[2026] Valid NAS-C01 test answers & Snowflake NAS-C01 exam pdf [Q29-Q45]

NEW QUESTION 29
You are developing a Snowflake Native Application designed to be deployed by various consumers from the Snowflake Marketplace. The application interacts with user-provided data through secure UDFs and external functions. To ensure minimal impact and prevent unintended data access, how should you configure the application’s security context and privileges when creating the application package?

Grant OWNERSHIP privilege on all schemas and tables to the application’s service account.

Use the ‘CALL APPLICATION.API GRANT PRIVILEGE command, and grant only the ‘USAGE privilege on the shared database containing consumer data, along with the ‘ EXECUTE privilege on the UDFs and external functions.

Define roles within the application and grant ‘USAGE’ on all schemas and ‘SELECT on all tables to these roles.

Grant ‘ALL PRIVILEGES on the database containing consumer data to the application role.

Create a separate application role with minimal privileges, and grant only ‘USAGES on the database and ‘EXECUTE’ on the relevant functions to that role. Use ‘CALL to grant USAGE on the share.

NEW QUESTION 30
You are developing a Snowflake Native Application and want to implement robust observability and telemetry. Which of the following approaches will enable you to effectively monitor the application’s performance, identify errors, and collect usage metrics within the consumer’s account?

Rely solely on Snowflake’s built-in query history and resource monitoring features in the consumer’s account, as these automatically capture all application activity.

Implement custom logging using ‘SYSTEM$LOG’ and store application logs in a separate table within the application’s container. Configure grants to allow the application developer to access these logs.

Utilize to write log data to a secure table within the application and leverage views granted to the consumer to expose relevant metrics and error information. Ensure appropriate roles have access to the views.

Directly access the consumer’s system tables (e.g., ‘SNOWFLAKE.ACCOUNT USAGE.QUERY HISTORY) to extract application-related metrics based on query identifiers generated by the application.

The consumer is responsible for implementing observability and telemetry. The application developer cannot implement observability features that function within the consumer’s account.

NEW QUESTION 31
You are the provider of a Snowflake Native Application built with Scal
a. Consumers are reporting that a specific UDF, ‘calculate_risk’ , occasionally returns incorrect results for certain input datasets. You suspect an issue with the UDF’s logic but struggle to reproduce the problem in your development environment. Given that you cannot directly access the consumer’s data, what are the most effective strategies for diagnosing this issue?

Request the consumer to provide anonymized sample data that triggers the issue. Use this data in your development environment to debug the UDF.

Implement comprehensive unit tests for the ‘calculate_risk’ UDF, covering a wide range of input values and edge cases. Ensure these tests pass before deploying new versions of the application.

Implement logging within the ‘calculate_risk’ UDF to capture input parameters and output values for a sample of executions. Store these logs in a secure table accessible only to the provider, subject to data governance policies. Utilize Snowflake’s masking policies to mask the sensitive data and allow the provider to see only masked version, not the actual sensitive data.

Modify the UDF to include a ‘debug’ mode that performs additional checks and assertions. The consumer can enable this mode to collect diagnostic information and report any failures back to the provider. Consumer shares the error logs/code

Request the consumer to execute the UDF with the problematic datasets and provide the resulting incorrect output. Then, use Snowflake’s query history and lineage features to trace the data flow and identify potential issues in the UDF’s logic.

NEW QUESTION 32
You are developing a Snowflake Native Application that needs to be deployed across multiple Snowflake accounts. The application includes a setup script that creates several tables and stored procedures. However, some consumers might have naming conflicts with the objects created by your setup script. Which of the following strategies can you use to minimize naming conflicts and ensure smooth application deployment? (Select all that apply)

Prefix all objects created by the setup script with a unique, application-specific identifier.

Instruct consumers to drop any conflicting objects before installing the application.

Dynamically generate object names within the setup script using the application’s name and a random suffix.

