Power Platform Security Model Design Quiz

1. In Power Platform, what does the 'Business Unit' concept help achieve?

Organize users and manage data access hierarchically

Define pricing tiers

Schedule app maintenance

Configure backup policies

2. What is the recommended approach for deploying security configurations across multiple Power Platform environments?

Manually configure each environment separately

Use solution packages and deployment pipelines to maintain consistency

Copy security roles via email

Disable security in non-production environments

3. Which Power Platform admin capability allows you to audit user actions and data access?

Power Automate templates

Audit logging and compliance features

Canvas app performance insights

Model-driven app navigation

4. In Power Platform, what does the 'Minimum Privilege' principle recommend?

Grant users maximum permissions for efficiency

Grant only the minimum permissions needed for job functions

Eliminate all security roles

Use a single admin account

5. Which approach best protects sensitive data in Power Platform cloud flows?

Store credentials in unencrypted variables

Use connection references and secure input/output parameters

Share credentials via email

Hard-code secrets in flow definitions

6. What is the primary function of a 'Security Role' in Power Platform?

To define app appearance

To specify user permissions for create, read, update, delete operations

To schedule cloud flows

To manage licenses

7. In Power Platform, how is table ownership security implemented?

By assigning ownership to users or teams and controlling access via security roles

By encrypting table names

By hiding tables from the UI

By limiting table size

8. Which Power Platform feature restricts which cloud connectors can be used within an environment?

Connection filters

DLP policies with connector classification

Business process flows

Canvas app permissions

9. What is the purpose of Azure Key Vault integration with Power Platform?

To store secrets and sensitive configuration securely

To manage email notifications

To schedule batch jobs

To define custom entities

10. Which of the following is a best practice for managing Power Platform solution security?

Store all credentials in plain text in code

Use service principals and managed identities for automation

Grant all users admin privileges

Disable multi-factor authentication

11. Which Power Platform component is primarily responsible for enforcing row-level security in model-driven apps?

Business process flows

Security roles and table permissions

Canvas app formulas

Power Automate cloud flows

12. Which security model in Power Platform controls what data a user can see based on their organizational hierarchy?

Absolute role-based security

Hierarchical security

Attribute-based security

Connector-based security

13. What is the primary benefit of using environment variables in a Power Platform solution?

To store user preferences

To manage sensitive configuration values securely across environments

To cache app data

To define business rules

14. Which Power Platform admin feature enables you to monitor and control user access across environments?

Power Apps analytics

Power Platform admin center

Azure Active Directory groups

Microsoft 365 compliance center

15. In a model-driven app, how are column-level permissions enforced for sensitive data?

Through Power Automate rules

Using field-level security and security roles

Via canvas app filters

Through Azure Key Vault

16. Which feature allows you to restrict Power Automate cloud flows from connecting to certain external services?

Connection references

Environment variables

Data Loss Prevention (DLP) policies

Tenant isolation policies

17. What does RBAC stand for in the context of Power Platform security?

Role-Based Access Control

Resource-Based Attribute Configuration

Row-Based Authorization Compliance

Realm-Based Account Control

18. Which environment type in Power Platform is best suited for production workloads requiring isolated security policies?

Developer environment

Default environment

Production environment

Trial environment

19. In Power Platform, which authentication method is recommended for service-to-service integration without user interaction?

Multi-factor authentication

Service principal or managed identity

Shared access keys

Basic authentication

20. What is the primary purpose of Data Loss Prevention (DLP) policies in Power Platform?

To encrypt all data at rest

To classify and restrict data sharing across connectors

To automatically back up cloud flows

To manage user licensing

Power Platform Solution Architect Security Model Design Quiz