Exam MB-600 topic 2 question 11 discussion

Actual exam question from Microsoft's MB-600

Question #: 11
Topic #: 2

DRAG DROP -
You are designing a Dynamics 365 Sales solution that will be deployed to two separate companies on the same Microsoft Office 365 tenant: Contoso, Ltd and
Contoso Pharmaceuticals,
The solution must meet the following security requirements:
✑ Restrict Contoso, Ltd. users from seeing the Contoso Pharmaceuticals company.
✑ Restrict access to Lead and Opportunities entities within their company.
✑ Restrict access to certain forms in an entity.
Restrict access to certain fields on a form.

What should you recommend? To answer, drag the appropriate security types to the correct restrictions. Each security type may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

Show Suggested Answer

Suggested Answer:

by mmalop at Sept. 27, 2020, 4:37 p.m.

Comments

Submit Cancel

arshad

Highly Voted 4 years, 7 months ago

Answer should be: 1. Group, Role, Role (if access requested/restricted on form level) 2. Group, Role, Profile (if access requested/restricted on form's field level)

upvoted 14 times

mgharably

4 years, 5 months ago

perfect

upvoted 3 times

...

Karlomanio

4 years, 1 month ago

Group based security won't work on #1 because there is a need to see data ACROSS Business Units. While Contoso LTD should be restricted from seeing the Contoso Pharmaceuticals, Contoso Pharmaceuticals is NOT restricted from seeing Contoso LTD. so a team based security would be more logical because "Teams provide an easy way to share business objects and let you collaborate with other people across business units."

upvoted 1 times

lorper

4 years ago

It says "solution that will be deployed to two separate companies on the same Microsoft Office 365 tenant: Contoso, Ltd and Contoso Pharmaceuticals". It does not need to mean there are two business units in the same instance. It could be perfectly two instances with the same solution. So first could be group.

upvoted 2 times

...

Yuro

Highly Voted 4 years, 8 months ago

The correct answer should be Group - Team - Role

upvoted 7 times

...

richfarmer

Most Recent 4 years, 2 months ago

Restrict to environment: Security group Restrict to Org level: Security role Restrict to Entity level: Security role Restrict to Form level: Security role

upvoted 3 times

vips53

4 years, 2 months ago

The question doesn't clearly mention whether it is managed in separate environments in the same tenant or business units in the same environment. If it is managed in environments then no need to do anything for the rest of the points because they all are separated. But if it is about business units then it should be the "Role" but not "Group". Isn't it?

upvoted 1 times

...

league

4 years, 3 months ago

Group, Role, Role. 1. 2 instances within the same tenant that need to be restricted should be via Security Groups. 2. Entity restriction via Security Roles 3. Form restriction via Security Roles

upvoted 2 times

...

cvocvocvo

4 years, 5 months ago

Group (answer is explained in other people's comments) Role (this can't' be Team, it is the role that actually restricts the access, the Team can have a role applied to it, but in of itself, it does not provide the means to configure what is restricted or allowed) Role (can't be Profile, at this relates to fields only, and the requirement is about restricting forms)

upvoted 5 times

...