Exam PL-900 All Questions

View all questions & answers for the PL-900 exam

Exam PL-900 topic 1 question 111 discussion

Actual exam question from Microsoft's PL-900

Question #: 111
Topic #: 1

A company's customer-facing applications must comply with Global Data Protection Regulations (GDPR) regulations.
You need to recommend actions to help ensure GDPR compliance.
Which two features should the company use? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. Force a user to update security questions after a specific amount of time.
B. Prompt a user for consent to use their personal data and record the date consented.
C. Block users who are identified as minors.
D. Automatically deactivate a user who has not used the portal in six months.

Show Suggested Answer

Suggested Answer: BC 🗳️
Reference:
https://en.wikipedia.org/wiki/General_Data_Protection_Regulation

by Dieformetal at Nov. 2, 2020, 10:45 a.m.

Comments

Submit Cancel

[Removed]

Highly Voted 3 years, 3 months ago

Is this a Power Platform test, or European Law test?? Crazy...

upvoted 27 times

cookiemonster42

2 years, 4 months ago

hahaha..lol

upvoted 2 times

...

d365developer

Highly Voted 4 years, 5 months ago

B and C https://docs.microsoft.com/en-us/powerapps/maker/portals/configure/implement-gdpr https://docs.microsoft.com/en-us/dynamics365/marketing/gdpr

upvoted 22 times

...

MHub

Most Recent 5 months, 4 weeks ago

I believe it's about the Power Pages sites, not Power Apps, and here's the link to these 2 requirements: https://learn.microsoft.com/en-us/power-pages/configure/implement-privacy

upvoted 1 times

...

COOKIE1901

9 months ago

correct answers are B and D. Option B: Prompt a user for consent to use their personal data and record the date consented is definitely correct. GDPR requires explicit consent from users for processing their personal data, and recording the date of consent is essential for compliance. Option C: Block users who are identified as minors is not a specific GDPR requirement. While protecting minors’ data is important, GDPR focuses more on obtaining consent, data minimization, and ensuring data subjects’ rights. Option D: Automatically deactivate a user who has not used the portal in six months aligns with GDPR’s principle of data minimization, which encourages organizations to retain personal data only as long as necessary.

upvoted 1 times

...

BigM

3 years, 1 month ago

Selected Answer: BC

These are the correct answers

upvoted 2 times

...

Pravda

3 years, 4 months ago

In exam 2/3/2022

upvoted 2 times

...

techy9206

3 years, 7 months ago

Verified Nov 4th 2021

upvoted 1 times

...

PraveenGabriel

3 years, 7 months ago

Verified - this appeared on 11/13/2021

upvoted 1 times

...

Aunehwet79

3 years, 7 months ago

In exam 30th Oct 2021

upvoted 1 times

...

nmnm22

3 years, 9 months ago

if only all social media apps follow this approach..

upvoted 2 times

...

Khella

3 years, 9 months ago

Verified 6/9/2021

upvoted 1 times

...

rmziii

4 years ago

Why block users is it a porn site😂😂

upvoted 8 times

SandeshSandy1

2 years, 1 month ago

hahaha lol...

upvoted 1 times

...

delpiero

1 year, 7 months ago

lol hahaha ! c'est stupide comme idée de bloquer un mineur qui veut faire de l'apprentissage

upvoted 1 times

...

Kamal_SriLanka

4 years, 1 month ago

Answer is B and C confirmed https://docs.microsoft.com/en-us/powerapps/maker/portals/configure/implement-gdpr

upvoted 4 times

MHub

5 months, 4 weeks ago

New link: https://learn.microsoft.com/en-us/power-pages/configure/implement-privacy

upvoted 1 times

...

danialonso

4 years, 3 months ago

GDPR establishes the minimum age for applying this law to 13 years. Therefore, it does make sense that users under the age of 13 should be removed. Here you have a clear example: https://slate.com/technology/2018/05/twitter-accounts-that-were-made-when-a-user-was-under-13-are-being-banned.html

upvoted 7 times

Maniula

1 year, 11 months ago

It's 16, not 13.

upvoted 1 times

...

[Removed]

4 years, 3 months ago

GDPR has nothing to do with minors...

upvoted 2 times

...

hdconsulting

4 years, 4 months ago

It's B & D. GDPR does not disallow minors from using the platform (block minors) but requires parental consent. So blocking is not really an option. Under normal GDPR compliance conditions, companies cannot keep data for more than a specific duration unless consent is renewed, which makes D a sensible option for GDPR compliance. Ref: https://docs.microsoft.com/en-us/powerapps/maker/portals/configure/implement-gdpr

upvoted 8 times

Naebun

4 years, 4 months ago

Well, technically the "options" for GDPR in regards to minors is to get parental content or block them.

upvoted 3 times

...

sebastino

4 years ago

If you don't want to go through the effort of getting parental consent than just outright blocking them will still make you compliant.

upvoted 1 times

...

iiiiiiiiii

3 years, 6 months ago

I agree with answers B and D: GDPR requires: - sers must confirm that their personal data can be collected and a clear privacy policy must be made available that shows what personal data is going to be stored and how that data will be used. - GDPR Data Retention rules state that personal data should never be retained longer than strictly necessary to accomplish the set business purpose. This is of course a good thing to ensure everyone’s privacy as data that is deleted can no longer be (mis)used, exposed, hacked etc. Sources: -https://www.2dogsdesign.com/gdpr-wordpress-guide/ - https://gdprwise.eu/data-security/data-retention-and-gdpr/#:~:text=GDPR%20%E2%80%93%20Data%20Retention%20and%20Privacy%20Policy%20GDPR,can%20no%20longer%20be%20%28mis%29used%2C%20exposed%2C%20hacked%20etc.

upvoted 1 times

...

Akraios

2 years, 10 months ago

You have the correct link but wrong answer :-D "Denies use of the portal by minors. By default, this is set to false." https://docs.microsoft.com/en-us/power-apps/maker/portals/configure/implement-gdpr

upvoted 1 times

...

[Removed]

4 years, 4 months ago

Just deactivating (D) doesn't make sense to me; it would if it would also mean deleting the user's data immediately.

upvoted 2 times

...

Load full discussion...