You are developing a Snowflake Native App that needs to perform asynchronous tasks in the consumer's account. Which of the following approaches is the MOST suitable and secure way to achieve this, ensuring minimal impact on the consumer's resources and maintaining data integrity?

• A. The Native App can create task and warehouse in the consumer account to execute the code using CREATE APPLICATION command. The application uses SNOWFLAKE.CORE.AUTHZ.PASS PRIVILEGES() to execute these tasks.
• B. Implement a Snowpark UDF that starts a new thread to handle the asynchronous task within the consumer's compute environment.
• C. Implement a scheduled stored procedure that polls for new tasks every minute and processes them, potentially consuming significant compute resources in the consumer's account. The stored procedure is deployed in the consumer's account using CREATE APPLICATION.
• D. Create a Snowflake Task that is executed within the consumer's account, triggered by events within the application, and configured to run on a Snowflake-managed compute pool.
• E. Utilize an external message queue (e.g., AWS SQS, Azure Queue Storage) to offload asynchronous tasks, requiring the consumer to configure network policies to allow egress traffic to the queue.

Consider a scenario where you are developing a Snowflake Native App which utilizes a UDF (User-Defined Function). This UDF needs to access a secure external API using a secret stored securely within Snowflake. Which of the following statements are accurate regarding the necessary privileges and architecture for this setup? (Select all that apply)

• A. The application instance must be granted the REFERENCE USAGE privilege on the secret to allow the UDF to access it.
• B. The application developer needs the "APPLY privilege to create the secret in the application package.
• C. The application package needs the EXECUTE privilege on the secret for the UDF to use it.
• D. The application developer needs the 'CREATE SECRET privilege to create the secret in the application package.
• E. The consumer account automatically inherits access to secrets created in the application package.

Consider the following Snowflake Native App setup script snippet. The intention is to create an application role and grant it the necessary privileges to execute a stored procedure named 'MY PROCEDURE' within the application's data container. However, the script is not working as expected, and the stored procedure is failing with permission errors. Identify ALL of the issues in the following code.

• A. The setup script does not require any additional privileges to assign 'EXECUTE on PROCEDURE
• B. The application role must be granted the 'USAGE privilege on the database that contains the schema.
• C. The 'USAGE privilege on the schema containing the stored procedure is missing.
• D. The 'EXECUTE' privilege on the stored procedure should be granted to the 'application' role, not 'app_public' .
• E. The application role 'app_public' cannot be created inside the setup script.

You are developing a Snowflake Native Application and want to implement robust observability and telemetry. Which of the following approaches will enable you to effectively monitor the application's performance, identify errors, and collect usage metrics within the consumer's account?

• A. Rely solely on Snowflake's built-in query history and resource monitoring features in the consumer's account, as these automatically capture all application activity.
• B. Directly access the consumer's system tables (e.g., 'SNOWFLAKE.ACCOUNT USAGE.QUERY HISTORY) to extract application-related metrics based on query identifiers generated by the application.
• C. The consumer is responsible for implementing observability and telemetry. The application developer cannot implement observability features that function within the consumer's account.
• D. Utilize to write log data to a secure table within the application and leverage views granted to the consumer to expose relevant metrics and error information. Ensure appropriate roles have access to the views.
• E. Implement custom logging using 'SYSTEM$LOG' and store application logs in a separate table within the application's container. Configure grants to allow the application developer to access these logs.