Utilize the ‘CREATE OR REPLACE syntax for all objects in the setup script to overwrite any existing objects.

Package all application objects into a dedicated schema within the consumer’s database.

NEW QUESTION 33
A customer has installed your Snowflake Native Application, which utilizes a IJDF that performs complex calculations. The customer reports performance issues and sporadic errors. As the application provider, how can you BEST establish telemetry and observability to diagnose the problem, without compromising the customer’s data security or privacy?

Request direct access to the customer’s Snowflake account to inspect the IJDF execution logs and query performance metrics.

Implement logging within the UDF to capture execution time, input parameters (anonymized), and error messages. Store this data in an Event Table within the application provider’s account and expose aggregate statistics through a secure API endpoint for the consumer to monitor.

Utilize Snowflake’s Query History to track the IJDF’s performance in the customer’s account and provide recommendations based on the observed query patterns.

Instruct the customer to enable verbose logging in their Snowflake account and provide you with the log files for analysis.

Create a shared view on the UDF execution logs in the customer’s account, granting you read-only access to the relevant information.

NEW QUESTION 34
You are developing a Snowflake Native Application designed to audit user activity within a consumer’s Snowflake account. Your application needs to store audit logs persistently and efficiently. You anticipate high write volumes and require the ability to query these logs effectively for compliance purposes. Which of the following strategies is the MOST appropriate for storing and managing audit logs within your native application?

Store audit logs in an external stage, leveraging cloud storage. Implement periodic data loading from the stage into a Snowflake table for querying.

Store audit logs directly in a Snowflake table, leveraging clustering keys and partitioning for efficient querying and maintenance.

Write audit logs to a Snowflake queue. Configure a Snowpipe to load the data continuously into a Snowflake table.

Store audit logs as JSON files in a variant column within a Snowflake table.

Send audit logs to a third-party logging service via external functions. Maintain a summary table within Snowflake containing aggregated audit data.

NEW QUESTION 35
You are building a Snowflake Native Application that includes a stored procedure to perform data transformation. This stored procedure needs to access external data sources using a secure API. Which of the following methods provides the MOST secure and recommended approach for managing API credentials within the Snowflake Native Application context?

Store the API credentials directly within the stored procedure code as encrypted strings. Decrypt them at runtime using a key stored in a separate table.

Store the API credentials in a configuration file included within the application package. Read the credentials from this file within the stored procedure.

Use Snowflake’s Secret object to securely store the API credentials. Access the Secret within the stored procedure using function.

Use the consumer’s account’s environment variables to store API credentials. The application retrieves credentials from there.

Hardcode the API credentials directly within the stored procedure code. This is the simplest approach for development and testing.

NEW QUESTION 36
You’re designing a Snowflake Native Application that leverages Snowpark Container Services (SPCS) and you are creating a CI/CD pipeline for deploying your application to multiple Snowflake regions. As part of the pipeline, you want to automate the creation of a Compute Pool. Which of the following approaches represents the MOST robust and repeatable method for creating the Compute Pool across all regions, considering factors like consistency and potential differences in available instance families?

Manually create the Compute Pool in each region using the Snowflake web interface, ensuring the parameters are identical across all instances.

Use a Snowflake Script (SnowSQL) to create the Compute Pool, hardcoding the instance family and other parameters directly into the script.

Use a Snowflake Script (SnowSQL) to create the Compute Pool, retrieving the available instance families dynamically using ‘SYSTEM$GET_CP POLICY’ and selecting the appropriate instance family based on regional availability. Store common configurations in environment variables.

Create a Compute Pool in one region and then clone it to all other regions using the ‘CREATE CLONE syntax.

Compute Pools created are global objects, so the pool automatically exists across all regions.

