PL 400 Security and Compliance 5

Question 1

A Power Platform developer needs to comply with GDPR requirements by enabling users to request deletion of their personal data from Dataverse. Which built-in capability supports this?

Accepted Answer

Microsoft Purview Data Subject Request (DSR) in the compliance center

Answer

Microsoft Purview's Data Subject Request feature allows administrators to find and delete personal data across Microsoft 365 services including Dataverse in response to GDPR requests.

Question 2

When a Power Apps canvas app is shared using 'Can Edit' permissions, what additional risk does this create compared to 'Can Use'?

Accepted Answer

Edit users can see and modify the app's data connections including credentials

Answer

Users with 'Can Edit' permissions can open the app in Power Apps Studio and view or modify embedded connection credentials and data source configurations.

Question 3

A Dataverse plugin needs to securely retrieve a password to call an external service. Which approach is most secure?

Accepted Answer

Use a Secure Configuration string in the plugin step registration

Answer

Plugin step Secure Configuration stores encrypted values that are only accessible to the plugin code at runtime and are not visible in the plugin registration UI after saving.

Question 4

A developer configures a Power Automate flow that sends emails with sensitive data. To comply with company policy, all emails must be encrypted in transit. What ensures this for Office 365 Outlook connector emails?

Accepted Answer

Configure S/MIME certificates in Microsoft 365 and use the Encrypt option in the Send Email action

Answer

S/MIME or Microsoft 365 Message Encryption (OME) can be applied to emails sent via Power Automate using the Outlook connector's sensitivity and encryption options.

Question 5

In the Power Platform, what is the effect of enabling 'Cross-tenant inbound restrictions' in the tenant isolation settings?

Accepted Answer

Blocks connectors from establishing connections originating from other tenants into your tenant

Answer

Cross-tenant isolation inbound restrictions block connections where the connector authenticates using credentials from an external tenant to access resources in your tenant.

(PL 400) Microsoft Certified Power Platform Developer Associate Practice Test

(PL 400) Microsoft Certified Power Platform Developer Associate Practice Test

PL 400 Security and Compliance 5