You are preparing to list your Snowflake Native Application on the Snowflake Marketplace. You've developed the application and implemented security measures. Which of the following steps are essential best practices for ensuring a successful and secure listing on the Snowflake Marketplace?

• A. Clearly communicate the application's security model, including data encryption methods, access controls, and any reliance on consumer-side security configurations. Undergo and document regular security audits and penetration tests of the application.
• B. Include a prominently displayed disclaimer stating that the application is provided "as is" and the provider assumes no liability for any damages arising from its use. Only provide basic installation instructions. It is the end user's responsibility to know how to use the application.
• C. Implement robust error handling and logging mechanisms to provide consumers with informative error messages and aid in troubleshooting. Include mechanisms for securely collecting and storing application usage metrics (if required), ensuring compliance with privacy regulations.
• D. Thoroughly document the application's functionality, installation instructions, configuration options, and any known limitations. Provide clear and concise pricing information and support contact details.
• E. Avoid documenting any limitations or potential issues with the application to present a flawless image to potential consumers. Only provide limited pricing information to create a sense of urgency to potential consumer

You are designing a Snowflake Native Application that utilizes Snowpark Container Services to provide a data enrichment service for customer dat a. This service requires the application to securely store and manage API keys and other sensitive configuration data. Which of the following methods offers the MOST secure and compliant approach for managing these secrets within the context of a Snowflake Native Application deployed in the customer's environment?

• A. Hardcoding the API keys within the application's source code. The source code is obfuscated to make it difficult to extract the keys.
• B. Leveraging Snowflake secrets to securely store and manage the API keys. The container retrieves the secrets at runtime using the Snowflake API or Snowpark.
• C. Encrypting the API keys using a symmetric key and storing them in a Snowflake table. The container retrieves and decrypts the keys at runtime.
• D. Storing the API keys in an external key management system (KMS) and granting the container access to the KMS using its assigned service account.
• E. Storing the API keys directly within the container's environment variables during the container build process.

You are developing a Snowflake Native Application that connects to an external API to enrich dat a. To comply with best practices and maintain security posture of your Native App, you decide to manage the API Key as Secret. Which of the following approach are needed to ensure that the Snowflake Native application can securely access the secret?

• A. Store the API Key directly within the application code, encrypting it using AES encryption with a key managed by Snowflake.
• B. Store the API Key as an environment variable within the application container.
• C. Store the API key using Snowflake's secret management feature and the 'USAGE' privilege to the application's invoker's rights role.
• D. Store the API Key as a Secret within Snowflake and grant USAGE privilege on the secret to the application role.
• E. Create a secure UDF that retrieves the API Key from an external key management system and grant USAGE privilege on UDF to the application role.

A Snowflake Native App developer wants to externalize certain configuration values so that a consumer can adjust the app's behavior without modifying the app's code directly. Which of the following methods is the MOST appropriate for achieving this using the Snowflake Native App Framework?

• A. Hardcoding the configuration values directly into the SQL code.
• B. Defining parameters in the manifest file and using them within the application code.
• C. Using dynamic SQL to modify the application code at runtime based on environment variables.
• D. Storing the configuration values in a separate Snowflake table within the consumer account.
• E. Using Snowflake variables and setting them at the session level.

You are developing a Native App on Snowflake that needs to interact with an external REST API. To ensure proper security, you want to store the API key securely within the application package and use it for authentication. Which of the following is the MOST secure and RECOMMENDED method to accomplish this?

• A. Create a key-pair stored procedure. Storing the API key as a secret, then decrypting the key during each API call.
• B. Store the API key in a secure stage with encryption and grant SELECT privilege to the application role.
• C. Hardcode the API key directly into the application code within a UDF (User-Defined Function).
• D. Store the API key in a table within the application database with minimal access control, relying on Snowflake's data encryption at rest.
• E. Store the API key as a secret using Snowflake's Secret Management feature and reference it within a secure UDE