Snowflake SnowPro Specialty - Native Apps Sample Questions:

1. You are setting up an external stage to host your Snowflake Native Application Package on AWS S3. You've created an IAM role and Snowflake integration. However, when you try to create the application package with 'EXTERNAL STAGE , you receive an error indicating that Snowflake cannot access the S3 bucket. Which of the following could be the potential causes and solutions?

A) The SNOWFLAKE DEPLOYMENT role is not granted access to the Integration object. Solution: Grant USAGE privilege on the Integration to the SNOWFLAKE DEPLOYMENT role.
B) The external stage URL is incorrect. Solution: Ensure the URL provided in the 'CREATE APPLICATION PACKAGE EXTERNAL STAGE command is the correct S3 bucket URL.
C) The S3 bucket policy does not allow access from the Snowflake AWS account. Solution: Update the bucket policy to explicitly allow access from the Snowflake AWS account, using the IAM role's principal.
D) The IAM role does not have sufficient permissions to access the S3 bucket. Solution: Update the IAM role's policy to grant 's3:GetObject' and 's3:ListBuckeV permissions on the bucket.
E) The Snowflake integration object is not correctly configured with the IAM role ARN. Solution: Verify the parameter in the integration object matches the IAM role ARN.

2. A data analytics company, 'Data Insights Pro', develops a Snowflake Native Application that provides advanced data visualizations. They want to publish this application on the Snowflake Marketplace as a public listing. Which of the following steps are required in addition to the standard application creation and packaging, specifically focusing on the public listing aspects? Assume the necessary roles and privileges are already granted.

A) Ensure that the application is compatible with all Snowflake regions before publishing to a public listing.
B) Submit the application package to Snowflake for security and compliance review before making it available on the Marketplace.
C) Define a pricing model using Snowflake's monetization features and configure the listing visibility to 'Public'.
D) Implement robust application usage monitoring and metering to ensure accurate billing if a commercial model is used.
E) Create a detailed listing description, including features, benefits, and example use cases, and define the support channels.

3. You are building a Snowflake Native Application that relies on a complex transformation pipeline. This pipeline involves multiple SQL scripts and User-Defined Functions (UDFs). To manage this complexity, you want to ensure that the deployment process is automated and repeatable. Which approach would you consider to manage the deployment and versioning of your application code and its database objects?

A) Package all SQL scripts and UDFs into a single, large SQL file and execute it during installation.
B) Use a deployment tool like Flyway or Liquibase to manage database schema changes and versioning, integrating it into your application's setup script.
C) Store SQL Scripts and UDFs external to the application, providing instructions to the consumers to manually download and install.
D) Rely exclusively on Snowflake's built-in version control features (if available), which automatically manage schema changes.
E) Manually execute each SQL script and UDF creation statement in the consumer's Snowflake environment.

4. A data science team is developing a Snowflake Native Application that provides predictive analytics for financial institutions. The application requires access to usage data from consumer accounts, but only aggregated and anonymized data should be exposed. As the application provider, you need to grant the necessary privileges while adhering to the principle of least privilege. Which combination of global privileges and application logic will achieve this?

A) Grant the ACCOUNTADMIN role to the application and rely on the application code to filter and anonymize the data.
B) Create a custom role with the MONITOR USAGE global privilege, grant this role to the application, and use secure views within the application to expose only the aggregated and anonymized data.
C) Grant the IMPORTED PRIVILEGES global privilege on the account and rely on data sharing agreements to control access to the aggregated and anonymized data.
D) Grant the READ global privilege on the account metadata and use Snowflake's masking policies within the application to anonymize sensitive data.
E) Grant the USAGE global privilege on the account and implement stored procedures within the application that perform the aggregation and anonymizatiom

5. You are tasked with developing a Snowflake Native App that leverages a Partner provided secret using an external function which will send the processed data to their system. You plan to store the OAuth information to be used by the external function in a secret object managed by Snowflake. Which of the following steps are NECESSARY to ensure secure and correct setup of this app? Select all the options that apply.

A) Grant the 'IMPORTED PRIVILEGES privilege on the database containing the Secret object to the application role. GRANT IMPORTED PRIVILEGES ON DATABASE TO APPLICATION ROLE '
B) Grant the 'USAGE privilege on the API integration to the application role if the external function requires an API integration. GRANT USAGE ON API INTEGRATION TO APPLICATION ROLE
C) Create a Secret object in Snowflake to store the OAuth token securely and reference it within the external function using 'SYSTEM$GET_SECRET function. Ensure proper access rights on the Secret object.
D) Bypass storing the OAuth token in Snowflake and instead rely on passing it as a parameter to the external function from the consumer account, documented clearly for the consumer's security responsibilities.
E) Store the OAuth token directly within the external function's definition as a variable, ensuring it is encrypted using AES ENCRYPT before deployment.

Solutions: