Configure and Troubleshoot Microsoft Power Platform PL-400 Practice Questions (Page 7)

Questions 31–34

1. 31application · medium

   A team of developers is working on a solution that includes a custom API and a PCF control. The API needs to create records in a custom table, while the PCF control only needs to read records. What is the recommended way to configure security roles for the developers and the components?

   • AGrant the PCF control the same role as the API because both are code components.
   • BUse a single custom security role with full access to the custom table for both the API and PCF control.
   • CAssign all developers the System Administrator role so they can manage the API and PCF control.
   • DCreate two custom security roles: one with Create and Read privileges on the custom table for the API, and one with Read-only privileges for the PCF control.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A development team needs to test a solution that uses Dataverse and also needs to integrate with an external API. The team wants to avoid affecting production data. What environment configuration should you recommend?

   • ACreate a dedicated development environment with its own Dataverse database and use a separate API endpoint for testing.
   • BCreate a development environment but connect it to the production API endpoint to test real integrations.
   • CUse the production environment but restrict the team to read-only access.
   • DUse a trial environment that automatically expires after 30 days.
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   What is the primary purpose of a Dataverse security role?

   • ATo store user credentials for authentication to the environment
   • BTo define the user interface layout for model-driven apps
   • CTo define a set of access privileges and permissions that control a user's access to data and features
   • DTo manage the physical storage location of the Dataverse database
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   An organization discovers that a Power Platform environment has a custom connector that uses an API key embedded in the app's source code. The connector is used by a model-driven app. What should you do to resolve this security issue?

   • AShare the API key only with the app's users and ask them to enter it each time.
   • BEncrypt the API key in the source code using a simple encryption algorithm.
   • CMove the API key to Azure Key Vault and reference it from the custom connector using a key vault policy.
   • DDisable the custom connector and use a built-in connector that does not require an API key.
   Reveal Solution Discussion Select an answer first