NAS-C01 試験問題を無料オンラインアクセス

You are developing a Snowflake Native Application using Snowpark Container Services. The application needs to access sensitive data stored in an internal stage, but you want to ensure that only the application's container service can access this stage and no other users or processes. How can you achieve this using network policies and ingress/egress rules?

• A.Create a network policy that allows inbound traffic from all IP addresses and attach it to the account. Grant 'READ and 'WRITE' privileges on the internal stage to the Native App's service account.
• B.Create an egress rule for the container service that allows outbound traffic only to Snowflake's internal IP address range. Create a network policy that allows inbound traffic only from the container service's egress IP address. Grant 'READ and 'WRITE privileges on the internal stage to the Native App's service account.
• C.Create a network policy that allows inbound traffic only from the specific IP address range of the Snowflake region where the container service is running. Grant READ and 'WRITE privileges on the internal stage to the Native App's service account.
• D.Create an ingress rule for the container service that specifies allowed inbound connections and egress rule for the container service that only allows outbound traffic to Snowflake's internal endpoint for stage access. Grant 'READ and 'WRITE privileges on the internal stage to the Native App's service account.
• E.Create an ingress rule for the container service that allows only outbound traffic to the internet. Grant 'READ and 'WRITE privileges on the internal stage to the Native App's service account.

You are developing a Snowflake Native Application that includes a Streamlit UI. The application needs to read configuration parameters such as API keys and database connection strings. Which of the following methods are the recommended and secure ways to manage these configuration parameters within a Snowflake Native App?

• A.Store the configuration parameters directly within the Streamlit code as Python variables.
• B.Store the configuration parameters as environment variables within the Snowflake environment where the Streamlit application is running.
• C.Store configuration parameters in an external file (e.g., a JSON or YAML file) and include it in the application's deployment package. Read the file from the Streamlit application.
• D.Store the configuration parameters in a dedicated table within the Snowflake managed database and read them using SQL queries from the Streamlit application. Grant appropriate privileges to the Streamlit application's role on this table.
• E.Use Streamlit secrets Cst.secretS) configured within the Streamlit application's settings in Snowflake. Store sensitive information like API keys and database credentials there.

You have created a Snowflake Native Application that includes a User-Defined Function (UDF) written in Python. The UDF processes JSON data and performs complex calculations. During testing in a consumer's account, you discover that the UDF is running slower than expected. What steps can you take to optimize the UDF's performance? (Select TWO)

• A.Recompile the UDF with the latest version of the Snowflake runtime environment.
• B.Switch the UDF implementation from Python to SQL, as SQL UDFs are generally faster than Python UDFs.
• C.Increase the warehouse size allocated to the consumer's account, as this directly impacts UDF execution speed.
• D.Leverage vectorization techniques within the Python UDF using libraries like NumPy to perform operations on entire arrays instead of individual elements.
• E.Reduce the complexity of the UDF by simplifying the calculations and minimizing the amount of data processed.

You've identified a critical security vulnerability in your Snowflake Native Application that requires immediate remediation. You need to release a patch, but you want to minimize the impact on consumers who are already using your application. Which of the following approaches is MOST suitable for deploying this patch? Select TWO that apply.

• A.Create a new version of the application package with the patch applied, and immediately update the default version of the application package to the new version.
• B.Develop a SQL script containing the necessary fixes and provide it to consumers with instructions on how to apply it manually to their installed application instances.
• C.Leverage zero-downtime patching (if supported by Snowflake in future) by updating internal objects without requiring consumers to update or redeploy their installed application instances.
• D.Issue an official announcement to all consumers that they need to uninstall and reinstall the application to receive the security fix.
• E.Create a new version of the application package containing the patch. Ensure the new version addresses the vulnerability while maintaining backward compatibility with existing application interfaces and data formats, and then gradually roll out the new version to consumers using APPLICATION roles and grants.

You're packaging a Snowflake Native App and need to define the minimum Snowflake version required for installation. You also want to specify an optional PARAMETER that users can configure during installation to customize the app's behavior. Which section of the manifest file allows you to achieve this?

• A.The 'privileges.sql' file, where you define the privileges required by the application.
• B.The 'deployment.sql' file where you define the app's deployment settings.
• C.The 'application.yaml' file under the 'configuration' section, where you can specify and define PARAMETERS with their types and default values.
• D.The 'setup.sqrl' file, where you define SQL commands to be executed during app installation.
• E.The 'metadata.json' file, which only contains descriptive information about the app.