Microsoft MB-820 Exam - Topic 5 Question 13 Discussion

Actual exam question for Microsoft's MB-820 exam

Question #: 13
Topic #: 5

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result these questions will not appear in the review screen.

A company plans to optimize its permission sets.

The company has the following permission sets:

You need to provide the following implementation for a third permission set:

* Create a new Permission Set C that is a composite of Permission Set A and Permission Set B.

* Assign Permission Set C to a user.

You need to ensure that the user has only read access to the Job table.

Solution: Set the Excluded Permission Sets property to Permission Set B.

Does the solution meet the goal?

AYes

BNo

Show Suggested Answer

Suggested Answer: B

Assigning a SUPER permission set to all users would indeed resolve the permission errors and access issues reported by the users, as it grants full permissions across all objects and data in Business Central. However, this approach contradicts the principle of least privilege, which advocates for providing only the minimum levels of access necessary for users to perform their jobs. The SUPER permission set would excessively elevate user privileges, potentially leading to security risks and unintended modifications to critical data. Therefore, while assigning the SUPER permission set might technically resolve the immediate issues, it does not meet the goal of adhering to the principle of least privilege and is not a recommended solution.

by Lettie at May 29, 2024, 07:18 AM

Limited Time Offer

25%

Off

Get Premium MB-820 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Edna

3 months ago

Just a fact: read access needs to be explicitly granted.

upvoted 0 times

...

Denise

3 months ago

I think it meets the goal, but I'm not sure.

upvoted 0 times

...

Lindsey

3 months ago

Wait, so excluding Permission Set B means no access at all?

upvoted 0 times

...

Krystina

4 months ago

Totally agree, it should include both sets!

upvoted 0 times

...

Cecily

4 months ago

The solution doesn't work as intended.

upvoted 0 times

...

Lashaunda

4 months ago

I think the key is understanding how the permissions stack. If Permission Set A has more access than just read, then excluding B might not help.

upvoted 0 times

...

Helaine

4 months ago

I feel like the solution might not meet the goal because excluding a permission set could lead to unintended access issues.

upvoted 0 times

...

Devorah

4 months ago

I remember a similar question where we had to combine permission sets, and excluding one did change the access level. But I can't recall if it was the right approach here.

upvoted 0 times

...

Vincent

5 months ago

I'm not entirely sure if excluding Permission Set B will actually give read access only. I think it might still allow some permissions from A.

upvoted 0 times

...

Emilio

5 months ago

Hmm, I'm not sure if the "Excluded Permission Sets" property is the right approach here. I'll need to think through this more carefully to make sure I understand the implications.

upvoted 0 times

...

Ernest

5 months ago

This seems straightforward enough. As long as I set the Excluded Permission Sets property correctly, the solution should meet the goal.

upvoted 0 times

...

Layla

5 months ago

I'm a bit confused about the "Excluded Permission Sets" property. Does that mean the user won't have any of the permissions from that set? I'll need to double-check that.

upvoted 0 times

...

Letha

5 months ago

Okay, I think I've got this. Creating a new composite permission set and then excluding the other set should give the user the right access level.

upvoted 0 times

...

Albina

5 months ago

Hmm, this looks like a tricky one. I'll need to carefully read through the requirements and think through the solution step-by-step.

upvoted 0 times

...

Tomas

5 months ago

This looks like a straightforward question about Jenkins. I'm pretty familiar with Jenkins, so I think I can handle this one.

upvoted 0 times

...

Jordan

5 months ago

To me, the most important thing a PIA does is determine the service provider's ability to maintain data protection controls. That seems like the best answer here.

upvoted 0 times

...

Vilma

5 months ago

Option A with Latent Dirichlet Allocation could be a good way to identify latent topics or themes in the customer data. That might give us some useful insights.

upvoted 0 times

...

Theron

5 months ago

I came across a similar question before; I think it was about the -h flag showing section headers, which aligns with option D.

upvoted 0 times

...

Misty

10 months ago

Ah, the joys of permission sets! Where the only thing more confusing than the question is the answer.

upvoted 0 times

...

Garry

10 months ago

This question is a real brain-teaser. I better double-check the documentation before answering.

upvoted 0 times

...

Frankie

10 months ago

Oh, I get it now! The solution says we need to create a new Permission Set C that's a composite of A and B. Excluding B makes sense to ensure the user only has read access to the Job table.

upvoted 0 times