Microsoft Certified: Power Platform App Maker Associate Security and Governance in Power Platform 2 — Questions and Answers
Question 1: In Dataverse, which security model controls which specific rows (records) a user can access within a table?
- Column-level security profiles
- Table-level access teams
- Record-based security using ownership and sharing (Correct answer)
- Business unit access masks
Correct answer: Record-based security using ownership and sharing
Dataverse uses record-based security where records are owned by users or teams, and individual records can be explicitly shared with other users or teams.
Question 2: What is the purpose of a Security Role in Microsoft Dataverse?
- To encrypt sensitive columns in a table
- To define a set of privileges that control user access to tables and operations (Correct answer)
- To manage API rate limits for external connectors
- To automatically assign licenses to new users
Correct answer: To define a set of privileges that control user access to tables and operations
Security Roles define the Create, Read, Update, Delete, and Append privileges users have on Dataverse tables, and are assigned to users or teams.
Question 3: Which built-in Dataverse security role grants full unrestricted access to all data and customizations in an environment?
- Basic User
- Delegate
- System Administrator (Correct answer)
- System Customizer
Correct answer: System Administrator
The System Administrator role provides complete access to all Dataverse data, customizations, and administrative functions within the environment.
Question 4: What is column-level security used for in Dataverse?
- Setting which columns appear in the default view
- Controlling which users can read, create, or update data in specific sensitive columns (Correct answer)
- Encrypting column data at rest
- Defining required fields on model-driven app forms
Correct answer: Controlling which users can read, create, or update data in specific sensitive columns
Column-level security allows administrators to restrict access to specific sensitive columns (fields) so only authorized users with the correct column security profile can view or edit them.
Question 5: What is an Environment Variable used for in Power Platform solutions?
- Storing user credentials for connector authentication
- Holding environment-specific configuration values separate from app logic (Correct answer)
- Managing DLP policy parameters dynamically
- Defining system administrator email addresses per environment
Correct answer: Holding environment-specific configuration values separate from app logic
Environment variables store configuration values like URLs, keys, or settings that differ between environments, enabling solutions to move between environments without code changes.
Question 6: Where can Power Platform administrators monitor app usage, active users, and errors across the tenant?
- Power Platform Admin Center Analytics (Correct answer)
- Power BI Service
- Azure Monitor
- Microsoft 365 Usage Reports
Correct answer: Power Platform Admin Center Analytics
The Power Platform Admin Center provides built-in analytics dashboards showing app usage, error rates, active users, and performance data across environments.
Question 7: What does the Least Privilege principle mean in the context of Power Platform security?
- Granting users maximum permissions to minimize support requests
- Only using built-in security roles without any customization
- Granting users only the minimum permissions required to complete their job tasks (Correct answer)
- Blocking all external connector access until explicitly approved
Correct answer: Granting users only the minimum permissions required to complete their job tasks
The Least Privilege principle means users receive only the permissions absolutely necessary for their role, reducing the potential impact of compromised accounts.
In Dataverse, which security model controls which specific rows (records) a user can access within a table?