You are building a Snowflake Native Application that needs to store configuration data within the application package. This configuration data needs to be accessible by all components of the application, but should not be directly exposed to the consumer. What is the RECOMMENDED approach to securely store and access this configuration data?

• A. Store the configuration data in a dedicated table within the application database and grant SELECT privilege only to the application role.
• B. Store the configuration data in a JSON file within a stage in the provider account and grant the application role USAGE privilege to the stage.
• C. Encrypt the configuration data and store it in a named internal stage within the application package. Create a UDF within the application to decrypt and retrieve the data when needed.
• D. Store the configuration data as environment variables within the application's setup script.
• E. Store the configuration in a file within the application package and load it into a temporary table during application initialization. Only grant access to the application role.

A provider is developing a Snowflake Native App. They have created a database named 'app_db' using 'CREATE DATABASE app_db WITH MANAGED ACCESS;'. Subsequently, they need to create a schema within this database and grant specific privileges on the schema's objects to a role 'app_admin' . Which of the following SQL statements are valid and necessary to set this up securely and effectively?

• A.
  
• B.
  
• C.
  
• D.
  
• E.
  

You are managing a Snowflake Native Application that provides data enrichment services. Over time, you've accumulated several application package versions: v1 .0 (initial release), v1.1 (bug fixes), v2.0 (new features and schema changes), and v2.1 (performance improvements for v2.0). Some consumers are still using v1 .0, while others have upgraded to v2.1. You need to retire v1.0 to reduce maintenance overhead. Which of the following actions and considerations are MOST important when deprecating vl .0? Select TWO that apply.

• A. Update the application's metadata in the Snowflake Marketplace to indicate that v1.0 is no longer supported.
• B. Automatically migrate all consumers still using v1.0 to the latest version (v2.1 ) without their consent to simplify management.
• C. Identify consumers still using v1.0. Communicate the deprecation timeline and provide clear instructions on how to upgrade to a supported version. Offer support during the transition.
• D. Immediately drop version v1.0 from the application package to free up storage space.
• E. Keep v1.0 indefinitely to ensure compatibility with all existing application instances, regardless of usage.

A data science team within your organization is developing a Snowflake Native App that needs to access and process customer data stored in a Snowflake database. The app must only access data for customers residing in the 'USA' region. The team has created a custom role 'APP ROLE for the app to use. Which of the following is the MOST secure and efficient way to grant the app the necessary permissions to read the filtered data? Assume a secure view approach is preferred over direct table access.

• A. Grant the 'APP_ROLE the 'USAGE privilege on the database and schema containing the customer data table. Data filtering should still be handled by the app.
• B. Create a secure view that filters customer data to include only customers in the 'USA' region and grant the SAPP ROLE the 'SELECT privilege on the secure view.
• C. Grant the 'APP_ROLE the 'SELECT privilege on the base customer data table and rely on row-level security policies defined on that table.
• D. Create a standard view (non-secure) that filters customer data to include only customers in the 'USA' region and grant the 'APP_ROLE the 'SELECT' privilege on this view.
• E. Grant the SAPP ROLE the 'OWNERSHIP' privilege on the base customer data table and implement data filtering logic within the app itself.