You are designing a Snowflake Native Application that uses Snowpark Container Services to process dat a. The application needs to store intermediate results in a Snowflake table. You have the following requirements: 1. The table should only be accessible to the Native App. 2. The table schema should be automatically updated when the application is upgraded. 3. You want to minimize the privileges granted to the container service's service account. Which of the following approaches should you use? (Select TWO)

• A. Create the table within the application's package using a setup script. Grant the 'USAGE privilege on the application's schema to the Native App's service account.
• B. Create a separate database for the Native App's internal data and grant the 'OWNERSHIP' privilege on this database to the Native App's service account.
• C. Create the table within the application's package using a setup script. The setup script should execute during the application installation and upgrade process.
• D. Create the table manually in the consumer's account and grant 'USAGE' and 'SELECT privileges on the table to the Native App's service account.
• E. Grant 'ALL PRIVILEGES on the database containing the table to the Native App's service account. This allows the application to manage the table and its schema.

You are designing a Snowflake Native Application using Snowpark Container Services to perform real-time sentiment analysis on streaming dat a. The application needs to subscribe to a Snowflake event table to receive incoming data, perform the analysis in the container, and store the results in another table in the consumer's account. Which of the following approaches represents the most efficient and scalable way to implement this data ingestion and processing pipeline?

• A. Utilize Snowflake Event Tables and subscribe the Snowpark Container Service to the event table. Process incoming events using a Snowpark Python function within the container, leveraging its ability to handle concurrent requests.
• B. Create a Snowflake external table that directly reads data from the external source. Mount this external table within the container service and perform sentiment analysis directly on the external data.
• C. Use a Snowflake Stream on the event table and continuously poll the Stream from within the Snowpark Container Service using the Snowpark API.
• D. Configure a Snowflake Task to periodically load data from the event table into an internal stage and then trigger the Snowpark Container Service to process the data from the stage.
• E. Implement a Snowpipe pipeline that continuously loads data from an external stage into the event table. Then use a database trigger on the event table to invoke a stored procedure that calls the Snowpark Container Service.

A Snowflake Native Application developer is deploying a Snowpark Container Services service. The 'service.yamr file includes the following configuration snippet for defining the service's endpoint:

• A. Update the port configuration to use port 443 and set the protocol to 'TLS'. Snowflake automatically handles TLS termination for SPCS services on port 443.
• B. Set 'useTls' to true under ports specification. No changes are required to the 'service.yaml' file.
• C.
  
• D. Configure the container application itself to handle TLS termination using a self-signed certificate. No changes are required in the 'service.yaml' file.
• E. Add a TLS certificate and key to the Kubernetes Secret referenced by the 'tls' field in the Ingress configuration. Also, update the port configuration to reflect port 443.

You are developing a Snowflake Native Application that needs to access user-provided data through a Secure Data Sharing. The consumer must explicitly grant access to their data container. Which approach provides the MOST secure and efficient method for allowing your application to access this data and ensure proper governance?

• A. Your application creates a secure view on the consumer's data container, allowing only specific data to be accessed.
• B. Require the consumer to create a database from their share within your application's environment.
• C. Implement a custom API endpoint that the consumer must call to securely transmit their data to your application.
• D. Instruct the consumer to create a database role in their account and grant it all necessary privileges on the data container, then grant that role to your application's account.
• E. Request the consumer to create a share containing the desired data and grant usage on the share to your application's account. The application then imports this share into its own environment.