You've developed a Snowflake Native Application. During the installation process in a consumer's account, the installation fails. The error message is vague and doesn't pinpoint the exact cause. What are the MOST effective steps you can take, in order , to diagnose the installation failure and provide the consumer with a resolution? (Select the top 3 steps)

• A. Examine the consumer's ACCOUNT_USAGE views, specifically related to query history and errors that occurred during the installation timeframe.
• B. Request the consumer to share their entire Snowflake account metadata with you for debugging purposes.
• C. Ask the consumer to manually create all the required roles and grants before attempting the installation again.
• D. Review the event logs generated by the application during the installation process using Snowflake Event Tables. Use the appropriate filtering and querying techniques to narrow down the relevant events.
• E. Leverage the 'SYSTEM$GET PKG INSTALLATION ERRORS function in the provider account to retrieve detailed error messages and debugging information related to the failed installation. Correlate this with the installation version and consumer account I

You've deployed a Snowflake Native Application to the Marketplace. A consumer reports an issue, and after investigating, you suspect a vulnerability related to SQL injection within a stored procedure. You want to implement best practices to mitigate this risk. Which of the following strategies are recommended to secure the stored procedure against SQL injection?

• A. Use parameterized queries or prepared statements whenever possible to prevent user input from being directly interpreted as SQL code.
• B. Implement strict input validation and sanitization to ensure that user input conforms to expected data types and patterns.
• C. Disable all external network access from within the stored procedure environment.
• D. Encode all user input before inserting it into SQL queries to neutralize potentially harmful characters.
• E. Grant 'OWNERSHIP' privilege to the stored procedure to prevent unauthorized modifications.

Consider a scenario where a Snowflake Native Application contains a task named "daily data sync'. This task needs to be executed in the consumer's account. To enable proper monitoring and governance within the consumer's account, the consumer wants to tag the executions of this task. Which of the following actions must the application provider take to ensure that the consumer can successfully tag the 'daily data sync' task executions without compromising the security of the application or requiring the consumer to have elevated privileges on the application database?

• A. The provider must grant the APPLY MASKING POLICY privilege on the task to the consumer's account role, enabling the consumer to configure tags via masking policies.
• B. The provider must grant the APPLY TAG privilege on the task to the consumer's account role. No other configuration is necessary.
• C. The provider must grant the OWNERSHIP privilege on the task to the consumer's account role, allowing the consumer to set tags directly.
• D. The provider must grant the APPLY TAG privilege on the account to the consumer s account role.
• E. The provider cannot enable the consumer to tag the task executions without granting elevated privileges on the application database or compromising security; tagging is solely the provider's responsibility.

You are developing a Snowflake Native Application that relies on external functions (UDFs/UDTFs) for data processing. A new version of your application includes significant changes to these external functions, potentially affecting existing consumer data and queries. How should you manage the upgrade process to minimize disruption and ensure data integrity in consumer accounts? Assume consumers rely on your function names in their queries. Which of the following approach is MOST suitable?

• A. Develop wrapper functions in the new version that call the original external functions with the new logic applied. Consumers can then gradually migrate to the wrapper functions without immediately changing their queries.
• B. Update the external functions in place with the new logic. Snowflake's versioning will automatically handle any compatibility issues for existing queries.
• C. Use release directives to direct users to an intermediate version that provides a compatibility layer for the external function changes. This layer translates calls to the old function names into calls to the new functions, allowing for a phased transition.
• D. Create new versions of the external functions with different names while maintaining the old functions in the new version. Consumers can then migrate to the new functions at their own pace. Use release directives to route new users to new functions.
• E. Rename all the external functions in the new version and instruct consumers to update their queries accordingly after the upgrade.

A software company, 'Datalnsights', is developing a Snowflake Native Application that requires restricted access to a source data table in the consumer's account. Datalnsights wants to ensure that only the application can access the data, and the consumer cannot directly query it. What is the MOST secure and recommended approach Datalnsights should use within their application package to grant access?

• A. Granting 'SELECT privilege directly on the source data table to the application role.
• B. Creating a secure view on top of the source data table and granting 'SELECT privilege to the application role on the view.
• C. Granting the ' USAGE privilege on the database and schema containing the source data table directly to the application role.
• D. Exposing the table directly through the application's setup script using 'GRANT SELECT ON TABLE TO APPLICATION ROLE app_role' .
• E. Using a secure UDF within the application to access the source data table, ensuring data masking and redaction, with only the UDF being granted SELECT privileges on the table.