You are developing a Streamlit application within a Snowflake Native Application that needs to access a secured view named 'sensitive_data' in the application's container. This view exposes aggregated and anonymized dat a. What minimum set of privileges must be granted to the 'app_public' application role to allow users to query this view from the Streamlit application?

• A. GRANT USAGE ON SCHEMA application TO APPLICATION ROLE app_public; GRANT SELECT ON VIEW .application.sensitive_data TO APPLICATION ROLE app_public;
• B. GRANT USAGE ON SCHEMA application TO APPLICATION ROLE app_public; GRANT ALL PRIVILEGES ON VIEW application.sensitive_data TO APPLICATION ROLE app_public;
• C. GRANT SELECT ON VIEW .application.sensitive_data TO APPLICATION ROLE app_public;
• D. GRANT USAGE ON DATABASE .application TO APPLICATION ROLE app_public; GRANT SELECT ON VIEW .application.sensitive_data TO APPLICATION ROLE app_public;
• E. GRANT USAGE ON DATABASE TO APPLICATION ROLE app_public; GRANT SELECT ON VIEW .application.sensitive_data TO APPLICATION ROLE app_public;

You are developing a Snowflake Native Application that uses a UDF to process data in the consumer's account. The UDF needs to access a specific table in the consumer's account but the UDF is running as Invoker's Rights (IR). Select all that apply to securely configure data access for this scenario using a data access framework and least privilege principles:

• A. Create a stored procedure running as OWNER, grant necessary privileges, then call this SP from UDF running as Invoker.
• B. Create an API integration that enables the UDF to securely authenticate and access the data through an external service.
• C. Grant 'SELECT privilege on the specific table directly to the application's invoker role.
• D. Grant 'SELECT privilege on the specific table to the application's service user role. Configure the UDF to run as OWNER, and use 'EXECUTE AS OWNER.
• E. Create a secure view that exposes only the necessary columns of the table, granting 'SELECT privilege on the secure view to the application's invoker role. Configure the UDF to select from this secure view.

You are developing a Snowflake Native Application that uses Streamlit for its user interface. The application needs to access a custom Python module named 'my_module' which resides within your application package. You have correctly packaged the module. However, when running the Streamlit application, you encounter an 'ImportError: No module named What is the most likely reason for this error and how can you resolve it?

• A. The 'my_module' is not included in the file for your application package. Add it to the 'packages' list in 'setup.py'.
• B. The correct handler is not specified in the 'manifest.ymr file.
• C. The 'my_module' is not located in the correct directory structure within the application package. Ensure it's placed in the 'src' directory (or the directory specified in 'package-name' in 'setup.py') and the directory structure mirrors the package structure required for import.
• D. The Streamlit application is not aware of the application package's Python environment. You need to set the environment variable within the Streamlit application to point to the directory containing 'my_module'.
• E. Streamlit does not support custom Python modules within Snowflake Native Applications. You must use only built-in Python modules or those available through Anaconda.

When designing the architecture of a Snowflake Native App, which of the following architectural considerations and trade-offs should you carefully evaluate to optimize performance, security, and cost-effectiveness? (Select all that apply)

• A. Storing all application data within the provider account and accessing it directly from the consumer account using data sharing to avoid data duplication.
• B. Implementing robust error handling and logging mechanisms to facilitate debugging and monitoring of the application's behavior in both the provider and consumer environments.
• C. Using secured API integration to call the external APIs to get real time details in the app to make the app more useful.
• D. Choosing the appropriate data access model (e.g., UDFs, stored procedures, Snowpark) based on the specific use case and performance requirements, considering the overhead associated with each approach.
• E. Minimizing data transfer between the provider and consumer accounts by leveraging Snowpark and UDFs for data processing within the consumer's environment.

A consumer installs a Snowflake Native Application from the Marketplace. The application requires access to a specific table, 'CUSTOMER DATA' , in the consumer's account. Which of the following steps are essential for the consumer to properly grant the application the necessary permissions, following least privilege principles, and ensuring the application functions as intended? Assume the application developer has properly requested the table grant in the setup script.

• A. Grant the 'USAGE privilege on the database and schema containing 'CUSTOMER_DATA' to the application role and then grant 'SELECT on the 'CUSTOMER DATA table to the application role.
• B. Grant the 'IMPORTED PRIVILEGES privilege on the database containing 'CUSTOMER_DATX to the application role created during installation.
• C. Grant the 'SELECT privilege directly on the 'CUSTOMER_DATA' table to the 'SNOWFLAKE.APP_ROLE' role associated with the application instance.
• D. Create a share from the provider account granting access to the 'CUSTOMER DATA' table and import it into the consumer account.
• E. Grant 'OWNERSHIP' on the "CUSTOMER_DATR table to the application role. This provides the application with complete control over the table.