You are developing a Snowflake Native Application that uses a custom Python handler to perform data transformations. This handler requires access to a third-party Python package not included in the standard Anaconda environment provided by Snowflake. To ensure the application functions correctly on consumer accounts, what steps must you take? (Select all that apply)

• A. Use the SALTER FUNCTION' command after installation on the consumer's account to add the required Python package to the function definition. This option is not possible.
• B. Specify the Python package as a dependency in the application's setup script using a install command.
• C. Instruct consumers to manually install the necessary Python package using 'pip install' in a Snowflake Snowpark Python worksheet after installing the application.
• D. Include the required Python package in the application package as a zip file using the 'CREATE or REPLACE FUNCTION' command with the 'imports' clause.
• E. Create a stage and upload the python package(s). Then in the Python UDF code, reference the python package from the stage.

A data engineer, Alice, is developing a Snowflake Native Application. She wants to implement event sharing to notify consumers when certain data thresholds are breached within the application's managed tables. What is the MOST effective and secure approach for implementing this event sharing mechanism, ensuring that consumers can subscribe to these events without direct access to the application's internal tables?

• A. Leverage Snowflake's event tables (using EVENT TABLES) to capture significant data changes, then create an API function using 'CREATE FUNCTION' with 'RETURNS TABLE' in the application package to expose these events to consumers through a secure share. Implement RBAC within the API function to manage access.
• B. Create a series of external functions that are called when the application's data changes. These functions will call an external notification service that alerts consumers.
• C. Implement a Python UDF that queries the managed tables and sends email notifications to consumers whenever a threshold is breached.
• D. Use Snowflake Streams and Tasks within the provider account to continuously monitor the managed tables and create events that are pushed to a shared data lake. Consumers then access the data lake.
• E. Grant SELECT privileges on the managed tables directly to consumer accounts, using secure views to filter data.

You are developing a Snowflake Native Application that leverages user-defined functions (UDFs) and stored procedures. During the security scanning process before listing on the Snowflake Marketplace, you encounter a 'Failed to Detect Secrets' error. After investigation, you determine that the error stems from hardcoded API keys within a Python UDF that are being used to interact with a third-party service. Which of the following strategies would be MOST effective and secure to resolve this issue and pass the security scan?

• A. Remove the Python UDF entirely and rewrite the logic in SQL stored procedures. Store the API keys as environment variables within the stored procedure's definition.
• B. Encrypt the API keys within the Python UDF using a symmetric encryption algorithm and store the encryption key in a secure string within the application package.
• C. Obfuscate the API keys within the Python UDF using a string manipulation technique. This will make it harder for unauthorized users to discover the keys.
• D. Replace the hardcoded API keys with references to Snowflake secrets and grant the necessary privileges to the application role. Access the secrets within the UDF using the 'SYSTEM$GET SECRET function.
• E. Store the API keys in a separate, secured table within the application's data container and access them dynamically within the Python UDF using SQL queries.

A Snowflake Native App provider wants to ensure that even future roles created in their provider account will NOT automatically have access to the application database , which was created without the "MANAGED ACCESS' property initially. After creating a security audit suggested it to be with managed access. Which of the following steps BEST secures the app database?
Note multiple options may be needed

• A. REVOKE ALL PRIVILEGES ON DATABASE FROM PUBLIC;
• B. DROP DATABASE CREATE DATABASE WITH MANAGED ACCESS;
• C. REVOKE USAGE ON DATABASE FROM ROLE PUBLIC;
• D. GRANT OWNERSHIP ON DATABASE TO ROLE application_role;
• E. ALTER DATABASE SET MANAGED ACCESS = TRUE;