Exam MB-400 topic 2 question 6 discussion

Actual exam question from Microsoft's MB-400

Question #: 6
Topic #: 2

An organization uses Dynamics 365 Customer Engagement. The organization has accounting and customer service departments.
You must restrict users in customer service from being able to change the value of the balance field on the Contact records. The accounting team must be the only team able to edit this field.
You need to create the appropriate solution without any customizations.
What should you do?

A. Create an accounting form and role and make the balance field read-only.
B. Enable field security for the balance field and allow the customer service team to read and update it.
C. Create a customer service form and role and make the balance field read-only.
D. Enable field security for the balance field and allow the accounting team to read and update it.

Show Suggested Answer

Suggested Answer: D 🗳️
Field-level security is available for the default fields on most out-of-box entities, custom fields, and custom fields on custom entities. Field-level security is managed by the security profiles. To implement field-level security, a system administrator performs the following tasks.
1. Enable field security on one or more fields for a given entity.
2. Associate one more existing security profiles, or create one or more new security profiles to grant the appropriate access to specific users or teams.
Note: Record-level permissions are granted at the entity level, but you may have certain fields associated with an entity that contain data that is more sensitive than the other fields. For these situations, you use field-level security to control access to specific fields.
Reference:
https://docs.microsoft.com/en-us/power-platform/admin/field-level-security

by sanharshu7 at July 8, 2020, 10:25 a.m.

Comments

Submit Cancel

Prakash4691

Highly Voted 4 years, 11 months ago

It's option D, because customer service should not be able to update, so in FSP give read and update access only to accounts team.

upvoted 18 times

s4m

4 years, 10 months ago

this is correct, also based on the question it says that a solution without any customizations.

upvoted 3 times

...

Oleksandr_Shchur

Most Recent 4 years, 5 months ago

Correct answer is C

upvoted 1 times

...

jkaur

4 years, 6 months ago

D is the answer

upvoted 2 times

...

eric_lin

4 years, 7 months ago

C is incorrect. Because even if the field is read-only in the form, the user will still be able to update the field with SDK.

upvoted 2 times

...

lakshmi

4 years, 7 months ago

B is definitely wrong. I think D is the only correct answer, as A & C involve customizing (creating form etc., making controls read only) - and the question asks for a solution without customizing.

upvoted 3 times

...

pootietang

4 years, 11 months ago

C bc it prevents the CS team from editing not from reading. D restricts read and write, preventing read is not the requirement

upvoted 2 times

...

sanharshu7

4 years, 11 months ago

I think its C as we have to restrict changes to the field

upvoted 1 times

...