You are developing a Snowflake Native Application that allows consumers to schedule data transformations using a stored procedure.
This stored procedure needs to be able to access and update a configuration table within your application package, as well as read data from the consumer's tables. Which of the following approaches are valid and secure ways to grant the stored procedure the necessary privileges?

• A. Grant the 'OWNERSHIP' privilege on the application package to the role executing the stored procedure. This provides the stored procedure with full control over all objects within the package.
• B. Use the 'EXECUTE AS CALLER clause when creating the stored procedure and grant the application role 'USAGE' on the schema containing the stored procedure. This allows the stored procedure to execute with the privileges of the user calling it.
• C. Create a custom role within the application package with the necessary privileges to access the configuration table and the consumer's data. Grant this custom role to the stored procedure using the 'EXECUTE AS OWNER clause and the application role 'USAGE' on the schema containing the stored procedure.
• D. Create a secure view that exposes only the necessary columns from the consumer's tables. Grant the stored procedure 'SELECT privilege on the secure view using the ' EXECUTE AS OWNER clause and the application role 'USAGE on the schema containing the stored procedure.
• E. Grant the application role 'SELECT' and 'UPDATE privileges directly on the configuration table within the application package and the consumer's tables. This allows the stored procedure to access and modify the data as needed using the ' EXECUTE AS OWNER clause.

You are developing a Snowflake Native App that utilizes Streamlit for its user interface. You want to control the app's behavior based on whether it's running in a development environment within your provider account or in a consumer account after installation. Which of the following methods can you use within your 'streamlit.py' to determine the current execution context (Provider vs. Consumer) reliably?

• A. Read an environment variable set during the application installation process by the consumer.
• B. Use which is a function specifically designed to check if the app is running in a consumer account.
• C. Query the view. Presence in this view indicates a provider environment.
• D. Examine the session context function 'CURRENT ACCOUNT()' function and compare it with the provider account identifier, if matches then it is a provider. It is the best method.

You are designing a Snowflake Native App that interacts with sensitive customer dat a. You need to ensure that the application only accesses the data it absolutely needs and adheres to the principle of least privilege. Which of the following strategies are crucial for maintaining data security within your application?

• A. Store sensitive customer data directly within the application package to avoid external access.
• B. Utilize Snowflake's secure UDFs with invoker's rights to perform data transformations and access control based on the user's role.
• C. Implement data masking policies to redact sensitive information before it's accessed by the application.
• D. Create specific roles with granular access privileges (e.g., 'SELECT on specific columns) and grant these roles to the application's managed service account.
• E. Grant the application role the 'OWNERSHIP' privilege on all tables containing customer data.

A Snowflake Native Application developer, Bob, is using Snowsight to manage access to the application. He has created a custom role, , and wants to grant this role the ability to grant and revoke privileges on all objects within the application's schema, app_data'. Which of the following Snowsight actions (or sequence of actions) is the MOST effective and secure way to achieve this?
(Assume Bob is logged in as a user with 'ACCOUNTADMIN' role).

• A. Within Snowsight, navigate to the application database, select 'Grant Privileges', and grant the 'USAGE' privilege to the .
• B. In Snowsight, write and execute the following SQL command:
• C. Grant the the 'APPLY MASKING POLICY privilege globally at the account level using Snowsight.
• D. Within Snowsight, navigate to the 'app_data' schema, select 'Grant Privileges', grant the 'USAGE privilege to the and then individually grant 'SELECT, 'INSERT, 'UPDATE' , and "DELETE privileges on each table and view within the schema.
• E. Within Snowsight, navigate to the 'app_data' schema, select 'Grant Privileges', and grant the 'OWNERSHIP' privilege to the .

You are packaging a Snowflake Native App that includes a file. During the packaging process, you encounter an error stating that a required Python package, 'pandas', is not found. However, you have included a 'requirements.txt' file in the application bundle with 'pandas' listed as a dependency. What is the MOST likely cause of this error, and what steps can you take to resolve it?

• A. Snowflake does not automatically install packages from 'requirements.txt' during packaging. You must manually upload the pandas package to a Snowflake stage and import it within your 'streamlit.py' file.
• B. The 'requirements.txt' file needs to be converted to a 'setup.py' file for Snowflake to recognize the dependencies correctly.
• C. Snowflake automatically installs all packages listed in 'requirements.txt' when the application is packaged, so the issue must lie elsewhere, such as a typo in the package name.
• D. The 'requirements.txt' file is not being correctly processed by the Snowflake Native App build system. Ensure the file is in the root directory of the application bundle and is properly formatted.