PL 400 Security and Compliance 2

Question 1

A Power Platform developer needs to restrict a canvas app so only users in a specific Azure AD security group can access it. What is the correct approach?

Accepted Answer

Share the app with the Azure AD security group

Answer

Canvas apps can be shared with Azure AD security groups, granting access to all members of that group at once.

Question 2

Which Dataverse security concept allows you to grant a user access to records they own plus records shared with their business unit?

Accepted Answer

Business unit-level access

Answer

Business unit-level access in Dataverse allows users to access their own records and those belonging to their business unit.

Question 3

A developer wants to ensure a Power Automate flow cannot access a specific SharePoint site outside the approved list. Which feature enforces this?

Accepted Answer

Data Loss Prevention (DLP) policies

Answer

DLP policies can classify connectors and block flows from connecting to unapproved data sources like specific SharePoint sites.

Question 4

When implementing column-level security in Dataverse, what must be true before a user can read a secured column?

Accepted Answer

The user must be assigned to a Column Security Profile that grants read access

Answer

Column security profiles explicitly grant read, create, or update permissions on secured columns independent of table-level security roles.

Question 5

A Power Platform solution includes a PCF control that calls an external API. Which mechanism should be used to store the API key securely within the solution?

Accepted Answer

Store it in an environment variable of type Secret

Answer

Environment variables of type Secret store sensitive values in Azure Key Vault and are the recommended approach for secrets in Power Platform solutions.

(PL 400) Microsoft Certified Power Platform Developer Associate Practice Test

(PL 400) Microsoft Certified Power Platform Developer Associate Practice Test

PL 400 Security and Compliance 2