Snowflake SnowPro Specialty - Native Apps Sample Questions:

1. You're developing a Snowflake Native App with a Streamlit I-Jl. The app needs to read configuration data from a file named within your application package. The file contains sensitive information, and you want to ensure it's only accessible by your application's code and not directly readable by the consumer. What steps would you take to accomplish this?

A) Store 'config.json' within the Streamlit code, and then encode and decode it to the original string when the user invokes the Streamlit application.
B) Store 'configjson' outside the application package and read it directly from an external stage at runtime.
C) Store 'config.json' within the application package and read it using Python code within a stored procedure. Grant appropriate privileges on the stored procedure, but not on the 'config.json' file or the internal stage.
D) Store 'config.json' in a table within your application's schema and grant the 'SELECT' privilege on the table to the consumer's role.
E) Store 'config.json' in an internal stage and grant the 'READ' privilege on the stage to the consumer's role.

2. You are developing a Snowflake Native Application. As part of your application deployment process, you need to programmatically register a new version of your application package and promote it through the stages (e.g., 'dev', 'test', 'prod'). You are using the 'SYSTEM$REGISTER_APPLICATION_PACKAGE_VERSION' function. Which of the following statements accurately describe valid arguments and usage considerations for this function?

A) The 'VERSION' argument is a display name for the version and doesn't impact version ordering or compatibility checks during installation.
B) The PATCH' argument is required, it should be incremented for minor bug fixes or security updates within the same VERSION.
C) The 'SOURCE_PACKAGE must be an application package in the same account as the one where the new version is being registered.
D) The 'EXTERNAL ID' must be a globally unique identifier for each version across all Snowflake accounts. If The it's not unique, the registration will fail.
E) The 'SOURCE_PACKAGE argument is optional, and if omitted, the function will automatically generate a new application package based on the current

3. A provider is developing a Snowflake Native App and utilizes event sharing to communicate state changes to consumers. After initial installation, a consumer reports not receiving any event notifications. The provider has verified the event table is populated correctly. Which of the following are the MOST likely reasons for this issue and how can the provider troubleshoot them?

A) The consumer has not explicitly granted the necessary privileges on the event table function to the role used by the app. Instruct the consumer to grant USAGE on the event table function to the app role.
B) Event sharing is inherently unreliable and Snowflake does not guarantee event delivery. The provider should implement alternative polling mechanisms.
C) The consumer's event table function does not have the correct security invoker privileges. Grant EXECUTE TASK on the event table function to the consumer role.
D) The consumer has not refreshed their application instance metadata. Ask the consumer to execute SYSTEM$REFRESH_EXTERNAL_FUNCTIONS() in the application database.
E) The event table function is not correctly filtering events based on the consumer's application instance I Review the function logic to ensure proper filtering using APP_INSTANCE_ID().

4. A company publishes a Snowflake Native Application on the Snowflake Marketplace providing aggregated sales dat a. They want to ensure data is fresh and updated daily at 00:00 UTC. They are considering several approaches to automate this data refresh process.
Which of the following methods are MOST effective and SECURE for scheduling and executing this daily data update within the Snowflake Native Application environment? Choose two.

A) Use Snowflake Tasks scheduled to run daily at 00:00 UTC to execute a stored procedure within the Native Application that updates the data.
B) Utilize a cron job on a virtual machine to execute a SQL script via SnowSQL, connecting to Snowflake and refreshing the data.
C) Implement a Java-based scheduler within the Snowflake Native Application itself using UDFs, triggered by an external service via API integration.
D) Leverage Snowflake's Data Marketplace update scheduling feature (if available and applicable to their type of listing) to automatically refresh the data.
E) Schedule a Python script using an external task service (e.g., AWS Lambda) that connects to Snowflake and executes the data refresh procedure.

5. You are developing a Snowflake Native Application that processes sensitive dat a. During the application lifecycle management, including version updates, what steps should you take to ensure the data security and privacy of the consumers' data, especially considering that your development team might need access to a subset of the data for testing?

A) Create a separate Snowflake account for testing and populate it with synthetic data that mimics the structure and characteristics of the consumer's data.
B) Grant the development team direct access to the consumer's data warehouse to facilitate testing. Ensure proper auditing is enabled.
C) Implement data masking and anonymization techniques to create a sanitized test dataset derived from the consumer's data. Provide the development team with access only to the masked data, via data sharing from the producer to consumer account.
D) Utilize Snowflake's external functions to process the data in a secure enclave outside of Snowflake, minimizing the risk of data exposure. Ensure external functions called are encrypted.
E) Use Snowflake's data classification features to identify sensitive data and implement row-level security to restrict access to the development team.

Solutions: