You are developing a Snowflake Native Application package that provides a set of UDFs for data transformation. The UDFs require specific Snowflake privileges to access data in consumer accounts. Which of the following methods can ensure your application has the necessary privileges when installed in a consumer account? (Choose all that apply)

• A. Leverage 'GRANT APPLICATION ROLE ... ON ..: statements in the setup script to grant the APPLICATION role the required privileges.
• B. Create a separate role in the consumer account and grant the necessary privileges to that role. Have the application assume this role.
• C. Request the required privileges in the application package manifest file ('manifest.yml'
• D. Use 'GRANT OWNERSHIP' to grant the APPLICATION role ownership of the target objects in the consumer account.
• E. Instruct consumers to manually grant the necessary privileges to the APPLICATION role after installation.

You are developing a Snowflake Native App that allows consumers to configure certain parameters through a setup page. You want to persist these configurations securely. What is the recommended approach to store and retrieve consumer-specific configuration data within a Snowflake Native App?

• A. Store the configuration data as environment variables within the application package.
• B. Store the configuration data in a consumer-specific stage created during app installation.
• C. Store the configuration data in a secured view provided by the provider and accessible to the consumer.
• D. Utilize the 'APPLICATION_SETTINGS' object to store and retrieve configuration parameters. Access these settings within your application logic.
• E. Create a dedicated configuration table within the consumer's Snowflake account using the setup script and use secure UDFs to access it.

A Snowflake Native App provider wants to implement row-level security (RLS) in an event table to ensure that consumers only receive events pertaining to their specific organization, even if they have been granted USAGE on the event table function. How can this be achieved?

• A. Row-level security cannot be enforced on event tables shared through Snowflake Native Apps due to security limitations.
• B. Create a row access policy that filters rows in the event table based on the APP_INSTANCE_ID() function, ensuring each consumer only sees events related to their application instance.
• C. Create a view on top of the event table that includes a WHERE clause filtering by APP INSTANCE ID() and grant access to the view instead of the base table.
• D. Create a masking policy that filters rows in the event table based on the CURRENT_ACCOUNT() function to match the consumer's account ID.
• E. Implement a custom stored procedure that acts as a proxy for accessing the event table, filtering data based on the consumer's user ID.

You are developing a Snowflake Native Application and need to implement robust logging for troubleshooting purposes. You want to capture detailed information about function calls, including input parameters and return values. Which of the following approaches offers the MOST comprehensive and secure solution for logging within a Snowflake Native Application, considering the limitations imposed by the Snowflake environment?

• A. Writing log messages to an external stage (e.g., AWS S3, Azure Blob Storage) that is accessible to both the provider and consumer accounts.
• B. Using ' SYSTEM$LOG' with trace level logging and store the logs into internal stage, accessible only by the application's service user.
• C. Employing 'EXECUTE IMMEDIATE to write log messages directly to a dedicated logging table within the consumer's account.
• D. Using 'SYSTEM$LOG' with debug level logging and capturing logs in a secure internal stage, managed by the provider, ensuring data privacy and limited consumer access.
• E. Leveraging Snowflake's event tables and configuring the application to emit custom events, then creating views on those event tables within the consumer's account.

You are developing a Snowflake Native Application that processes sensitive customer dat a. You want to ensure that your application has undergone a thorough security review before it is listed on the Snowflake Marketplace. Which of the following steps are mandatory to ensure that your application meets Snowflake's security requirements for a secure native application?

• A. Submit your application for Snowflake Native App Security Review by filling out the security review intake form with all the necessary documentation.
• B. Implement data masking policies on all sensitive data within the application.
• C. Obtain a third-party penetration test report for the application's code and infrastructure.
• D. Ensure all sensitive data is encrypted at rest and in transit using Snowflake's built-in encryption features.
• E. Enforce multi-factor authentication for all users accessing the application.