A user cannot see a specific account record. The user has a security role that grants 'Read' privilege on the Account entity at the 'Business Unit' level. The account record is owned by a user in a different business unit. You use the access checker and see that the user has 'Read' access to the record. Why can the user still not see the record?

The user's hierarchy security position prevents visibility

The record is shared with the user but the share is disabled

The user's security role is not assigned to the correct business unit

The user's default view filters out records from other business units

A company has a large number of temporary interns who need access to a model-driven app for three months. The interns are already members of a Microsoft Entra ID group. You need to grant them access to the app and to the underlying data, and ensure that their access is automatically removed when they leave the company. What should you do?

Create a new access team for the interns and share the app with the access team.

Add the interns to an existing owner team and share the app with the team.

Create a new security role and assign it to each intern individually in Dataverse.

Assign the Entra ID group to the app and assign a security role to the group in Dataverse.

When using the access checker, which of the following can be determined?

The number of records a user has created

The performance of the user's network connection

The exact privileges a user has on a specific record

Which of the following is true about column-level security in Dataverse?

It is automatically applied to all fields in a table

It can be used to restrict access to entire tables

It can be applied to custom fields and many out-of-the-box fields

It replaces record-level security

Microsoft Certified:Dynamics 365 Customer Experience Analyst Associate

Domain 2Objective 5

Manage Security MB-280 Practice Questions (Page 3)

Part of the Configure and customize Dataverse and model-driven apps domain, which accounts for 35–40% of the MB-280 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~14–26 in this domain), expect 3–5 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

10concepts

35–40%of the exam

Questions 11–15

11expert · hard
A user cannot see a specific account record. The user has a security role that grants 'Read' privilege on the Account entity at the 'Business Unit' level. The account record is owned by a user in a different business unit. You use the access checker and see that the user has 'Read' access to the record. Why can the user still not see the record?
Select an answer first
12application · medium
A company has a large number of temporary interns who need access to a model-driven app for three months. The interns are already members of a Microsoft Entra ID group. You need to grant them access to the app and to the underlying data, and ensure that their access is automatically removed when they leave the company. What should you do?
Select an answer first
13foundation · medium
When using the access checker, which of the following can be determined?
Select an answer first
14foundation · medium
Which of the following is true about column-level security in Dataverse?
Select an answer first
15foundation · medium
Which type of team can be assigned as the owner of a record in Dataverse?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MB-280

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MB-280” is a trademark of its owner, used for identification only.

Manage Security MB-280 Practice Questions (Page 3)

Questions 11–15

When using the access checker, which of the following can be determined?

Which of the following is true about column-level security in Dataverse?

Which type of team can be assigned as the owner of a record in Dataverse?

Keep studying — Configure and customize Dataverse and model-driven apps