Configure and Troubleshoot Microsoft Power Platform PL-400 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which scenario represents a common operational security issue in a Microsoft Power Platform environment?

   • AA solution is exported to a managed solution file
   • BA canvas app is shared with a specific security group
   • CA user is assigned a security role that grants more privileges than required for their job function
   • DAn environment is created with a Dataverse database
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   A Power Platform environment is configured with a security group that includes all users in the organization. Which operational security issue does this configuration most directly introduce?

   • ALoss of data encryption at rest
   • BExcessive user access to environment resources
   • CPrevention of environment variable updates
   • DInability to create new environments
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   A developer discovers that a test environment has a security role that allows users to delete records from the Account table, but the business requirement is that users should only read and update accounts. Which action should be taken to resolve this security issue?

   • AAssign the System Administrator role to all users
   • BDisable the environment for all users
   • CEdit the security role and clear the Delete privilege on the Account table
   • DDelete the Account table and recreate it
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A developer created a canvas app that uses a Dataverse table containing customer records. The app is shared with a team of salespeople. During a security review, you discover that the app's custom connector uses a service principal with the System Administrator role. What should you do to resolve the operational security issue while maintaining the app's functionality?

   • AAssign the Environment Maker role to the service principal instead of System Administrator.
   • BUse the app owner's user account instead of a service principal for the connector.
   • CKeep the System Administrator role but restrict the connector to only call the app's API endpoints.
   • DCreate a custom security role with only read privileges on the customer table and assign it to the service principal.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   A developer is creating a security role for a user who only needs to create and read records in the 'Lead' table. Which privileges should be assigned to adhere to the principle of least privilege?

   • ACreate and Read privileges on the Lead table
   • BFull CRUD privileges on all tables
   • CRead, Write, and Delete privileges on the Lead table
   • DAppend and Append To privileges on the Lead table
   Reveal Solution Discussion Select an answer first