NEW QUESTION 37
Consider the following setup script intended to install a Snowflake Native Application in test mode. The application relies on a custom role ‘APP ROLE’ and a secured view ‘SECURE VIEW’. Analyze the script and identify which line, if any, contains a critical error that would prevent successful testing:

NEW QUESTION 38
A data science team is developing a Native App on Snowflake that requires access to data from multiple customer accounts (Reader Accounts). They need to ensure strict data governance and minimize the risk of data leakage. Which of the following approaches provides the MOST secure and scalable solution for accessing and managing this cross-account data?

Grant SELECT privileges directly to the application role on all relevant tables in the consumer accounts.

Create a shared database from each consumer account containing views over the required tables, granting SELECT privileges on these views to the application role.

Implement a data access service within the Native App that uses external functions to query data from consumer accounts, relying on network policies for security.

Package the data extraction logic directly into the Native App using User-Defined Functions (UDFs) that establish secure connections to each consumer account using separate credentials stored securely within the application package.

Utilize secure data sharing with data clean rooms, exposing the required datasets via views on each data clean room.

NEW QUESTION 39
A Snowflake Native Application uses a task ‘aggregate_data’ to aggregate dat a. This task is owned by the ‘app_public’ role and executes a stored procedure ‘aggregate data proc’. Consumers have reported the task sometimes fails intermittently, citing permission issues, specifically related to accessing a specific table in the consumer account. The application provider has granted ‘SELECT’ privilege on the table to the ‘app_public’ role. However, the failures persist. What is the MOST LIKELY cause of the intermittent failures related to executing the task?

The stored procedure is executed with caller’s rights (CALLER), but the application role ‘app_public’ doesn’t have sufficient warehouse privileges in the consumer account.

The stored procedure is executed with definer’s rights (OWNER), so the privilege check occurs against the application provider’s account, not the consumer’s account.

The stored procedure is executed with caller’s rights (CALLER), but the application role ‘app_public’ doesn’t have the ACTIVATION privilege on the task.

The stored procedure is executed with caller’s rights (CALLER), and the ‘EXECUTE TASK privilege wasn’t granted correctly, which causes the user to randomly lose access on the Snowflake Ul.

The task ‘aggregate_data’ is executing with definer’s rights (OWNER) of the application, so the grant of SELECT privilege to ‘app_public’ is sufficient, and there is likely an issue with transient network connectivity.

NEW QUESTION 40
You are developing a Snowflake Native Application that manages customer accounts. In version 1.0, you had a table named ‘CUSTOMER_ACCOUNTS with columns ‘ACCOUNT D’, ‘CUSTOMER NAME, and ‘EMAIL’. You are now releasing version 2.0, which requires adding a new column ‘PHONE NUMBER to the ‘CUSTOMER ACCOUNTS table, but you need to ensure backward compatibility and allow seamless upgrades for existing installations. Which of the following approaches within the ‘setup.sqr file is the MOST robust and reliable to implement this schema change without disrupting existing users?

NEW QUESTION 41
You are developing a Snowflake Native Application for a financial institution that needs to be deployed across multiple cloud providers (AWS, Azure, GCP) to minimize latency for their global customer base. The application relies on a secure and consistent method for accessing external services for real-time market dat a. Which of the following strategies would BEST ensure cross-cloud functionality and adherence to Snowflake Marketplace best practices for secure data access?

Hardcode cloud-specific endpoint URLs for the external services in your application code, using conditional statements to determine the correct endpoint based on the Snowflake cloud region.

Use Snowflake’s external functions with secure OAuth authentication to access the external services, leveraging Snowflake’s built-in cross-cloud replication capabilities to ensure data consistency.

Create separate versions of the Native Application for each cloud provider, each with customized configurations for accessing the external services. Publish each version separately on the Snowflake Marketplace.

Package the external service client libraries directly within the Native Application and configure the application to dynamically discover the nearest available endpoint at runtime, storing credentials within a Snowflake secret.

