A Snowflake Native Application provider is deploying their application in multiple regions (AWS US-East-l and AWS EU-Central-l). The application relies on external functions that interact with a third-party API. The provider wants to optimize for both latency and cost while ensuring high availability. Which of the following strategies represents the MOST effective approach for configuring and deploying these external functions to meet these requirements? Select two.

• A. Utilize Snowflake's cross-region replication feature to automatically replicate the external functions between regions. This ensures that the functions are always available in both regions.
• B. Deploy separate external functions in each region, pointing to API endpoints hosted in the respective regions. Configure each external function with the same security integration to simplify access management.
• C. Configure a global load balancer in front of the third-party API endpoints and point all external functions to the load balancer's endpoint. This allows the load balancer to route requests to the closest available API endpoint.
• D. Host the external function code directly within the Snowflake application package and leverage Snowflake's serverless compute to execute the function logic without relying on external APIs.
• E. Create a single external function that uses a conditional statement to route requests to different API endpoints based on the Snowflake region where the function is being called. This approach reduces management overhead.

You are developing a Snowflake Native Application that offers a data anonymization service to consumers using Snowpark Container Services. The service accepts a dataset from the consumer's Snowflake account, performs anonymization within the container, and then writes the anonymized data back to a new table in the consumer's account. Which of the following is a correct and secure combination of actions required to successfully achieve this data transfer, assuming the container is already built and pushed to Snowflake's registry? (Select all that apply)

• A. The consumer must grant the USAGE privilege on the database containing the table to be anonymized to the application during installation.
• B. The application package owner must grant the 'IMPORTED PRIVILEGES' privilege on the database containing the anonymization logic to the consumer's account before installation.
• C. The container service must use Snowflake's internal API to authenticate and authorize access to the consumer's data using a database role assigned via entitlement.
• D. The consumer must grant CREATE TABLE privilege on the database where the anonymized data should be stored to the application's service account via an entitlement.
• E. The application package must contain a setup script that creates a new stage in the consumer's account to facilitate data transfer.

Consider the following 'manifest.yml' file for a Snowflake Native App:

• A. The application will fail to install because no 'privileges' are listed in the manifest file. All applications must declare the necessary privileges.
• B. The application version will default to '0.0.1'. If the application includes a view, then the view needs access to the user data and must have a privilege declared to allow users to view data from the application.
• C. The application version will default to '0.1.0' and the application can be installed successfully by any consumer account.
• D. The application will fail to install because the version property is missing. Each version must explicitly be specified in the manifest file.
• E. The application version will be automatically assigned by Snowflake during the installation process on the consumer side.

Your team is developing a Snowflake Native App that requires access to network resources outside of Snowflake. After configuring an external access integration, you encounter an error indicating that the application cannot access the specified endpoint, even though the integration appears to be correctly configured. Assuming all network policies are in place and the external access integration is correctly defined, what is the MOST likely cause of this issue and how can it be resolved?

• A. The URL specified in the external access integration is incorrect or contains a typo. Verify the URL and ensure it matches the expected endpoint.
• B. The application role used by the application lacks the ' IMPORTED PRIVILEGES privilege on the external access integration. Grant this privilege using 'GRANT IMPORTED PRIVILEGES ON INTEGRATION TO APPLICATION ROLE
• C. The external function or procedure attempting to use the integration has not been granted the REFERENCE USAGE privilege on the integration. Use 'GRANT REFERENCE USAGE ON INTEGRATION TO PROCEDURE ;
• D. The application needs to be explicitly granted the USAGE privilege on the external access integration. Use 'GRANT USAGE ON INTEGRATION TO APPLICATION ROLE
• E. The network policy attached to the external access integration is too restrictive and is blocking access to the required endpoint. Review and update the network policy to allow access to the endpoint.