiple replicas of the application and distributing the workload among them using a load balancer. The consumer must configure the number of replicas.

Rewrite the data transformation logic to utilize Snowflake’s built-in SQL functions and stored procedures whenever possible. Move the transformation workload out of the container.

Increase the memory and CPU limits specified in the ‘spec.yaml’ file for the Snowpark Container Services deployment. This provides the container with more resources within the allocated compute pool.

NEW QUESTION 225
You are developing a Snowflake Native Application that allows consumers to schedule data transformations using a stored procedure.
This stored procedure needs to be able to access and update a configuration table within your application package, as well as read data from the consumer’s tables. Which of the following approaches are valid and secure ways to grant the stored procedure the necessary privileges?

Grant the ‘OWNERSHIP’ privilege on the application package to the role executing the stored procedure. This provides the stored procedure with full control over all objects within the package.

Use the ‘EXECUTE AS CALLER clause when creating the stored procedure and grant the application role ‘USAGE’ on the schema containing the stored procedure. This allows the stored procedure to execute with the privileges of the user calling it.

Create a custom role within the application package with the necessary privileges to access the configuration table and the consumer’s data. Grant this custom role to the stored procedure using the ‘EXECUTE AS OWNER clause and the application role ‘USAGE’ on the schema containing the stored procedure.

Create a secure view that exposes only the necessary columns from the consumer’s tables. Grant the stored procedure ‘SELECT privilege on the secure view using the ‘ EXECUTE AS OWNER clause and the application role ‘USAGE on the schema containing the stored procedure.

Grant the application role ‘SELECT’ and ‘UPDATE privileges directly on the configuration table within the application package and the consumer’s tables. This allows the stored procedure to access and modify the data as needed using the ‘ EXECUTE AS OWNER clause.

[Sep 19, 2026] Lesson Brilliant PDF for the NAS-C01 Tests Free Updated Today [Q207-Q225]

admin

Leave a Reply Cancel reply

admin

You May Also Like

Leave a Reply Cancel reply