Use Snowflake’s Network Rules feature in conjunction with external functions that leverage API integration objects, storing the secret material necessary to authenticate with the external API. Leverage Snowflake’s built-in cross-cloud replication capabilities to ensure data consistency.

NEW QUESTION 42
You are developing a Snowflake Native Application for a data enrichment service and plan to list it on the Snowflake Marketplace. You want to control the costs incurred by consumers of your application while maximizing its accessibility. Which of the following strategies represent Snowflake Marketplace best practices for cost management and pricing?

Offer a free trial period with limited functionality to allow potential consumers to evaluate the application before committing to a paid subscription.

Implement a tiered pricing model based on data volume processed, compute resources consumed, or number of users accessing the application. Offer a free basic tier with limited functionality.

Provide detailed cost estimation documentation outlining the expected costs for different usage scenarios and data volumes.

Refrain from providing any cost-related information upfront to encourage broader adoption, deferring cost discussions until after installation and usage.

Use Snowflake’s built-in resource monitors to proactively track application consumption and alert consumers when they approach predefined spending limits.

NEW QUESTION 43
You are tasked with developing a Snowflake Native Application that allows consumers to securely access and analyze data from an external API. Your application needs to handle API authentication using OAuth 2.0, refresh tokens automatically, and provide a user- friendly interface for consumers to configure the API connection. Which of the following steps are CRITICAL for ensuring secure and seamless integration with the external API within your Snowflake Native Application?

Store the client ID and client secret directly within the application’s setup script.

Utilize Snowflake’s Secret objects to securely store the client ID and client secret. Use the object within your Snowflake Native App to make the application consumer-configurable.

Require consumers to manually configure the OAuth 2.0 connection details (client ID, client secret, token endpoint, etc.) within their Snowflake account and then pass these details as parameters to your application’s functions.

Use Snowflake’s External Functions to call an API Gateway to obtain authentication tokens and then make calls to External API.

Embed the OAuth 2.0 client library directly into your application’s code and handle token management within the application logic.

NEW QUESTION 44
You are the provider of a Snowflake Native Application. After releasing version ‘1.0’ of your application, a security vulnerability is discovered. You quickly develop a fix in version ‘1.1 What steps should you take to ensure that all consumer accounts are promptly and securely upgraded to the fixed version, minimizing disruption to their operations and ensuring their data security?

Immediately revoke ‘USAGE privileges on version ‘1 .C for all consumer accounts, forcing them to contact you for an upgrade to ‘1.1’. Provide upgrade instructions in the application’s documentation.

Announce the security vulnerability and the availability of version ‘1.1 through the Snowflake Marketplace. Rely on consumer accounts to self-upgrade based on their awareness and urgency.

Use the ‘ALTER APPLICATION PACKAGE … SET DEFAULT VERSION = ‘1.1″ command. This will automatically upgrade all existing installations to the new version during their next scheduled refresh.

Contact Snowflake Support to request a forced upgrade of all consumer accounts to version ‘ 1.1 due to the security vulnerability.

Grant ‘USAGE’ privilege to all consumer accounts on version ‘1.1 Monitor consumer adoption of the newer version, and after a reasonable period, revoke ‘USAGE on version ‘1.0’. Communicating the importance of upgrading.

NEW QUESTION 45
A Snowflake Native Application is being developed. The application requires access to a third-party API to enrich dat a. To securely store the API key, the developer plans to use a Secret object within Snowflake. Which of the following steps are necessary to grant the application, specifically an application role named ‘data_processor’ , the ability to read this Secret object? (Choose three)

Grant the OWNERSHIP privilege on the Secret object to the ‘data_processor’ application role.

Grant the USAGE privilege on the secret object to the ‘APPLICATION PACKAGE.

Grant the READ privilege on the Secret object to the ‘data_processor’ application role.

Grant the USAGE privilege on the Secret object to the ‘data_processor’ application role.

The ‘data_processor’ application role automatically inherits privileges for accessing Secrets defined within the application package.