Implement Security Policies and Requirements MB-500 Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A developer at Fabrikam needs to grant a specific group of users the ability to view and update the 'VendorBankAccount' table through a custom form, but they must not be able to delete records. The users are currently assigned to the 'Vendor Maintenance' security role. You need to implement the least-privilege access. What should you do?

   • ACreate a new privilege that includes 'Read' and 'Update' permissions for the VendorBankAccount table, add it to a new duty, and add the duty to the Vendor Maintenance role.
   • BAdd the existing 'VendorBankAccountMaintain' privilege to the Vendor Maintenance role.
   • CModify the Vendor Maintenance role's existing privilege to remove the 'Delete' permission from the VendorBankAccount table.
   • DCreate a new security role that includes the VendorBankAccount table with 'Read' and 'Update' permissions, and assign it to the users.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which of the following is a required property when creating a new security duty in the Application Object Tree (AOT)?

   • AThe duty must be assigned to at least one user immediately
   • BThe duty must have a unique name and a label that describes the task
   • CThe duty must be linked to a specific legal entity
   • DThe duty must include at least one data security policy
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A company wants to ensure that warehouse workers can only see inventory transactions for their own warehouse. The system has multiple warehouses, and workers are assigned to roles. You need to implement a data security policy that restricts access based on the worker's warehouse. What should you configure?

   • ACreate an Extensible Data Security (XDS) policy that filters inventory transactions by the warehouse associated with the current user.
   • BCreate a new duty that includes the 'Read' permission for the 'InventTrans' table and add it to the workers' role.
   • CCreate a security privilege that includes only the 'Read' permission for the 'InventTrans' table and assign it to the workers' role.
   • DCreate a security role for each warehouse and assign the appropriate workers to each role.
   Reveal Solution Discussion Select an answer first
5. 34application · easy

   A new employee joins the 'Accounts Receivable' team and needs to perform the same tasks as the existing 'AR Clerk' role. You need to assign the appropriate security access. What should you do?

   • AAdd the new employee to the 'AR Clerk' duty.
   • BCopy the AR Clerk role's privileges and add them directly to the new employee's user profile.
   • CCreate a new security role that includes all the duties from the AR Clerk role and assign it to the new employee.
   • DAssign the 'AR Clerk' security role to the new employee's user account.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A company needs to restrict access to customer records so that sales representatives can only view customers assigned to them. The customer table has a field 'SalesRepId' that stores the responsible sales representative. You need to implement a solution that automatically applies this restriction to all forms and queries that access the customer table. What should you do?

   • AModify the customer table's 'OnLookup' event to filter records based on the current user's ID.
   • BCreate a security role that includes a duty with a privilege that has a 'Read' permission on the customer table, and assign the role to the sales representatives.
   • CCreate a new form that only shows assigned customers and replace the existing customer form for the sales representatives.
   • DCreate an Extensible Data Security (XDS) policy that filters the customer table by the 'SalesRepId' field matching the current user's ID.
   Reveal Solution Discussion Select an answer first