Get real NAS-C01 exam questions for better preparation

Snowflake NAS-C01 Exam Overview:

Snowflake NAS-C01 Exam Syllabus Topics:

Snowflake SnowPro Specialty - Native Apps Sample Questions:

Question 1

A Snowflake Native Application developer is deploying a Snowpark Container Services service. The 'service.yamr file includes the following configuration snippet for defining the service's endpoint:

A. Update the port configuration to use port 443 and set the protocol to 'TLS'. Snowflake automatically handles TLS termination for SPCS services on port 443.
B.

C. Add a TLS certificate and key to the Kubernetes Secret referenced by the 'tls' field in the Ingress configuration. Also, update the port configuration to reflect port 443.
D. Configure the container application itself to handle TLS termination using a self-signed certificate. No changes are required in the 'service.yaml' file.
E. Set 'useTls' to true under ports specification. No changes are required to the 'service.yaml' file.

Question 2

You are developing a Snowflake Native Application that manages customer accounts. In version 1.0, you had a table named 'CUSTOMER_ACCOUNTS with columns 'ACCOUNT D', 'CUSTOMER NAME, and 'EMAIL'. You are now releasing version 2.0, which requires adding a new column 'PHONE NUMBER to the 'CUSTOMER ACCOUNTS table, but you need to ensure backward compatibility and allow seamless upgrades for existing installations. Which of the following approaches within the 'setup.sqr file is the MOST robust and reliable to implement this schema change without disrupting existing users?

A.

B.

C.

D.

E.

Question 3

You are developing a Snowflake Native Application that needs to access data residing in the consumer's account. The application requires specific permissions to read certain tables and execute specific functions. How should you define and manage these access privileges to ensure both security and functionality?

A. Define a custom role within the application package with the minimum required privileges (e.g., 'SELECT on specific tables, 'USAGE on specific functions). The consumer then grants this role to the application during installation. Use secure views if needed.
B. Grant the 'ACCOUNTADMIN' role to the application. This provides unrestricted access to all resources in the consumer's account, simplifying development and deployment.
C. Create a new database role and grant the required permissions to the database role, later grant the database role to the application role. Use secure views for access to consumer data.
D. Use the 'GRANT OWNERSHIP' command to transfer ownership of the required tables and functions to the application's service account. This gives the application full control over these resources.
E. Rely on the consumer to manually grant the necessary privileges to the application's service account after installation. Provide clear instructions in the application's documentation.

Question 4

You are developing a Snowflake Native Application that processes sensitive customer dat a. You need to ensure that the application is secure and compliant with data privacy regulations. Which of the following security measures are MOST effective when designing your application package? (Select TWO)

A. Store all sensitive data in external stages managed by the provider account to isolate it from the consumer's Snowflake environment.
B. Use obfuscation techniques on the data within the application, making it harder to be read.
C. Bypass Snowflake's RBAC and authentication to manage access within the application.
D. Encrypt all data at rest and in transit using Snowflake's built-in encryption features.
E. Implement role-based access control (RBAC) to restrict access to sensitive data based on user roles within the application.

Question 5

A Snowflake Native App provider wants to ensure that even future roles created in their provider account will NOT automatically have access to the application database , which was created without the "MANAGED ACCESS' property initially. After creating a security audit suggested it to be with managed access. Which of the following steps BEST secures the app database?
Note multiple options may be needed

A. DROP DATABASE CREATE DATABASE WITH MANAGED ACCESS;
B. ALTER DATABASE SET MANAGED ACCESS = TRUE;
C. REVOKE USAGE ON DATABASE FROM ROLE PUBLIC;
D. GRANT OWNERSHIP ON DATABASE TO ROLE application_role;
E. REVOKE ALL PRIVILEGES ON DATABASE FROM PUBLIC;

Solutions: