Snowflake SnowPro Specialty - Native Apps Sample Questions:

1. A provider develops a Snowflake Native Application that requires access to consumer's 'ORDERS' table for data enrichment. The provider has created an object role 'app_role'. Which of the following steps are REQUIRED for the application to successfully access and query the 'ORDERS table in the consumer's environment during the installation phase?

A) The provider grants OWNERSHIP on the 'app_role' role to the application.
B) The consumer creates a new role, grants SELECT on the 'ORDERS' table to this role, and then grants the role to the application's 'app_role' in the consumer account. The application manifest specifies the consumer_role.
C) The consumer grants USAGE privilege on the database containing the 'ORDERS' table to the provider account.
D) The consumer grants IMPORTED PRIVILEGES on the share containing the 'ORDERS table to the 'app_role' in the provider account.
E) The consumer grants USAGE privilege on the schema containing the 'ORDERS' table to the provider account.

2. Your company has developed a Snowflake Native Application designed to provide advanced data analytics. They want to distribute this application through the Snowflake Marketplace, but only to a select group of partner organizations before a general public release. Which steps are essential to ensure that only these partners can discover and install the application?

A) Share the application package directly with the partner organizations using Snowflake Secure Data Sharing, bypassing the Snowflake Marketplace entirely.
B) Create a public listing but obfuscate the application name and description so that only partners with prior knowledge can identify the application.
C) List the application as a public listing and implement IP address whitelisting within the application to restrict access to partner organizations' IP ranges. Use context functions to obtain the IP address.
D) List the application as a private listing on the Snowflake Marketplace and specify the Snowflake account identifiers of the partner organizations allowed to access the listing.
E) List the application as a public listing on the Snowflake Marketplace and rely on partner organizations to keep the application usage confidential through contractual agreements.

3. You are developing a Snowflake Native Application. You need to grant specific privileges on a warehouse named 'APP WH' to the application role 'app_public' to allow application users to execute queries within that warehouse. Which of the following SQL statements is the MOST secure and appropriate way to achieve this, adhering to the principle of least privilege?

A)

B)

C)

D)

E)

4. You are developing a Snowflake Native Application that utilizes a custom stage for storing large intermediate datasets during processing. Your CI/CD pipeline involves automated testing in a dedicated testing account. To ensure proper isolation and prevent interference with production data, how should you configure the stage path within your application package version definition, considering the stage name might differ between development and test environments?

A) Employ a versioned configuration file (e.g., YAML) within the application package. The CI/CD pipeline should replace placeholders in the configuration file with environment-specific stage paths before creating the version.
B) Define the stage path as a parameter in the application installation script. When installing the application in each environment, pass the correct stage path as an argument.
C) Use a Snowflake Secret to store the stage path and retrieve it dynamically during application installation. The secret's value will be environment-specific.
D) Utilize Snowflake's and 'CURRENT functions in conjunction with conditional logic within the application to derive the stage path based on the environment.
E) Hardcode the stage name and path directly within the setup script of the version. This approach is simple and ensures consistent access across environments.

5. A Snowflake Native Application provider is deploying their application in multiple regions (AWS US-East-l and AWS EU-Central-l). The application relies on external functions that interact with a third-party API. The provider wants to optimize for both latency and cost while ensuring high availability. Which of the following strategies represents the MOST effective approach for configuring and deploying these external functions to meet these requirements? Select two.

A) Deploy separate external functions in each region, pointing to API endpoints hosted in the respective regions. Configure each external function with the same security integration to simplify access management.
B) Create a single external function that uses a conditional statement to route requests to different API endpoints based on the Snowflake region where the function is being called. This approach reduces management overhead.
C) Host the external function code directly within the Snowflake application package and leverage Snowflake's serverless compute to execute the function logic without relying on external APIs.
D) Utilize Snowflake's cross-region replication feature to automatically replicate the external functions between regions. This ensures that the functions are always available in both regions.
E) Configure a global load balancer in front of the third-party API endpoints and point all external functions to the load balancer's endpoint. This allows the load balancer to route requests to the closest available API endpoint.

Solutions: