Microsoft PL-400 Exam - Topic 4 Question 8 Discussion

Actual exam question for Microsoft's PL-400 exam

Question #: 8
Topic #: 4

You are creating an integration that uses an Azure function to create records in the Common Data Service when leads are submitted from your company website.

You create and configure a Common Data Service application user.

You do not have administrator access to the Common Data Service environment you are using for access to Azure Active Directory. Company policy dictates that service accounts must be used for integrations, and integrations must not be granted privileges beyond what is needed.

You need to recommend actions that an administrator should perform to configure access for the Azure Function.

Which three actions should you perform? Each correct selection presents part of the solution.

NOTE: Each correct selection is worth one point.

ACreate an application registration in Azure Active Directory.

BAssign the system administrator security role to the application user.

CAssign the Power Platform administrator role to the application user in Azure Active Directory.

DCreate a new security role with the minimum required permissions and assign to the application user.

EGrant the application delegated permissions to the Dynamics CRM API in Azure Active Directory.

FDeploy Azure B2B guest permissions to the application user.

Show Suggested Answer

Suggested Answer: A, D, E

https://docs.microsoft.com/en-us/powerapps/developer/common-data-service/walkthrough-register-app-azureactive-directory

by Twana at May 06, 2022, 09:24 AM

Limited Time Offer

25%

Off

Get Premium PL-400 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tony

4 months ago

C is a must if we want to manage Power Platform effectively.

upvoted 0 times

...

Malinda

4 months ago

Wait, can we really use E for this? Sounds off.

upvoted 0 times

...

Terina

4 months ago

B seems too much, we shouldn't give admin rights.

upvoted 0 times

...

Vesta

5 months ago

I think D is the best option here!

upvoted 0 times

...

Marjory

5 months ago

A is definitely needed for access.

upvoted 0 times

...

Ryann

5 months ago

I feel like we practiced a similar question where we had to create a security role with minimum permissions. That might be the right approach here too.

upvoted 0 times

...

Margot

5 months ago

I'm not entirely sure, but I think assigning the system administrator role might be too much access for the application user. We should stick to the principle of least privilege.

upvoted 0 times

...

Lizette

5 months ago

I remember we discussed the importance of creating an application registration in Azure Active Directory for integrations like this. That seems like a solid choice.

upvoted 0 times

...

Jules

5 months ago

Granting delegated permissions to the Dynamics CRM API sounds familiar, but I can't recall if that's necessary for this specific integration.

upvoted 0 times

...

Felix

5 months ago

Hmm, I'm a bit confused by all the different options here. I'll need to think through each one carefully to understand how they might work in practice. Maybe I'll start by focusing on the requirement to have the pricing tied to the territory.

upvoted 0 times

...

Ressie

5 months ago

I'm a little confused on the differences between the load balancer types. I'll need to review the key features of each one to determine the best fit for a VOIP application.

upvoted 0 times

...

Chuck

5 months ago

Okay, I think I've got this. The key is that we want to attach the entire "Market Trends" email, not just the files. So I'm going to go with option B and use the Outlook Item button to attach the full email message.

upvoted 0 times

...