Implement Security Policies and Requirements MB-500 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   Contoso's Dynamics 365 Finance and Operations environment has a custom table named 'Contract' that stores contract amounts. The Accounts Payable (AP) team should see only contracts where the 'Amount' field is less than 50,000. The AP team already has a security role that grants them access to the Contract table. You need to enforce this data restriction without modifying the existing role's menu access. What should you do?

   • ACreate a new security duty that includes a privilege for the Contract table, then add the duty to the AP role.
   • BModify the AP role's privileges to set the 'Read' permission to 'No' for the Contract table.
   • CCreate a new security role that has only the Contract table privilege and assign it to AP users.
   • DCreate an Extensible Data Security (XDS) policy that constrains the Contract table with a range on Amount < 50,000, and add the policy to the AP role.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company has a security role 'Inventory Manager' that includes the 'Inventory adjustment' duty. The company wants to allow inventory managers to also perform cycle counting, which is a separate duty named 'Cycle counting'. You need to update the role without affecting other roles. What should you do?

   • AModify the 'Inventory adjustment' duty to include the 'Cycle counting' privilege.
   • BAdd the 'Cycle counting' duty to the 'Inventory Manager' role.
   • CCreate a new role that includes both duties and assign it to the inventory managers.
   • DCreate a new privilege for cycle counting and add it directly to the 'Inventory Manager' role.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   Northwind Traders uses Dynamics 365 Finance and Operations. The 'Sales Manager' role should only see sales orders where the 'SalesPoolId' is 'A' or 'B'. You create an XDS policy with a query that filters SalesTable.SalesPoolId IN ('A','B'). What else must you do to ensure the policy takes effect for the Sales Manager role?

   • AGrant the Sales Manager role 'Read' permission on the SalesTable table.
   • BCompile the XDS policy and then assign it to the Sales Manager role.
   • CAdd the XDS policy to the 'Sales Manager' duty instead of the role.
   • DRun the 'Synchronize database' job to apply the policy.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A developer is creating a security privilege for a custom form that allows users to 'Maintain customer bank accounts'. The privilege should allow users to create, read, update, and delete bank accounts, but only for the current company. The developer has added the 'CustBankAccountMaintain' privilege to a duty. What additional configuration is needed to ensure the privilege is company-specific?

   • AAdd a query range to the privilege that filters by the current company.
   • BCreate a separate privilege for each company and assign them to the duty.
   • CSet the 'Read' permission to 'Yes' and all other permissions to 'No'.
   • DSet the 'Company' property on the privilege to 'Current company'.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In Dynamics 365 Finance and Operations, what is the primary purpose of a security privilege?

   • ATo grant access to a specific application element, such as a form, menu item, or service operation
   • BTo manage the workflow approval process for a document
   • CTo define the layout of a form for a specific user
   • DTo store user preferences such as language and time zone
   Reveal Solution Discussion Select an answer first