Valid NAS-C01 Dumps shared by ExamDiscuss.com for Helping Passing NAS-C01 Exam! ExamDiscuss.com now offer the newest NAS-C01 exam dumps, the ExamDiscuss.com NAS-C01 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com NAS-C01 dumps with Test Engine here:
You are developing a Snowflake Native App that requires granular access control to its underlying data for consumer accounts. You want to implement a secure pattern that limits direct access to the data while allowing specific operations through your app's procedures. Which of the following approaches represent the MOST secure and recommended practices regarding access control in the setup script, assuming you also want to grant USAGE on future schema?
Correct Answer: C,E
Granting SELECT directly is insecure (A). Secure views provide some abstraction but still allow direct SELECT (B). Granting OWNERSHIP gives excessive privileges (D). Stored procedures with EXECUTE AS OWNER or 'EXECUTE AS CALLER , combined with limited schema privileges, offer the best control and security. 'EXECUTE AS OWNER' allows the procedure to run with the privileges of the app itself, bypassing consumer privileges, and 'EXECUTE AS CALLER' uses consumer's priviledges, but still contains the data logic. Both combined, gives the best secure and recommended access control.