Manage Security MB-280 Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   A company has a model-driven app used by both internal employees and external partners. The internal employees are in the 'Sales' security role, and the external partners need to see only a limited set of data. The company wants to use Microsoft Entra ID groups to manage access. You need to ensure that external partners can access the app but cannot see data beyond their permissions. What should you do?

   • AAdd external partners to the existing Sales Entra ID group and assign the Sales security role to that group.
   • BCreate a new security role with no privileges and assign it to the external partners' Entra ID group.
   • CShare the app with each external partner individually and assign them the Sales security role.
   • DCreate a separate Entra ID group for external partners, assign it to the app, and assign a security role with minimal privileges to that group.
   Reveal Solution Discussion Select an answer first
2. 32foundation · medium

   What is the first step to implement column-level security on a field in Dataverse?

   • ACreate a column security profile
   • BShare the field with users
   • CEnable column security on the field
   • DAssign a security role to the field
   Reveal Solution Discussion Select an answer first
4. 33expert · hard

   A user in a model-driven app cannot see a record that was shared with them via an access team. The user is a member of the access team, and the team has been granted read access to the record. Other members of the same access team can see the record. You need to diagnose the issue. What should you check first?

   • AConfirm that the user has a security role that includes read access to the entity.
   • BVerify that the user is actually a member of the access team.
   • CUse the access checker to evaluate the user's effective access on the record.
   • DCheck if the record is owned by the user.
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A company has a field 'Salary' on the Employee entity. The HR team needs to view and edit the field, but the Payroll team needs to view it without editing. All other users should not see the field. You need to configure column-level security to meet these requirements. What should you do?

   • AUse hierarchy security to grant HR and Payroll access to the Salary field based on the reporting structure.
   • BCreate one column security profile with read and update privileges and add both HR and Payroll teams to it.
   • CCreate a security role for HR with read and write access to the Employee entity, and a security role for Payroll with read-only access.
   • DCreate two column security profiles: one for HR with read and update privileges, and one for Payroll with read-only privilege. Add the respective teams to each profile.
   Reveal Solution Discussion Select an answer first
6. 35foundation · medium

   What is the primary characteristic of an owner team in Dataverse?

   • AThe team can only be used for sharing records, not owning them
   • BThe team owns records and has a security role assigned
   • CThe team is automatically created for every business unit
   • DThe team cannot have members added or removed
   Reveal Solution Discussion Select an answer first