Configure and Troubleshoot Microsoft Power Platform PL-400 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which statement accurately describes the structure of a Dataverse security role?

   • AA security role consists of privileges that are grouped by table and include access levels such as user, business unit, and organization
   • BA security role is a set of connection references used for external services
   • CA security role is a collection of environment variables that control feature flags
   • DA security role is a list of users who can access the environment
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   You are deploying a PCF control that displays data from a custom table. The control is used by two types of users: managers who need to see all records, and employees who need to see only their own records. What is the most efficient security configuration that follows least privilege?

   • ACreate two custom security roles: one with Read at Organization level for managers, and one with Read at User level for employees.
   • BCreate one custom security role with Read at User level and assign it to both managers and employees.
   • CCreate one custom security role with Read at Organization level and assign it to both managers and employees.
   • DUse the default security role and rely on the PCF control's code to filter records.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A Power Platform environment has a custom connector that uses an API key stored in the app's configuration file. The app is a model-driven app used by multiple users. You need to resolve the security issue while ensuring the app continues to work. What should you do?

   • AEncrypt the configuration file using a password that is shared with all users.
   • BDisable the custom connector and use a built-in connector that does not require an API key.
   • CStore the API key in Azure Key Vault and update the custom connector to retrieve it securely.
   • DRemove the API key from the configuration file and require users to enter it each time they use the app.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A developer is deploying a Power Apps component framework (PCF) control that displays data from a custom Dataverse table. The control only needs to read records from the table. The developer is creating a security role for users who will use the control. What is the minimum privilege configuration for the custom table?

   • ARead and Write privileges with User access level
   • BRead and Create privileges with Business Unit access level
   • CRead privilege with Organization access level
   • DRead privilege with User access level
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A developer notices that a custom API used in a Power Platform solution is returning more data than the application needs, including sensitive fields. The API is called by a canvas app. What should the developer do to address this operational security issue?

   • AAdd a filter to the canvas app to hide the sensitive fields
   • BModify the API to return only the fields required by the app
   • CChange the API's authentication to require multi-factor authentication
   • DIncrease the API's timeout to allow more data to be processed
   Reveal Solution Discussion Select an answer first