What is the main purpose of an access team in Dataverse?

To enforce column-level security

To automatically assign records to users based on workload

To grant a group of users access to specific records without changing record ownership

To own records on behalf of a business unit

Your company uses Microsoft Entra ID groups to manage user access. You have a group called 'Finance Users' that should have read-only access to all finance-related records. You need to ensure that new members added to the group automatically get the appropriate access. What should you do?

Share all finance records with the group

Add the group to an access team

Assign a security role to the Entra ID group in Dataverse

Create an owner team and add the group as a member

A healthcare organization uses a model-driven app to manage patient records. The 'Social Security Number' field on the Contact entity must be hidden from most users, but a small group of compliance officers needs to view and edit it. You need to protect this field without changing the existing security roles. What should you configure?

Create a new security role with read and write access to the Contact entity and assign it to the compliance officers.

Create a column security profile, add the compliance officers to the profile, and grant them read and update privileges on the field.

Share the Contact records with the compliance officers using an access team.

Use field-level security by editing the Contact entity's security settings to restrict the field to the compliance officers.

What is the primary purpose of implementing hierarchy security in Dataverse?

To restrict access to specific columns of a table

To encrypt data at rest using customer-managed keys

To control data access based on the organizational reporting structure

To share individual records with specific users without changing ownership

What is the primary function of a security role in Dataverse?

To configure which columns are visible in a model-driven app

To manage the physical security of the data center

To determine the language and locale settings for a user

To define a set of privileges and access levels for users or teams

Microsoft Certified:Dynamics 365 Customer Experience Analyst Associate

Domain 2Objective 5

Manage Security MB-280 Practice Questions (Page 5)

Part of the Configure and customize Dataverse and model-driven apps domain, which accounts for 35–40% of the MB-280 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~14–26 in this domain), expect 3–5 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

10concepts

35–40%of the exam

Questions 21–25

21foundation · medium
What is the main purpose of an access team in Dataverse?
Select an answer first
22application · medium
Your company uses Microsoft Entra ID groups to manage user access. You have a group called 'Finance Users' that should have read-only access to all finance-related records. You need to ensure that new members added to the group automatically get the appropriate access. What should you do?
Select an answer first
23application · medium
A healthcare organization uses a model-driven app to manage patient records. The 'Social Security Number' field on the Contact entity must be hidden from most users, but a small group of compliance officers needs to view and edit it. You need to protect this field without changing the existing security roles. What should you configure?
Select an answer first
24foundation · medium
What is the primary purpose of implementing hierarchy security in Dataverse?
Select an answer first
25foundation · medium
What is the primary function of a security role in Dataverse?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MB-280

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MB-280” is a trademark of its owner, used for identification only.