一番質高い NAS-C01 試験問題集

A Snowflake Native App aims to provide data masking as a service. The app needs to access customer data, apply masking policies based on app-managed configuration, and store the masked data either in the customer's account or in the app's managed account based on customer preference. Which of the following steps and considerations are CRUCIAL for designing this application, focusing on security and privilege management? (Select all that apply)

• A. Implement the data masking logic within stored procedures that execute with the CALLERS RIGHTS to leverage the customer's existing masking policies.
• B. Use secure views to access the customer's data, ensuring that the app only sees the data it is authorized to access based on requested READ privileges.
• C. Request the OWNERSHIP privilege on the customer's tables to ensure full control over data masking.
• D. Ensure the application uses the SNOWFLAKE.CORE.INVOKE FUNCTION to call data masking policies with the consumer's data.
• E. Use stored procedures that execute with DEFINER'S RIGHTS and request necessary READ privileges on the customer's database and tables.

解説: (Tech4Exam メンバーにのみ表示されます)

You are developing a Snowflake Native Application that includes a Python module for data transformation. This module relies on the pandas' and 'requests' libraries. You are using an 'environment.yml' file to manage dependencies. Which of the following 'environment.yml' configurations is the MOST secure and correct way to define these dependencies for your application? Assume you want to install these packages directly from conda-forge channel.

• A.
  
• B.
  
• C.
  
• D.
  
• E.
  

解説: (Tech4Exam メンバーにのみ表示されます)

A Native Application developer, Alice, is building a data processing pipeline within her Snowflake Native App that includes a scheduled task. The task executes a stored procedure which needs to access data from a table owned by the consumer account. The application package version '1.0.0' has been released to a consumer. The task has been created and suspended. Which of the following SQL commands are required for Alice, as the application provider, to grant the necessary privileges on the consumer's environment to enable the task to execute successfully when it is resumed? Select ALL that apply.

• A. GRANT EXECUTE TASK ON TASK my_task TO APPLICATION ROLE app_public;
• B. GRANT EXECUTE TASK ON ACCOUNT TO SHARE;
• C. GRANT EXECUTE TASK ON TASK my_task TO APPLICATION ROLE app_owner;
• D. GRANT EXECUTE MANAGED TASK ON ACCOUNT TO SHARE;
• E. GRANT EXECUTE TASK ON DATABASE TO APPLICATION ROLE app_public;

解説: (Tech4Exam メンバーにのみ表示されます)

You are tasked with deploying a Snowflake Native Application that performs real-time data analysis. The application requires a warehouse to run and a user with specific privileges to access dat a. You want to automate the deployment process as much as possible, including warehouse creation, user provisioning, and privilege granting, all within the application package. Given the security considerations and best practices for Snowflake Native Applications, which of the following approaches is the MOST secure and recommended?

• A. Include a SQL script within the application package that uses the 'CREATE WAREHOUSE, 'CREATE USER , and 'GRANT commands to create the warehouse, user, and grant necessary privileges. The script will be executed by the consumer upon installation.
• B. Utilize the 'INSTALL' privilege when creating the application package and execute the SQL script (containing 'CREATE WAREHOUSE, 'CREATE USER , and 'GRANT) within the application's setup script using the 'EXECUTE IMMEDIATE command. This allows the application to create resources within the consumer's account.
• C. Use a setup script within the application package, granting it the 'APPLY APPLICATION PASSTHROUGH PRIVILEGES privilege. This will enable the application to inherit the privileges of the user who installed the application, allowing it to create the warehouse and user on their behalf.
• D. Request the consumer to manually create the warehouse and user with the required privileges before installing the application. Provide detailed instructions in the application documentation.
• E. Employ a secure deployment pipeline that leverages a separate, pre-authorized Snowflake account to provision the warehouse and useL The application package then only includes the application logic, assuming the resources already exist.

解説: (Tech4Exam メンバーにのみ表示されます)

A Snowflake Native App provider is working on the consumer-side testing of their application. They need to verify that specific events are being recorded correctly in the Event Table within the consumer's account. They are using the Snowflake Native Apps framework's testing capabilities. Which of the following approaches would be MOST reliable for validating the contents of the Event Table during automated testing?

• A. Use the 'SHOW EXTERNAL TABLES command within the consumer account to inspect the Event Table's structure and contents.
• B. Directly query the Event Table from the provider's account using a cross-account secure data share.
• C. Utilize the testing framework's built-in assertion capabilities to verify that specific events are present in the Event Table based on expected values.
• D. Implement a stored procedure within the Native App that queries the Event Table and returns the results to the provider through a secure output parameter.
• E. Grant SELECT privileges on the Event Table to a role in the consumer account that is accessible by the provider's testing framework.

解説: (Tech4Exam メンバーにのみ表示されます)