Implement Security Policies and Requirements MB-500 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   A company needs to restrict access to purchase orders so that users can only view purchase orders for their own vendor group. The purchase order table has a 'VendorGroup' field. The company has multiple roles that need this restriction, but the restriction should not apply to the 'Purchasing Manager' role. You need to implement a solution that is easy to maintain. What should you do?

   • AModify the purchase order table's 'OnRead' event to filter records based on the user's vendor group.
   • BCreate a separate XDS policy for each role that needs the restriction.
   • CCreate a security role for each vendor group and assign users to the appropriate role.
   • DCreate an XDS policy that filters purchase orders by the user's vendor group and apply it to all roles except 'Purchasing Manager'.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A developer is creating a security privilege for a custom form that allows users to create and edit 'Project Quotes'. The privilege must also allow users to view the associated 'Customer' records, but not edit them. The developer has created a privilege named 'ProjectQuoteMaintain' with permissions on the 'ProjectQuote' table. What additional configuration is needed?

   • AAdd 'Read' permission on the Customer table to the same privilege.
   • BAdd the Customer table to the form's data source and set the 'AllowEdit' property to 'No'.
   • CAdd 'Read' and 'Update' permissions on the Customer table to the privilege.
   • DCreate a separate privilege for the Customer table and add it to the same duty.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the purpose of Extensible Data Security (XDS) in Dynamics 365 Finance and Operations?

   • ATo provide a framework for creating data security policies that restrict access to records based on queries
   • BTo allow developers to extend the data model with new tables and fields
   • CTo control which users can access the development environment
   • DTo manage the encryption of data at rest in the database
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   When an XDS policy is applied to a role, what happens to the data access of users in that role?

   • AThey are required to re-authenticate before accessing any data
   • BThey can only see records that do not match the policy's query
   • CThey lose access to all records in the constrained table
   • DThey gain access to additional records that were previously hidden
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A developer needs to create a new security duty that allows users to 'Maintain customer master data'. The duty should include the ability to create, read, update, and delete customer records. The developer has already created a privilege named 'CustomerMaintain' with the appropriate permissions. What is the next step to create the duty?

   • AAdd the new duty to the CustomerMaintain privilege.
   • BAssign the CustomerMaintain privilege directly to the users.
   • CCreate a new role and add the CustomerMaintain privilege to it.
   • DAdd the CustomerMaintain privilege to the new duty.
   Reveal Solution Discussion Select an answer first