You are designing a Snowflake Native Application that processes customer dat a. To comply with data residency requirements, you need to ensure that the application logic runs within the customer's Snowflake account, but the application code is owned and managed by your organization. Which of the following approaches BEST achieves this requirement while providing version control and updates?

• A. Develop the application using Snowflake's Snowpark API and package the compiled code within the application package. The setup script will execute the Snowpark code within the customer's Snowflake account.
• B. Use Snowflake's Data Sharing feature to directly share the database and schema containing the application logic with customers. Grant them ownership of these objects.
• C. Embedd the raw application code directly into the SETUP script so that it gets re-deployed on every run.
• D. Build the application logic as a set of stored procedures and UDFs within the application package. Provide a setup script that creates these objects in the customer's account during installation.
• E. Create a Docker container containing the application logic and deploy it as a Snowflake External Function. Share the container image with customers and instruct them to deploy it in their environment.

A Snowflake Native Application developer wants to ensure that a specific stored procedure, 'UPDATE CUSTOMER STATUS, within their application can only be executed by users who have been granted the 'CUSTOMER ADMIN' role in the consumer's account. How can the developer enforce this authorization check within the stored procedure's code?

• A. Utilize the 'SESSION CONTEXT()' function to check for a specific context variable set only when a user with the 'CUSTOMER ADMIN' role is connected.
• B. Use the function within the stored procedure to verify that the 'CUSTOMER_ADMIN' role is currently active in the session. If not, raise an error.
• C. Use the 'CURRENT ROLE()' function within the stored procedure to check if the current role is 'CUSTOMER ADMIN'. If not, raise an error.
• D. Grant the 'EXECUTE privilege on the stored procedure only to the 'CUSTOMER_ADMIN' role in the consumer's account.
• E. Implement a custom function that calls 'SYSTEM$GET PRIVILEGES()' and checks if the user executing the stored procedure possesses the 'CUSTOMER ADMIN' role.

A provider is testing their Snowflake Native Application in a consumer environment. The application includes a Streamlit app that displays data from a table provisioned in the consumer account. The consumer reports that the Streamlit app is displaying an errorrelated to accessing the table. The 'streamlit.secretS dictionary is used to store the database connection details. The application role app_role' is designed to have access to the table. Which of the following could be potential causes of the problem, assuming the connection details are valid?

• A. The Streamlit app is not properly configured to assume the when executing queries.
• B. The 'app_role' does not have the 'SELECT privilege on the table.
• C. The 'app_role' does not have the privilege on the database containing the table.
• D. The consumer has not shared the database containing the table with the provider account.
• E. The 'streamlit.secretS dictionary is not accessible to the application due to incorrect file permissions.

You're developing a Snowflake Native Application that stores user preferences in a table named 'USER PREFERENCES'. In version 1.0, this table only contained 'USER ID and 'THEME' columns. In version 2.0, you need to add a new 'LOCALE' column with a default value of 'en-CIS'. However, existing users should retain their existing preferences and not have the new 'LOCALE' column set to 'NULL'. Which of the following 'setup.sql' scripts correctly implements this requirement during the version upgrade?

• A.
  
• B.
  
• C.
  
• D.
  
• E.