Fabrikam has a security role that currently grants Read access to the Account table at the Business Unit level. They need to restrict access so that users with this role can only see accounts they own. What should you do?

Change the user's business unit to a new business unit with no other accounts.

Create a new security role with User-level access and assign it to the users, leaving the old role assigned.

Use column security to hide the account name field from users.

Edit the security role and change the Read privilege on the Account table from Business Unit to User level.

A user has two security roles: one grants Read access to accounts at User level, and the other grants Read access to accounts at Business Unit level. What is the user's effective read access to accounts?

Business Unit-level access, because the user has at least one role granting that level.

User-level access, because the more restrictive role takes precedence.

Access depends on which role was assigned first.

No access, because conflicting roles cancel each other out.

Contoso has two divisions, Sales and Marketing, each with its own managers who should control access to records for their division. Users in Sales should not see Marketing records, and vice versa. You need to configure Dataverse so that each division's manager can grant access to records only within their own division. What should you do?

Configure hierarchy security so that managers can only see records of users below them in the organizational chart.

Create a team for each division and add users to the teams, then share all records with both teams.

Create a security role for each division and assign the roles to all users, then use column security to hide records from other divisions.

Create a business unit for each division, add users to the corresponding business unit, and assign security roles with access levels scoped to the user's business unit.

When creating a Microsoft Entra ID group team, what must you specify?

The Entra ID group that the team is associated with

The business unit for each member

The list of users to add to the team

The security roles for each member

Which of the following is a valid action when managing business units in Microsoft Dataverse?

Delete a business unit that contains users

Merge two business units into one

Assign a security role directly to a business unit

Create a new business unit under an existing one

Microsoft Certified:Power Platform Functional Consultant Associate

Domain 1Objective 3

Configure Security Settings PL-200 Practice Questions (Page 7)

Part of the Configure Microsoft Dataverse domain, which accounts for 25–30% of the PL-200 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 3–7 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

9concepts

25–30%of the exam

Questions 31–35

31application · medium
Fabrikam has a security role that currently grants Read access to the Account table at the Business Unit level. They need to restrict access so that users with this role can only see accounts they own. What should you do?
Select an answer first
32expert · hard
A user has two security roles: one grants Read access to accounts at User level, and the other grants Read access to accounts at Business Unit level. What is the user's effective read access to accounts?
Select an answer first
33application · medium
Contoso has two divisions, Sales and Marketing, each with its own managers who should control access to records for their division. Users in Sales should not see Marketing records, and vice versa. You need to configure Dataverse so that each division's manager can grant access to records only within their own division. What should you do?
Select an answer first
34foundation · easy
When creating a Microsoft Entra ID group team, what must you specify?
Select an answer first
35foundation · easy
Which of the following is a valid action when managing business units in Microsoft Dataverse?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PL-200

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “PL-200” is a trademark of its owner, used for identification only.