exam questions

Exam MB-200 All Questions

View all questions & answers for the MB-200 exam

Exam MB-200 topic 4 question 6 discussion

Actual exam question from Microsoft's MB-200
Question #: 6
Topic #: 4
[All MB-200 Questions]

HOTSPOT -
You are a Dynamics 365 for Customer Services administrator. You have a Production instance and Sandbox instance.
Users record Production instance data in the Sandbox instance.
You need to ensure that users only record data in the Production instance.
Which security function needs to be edited to prevent access to the Sandbox? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Sha
Highly Voted 5 years, 8 months ago
The answer should be Groups and Roles. You configure security groups in Microsoft 365 admin center to enable access to specific instances and assign roles in instances.
upvoted 50 times
...
FahadShaikh
Highly Voted 5 years, 5 months ago
I think both will be Groups as per https://community.dynamics.com/365/b/d365demystified/posts/restrict-user-access-to-a-d365-instance-using-security-groups First you configure Groups in the MS 365 Admin Center and then you apply the Group in the D365 Sandbox instance
upvoted 14 times
SoMuchConfusion
5 years, 4 months ago
This was my gut answer as well. I think it is correct.
upvoted 1 times
SoMuchConfusion
5 years, 4 months ago
You could remove people's roles in the Sandbox org as well. However, if you've got a ton of users, you're removing a lot of role assignments! Creating a new group and assigning only your valid sandbox users to it both within Office 365 admin, and then setting that new group as the security group for the Sandbox org in D365 admin is the most expedient way and best way to avoid new production users also being default-added into your Sandbox.
upvoted 3 times
Nyanne
4 years, 9 months ago
Also, if you just create the Group, but don't assign the group to an instance then all users will still have access to both environments. Only once you've done both steps will it disable users accessing Sandbox (ie. step1: Create Security Group, step2: Assign a Security Group to a D365 instance)
upvoted 1 times
...
...
...
MugBeer
4 years, 4 months ago
You apply the group in the Dynamics Admin center, not in the Dynamics 365 Sandbox instance
upvoted 1 times
...
...
AneeG
Most Recent 4 years, 10 months ago
In my exam
upvoted 1 times
...
arishka
4 years, 10 months ago
Groups Roles on exam
upvoted 4 times
...
Phums
4 years, 10 months ago
I think it should be like this: 1. Roles - Microsoft 365 admin center access is controlled by admin roles 2. Groups - Easy way to manage who has access to sandbox instance
upvoted 1 times
Defa
4 years, 6 months ago
Agree!
upvoted 1 times
...
...
Ameen
4 years, 11 months ago
In exam
upvoted 1 times
...
angela_villamarzo
4 years, 11 months ago
Reference: https://docs.microsoft.com/en-us/power-platform/admin/control-user-access
upvoted 2 times
...
SkyGod
4 years, 11 months ago
The question is a little unclear: but Groups for M365 admin center and Roles for the instance is the right answer. Think of doing each independently as there are two ways in which it could be done and either is valid with these settings.
upvoted 1 times
...
smar
5 years ago
In exam
upvoted 1 times
...
emregulcan
5 years ago
Key point is "prevent access to the Sandbox". In the Microsoft 365 Admin Center (admin.microsoft.com), you need to create a "Security Group" and add members, then on the Power Platform Admin Center (https://admin.powerplatform.microsoft.com/environments) 's Environment section, you need to edit Sandbox environment and assign this Security Group to environment. So, you can prevent access users to sandbox who are not in the security group. BTW, when you assign a Security Group to an instance, all users who are not in the security group will be disabled. In the Dynamics 365 environment, you need to remove all security roles from users, so you can prevent access to D365.
upvoted 2 times
...
huongd365
5 years, 2 months ago
Group Role
upvoted 2 times
...
CRMChica
5 years, 2 months ago
on my exam
upvoted 1 times
...
Mattu
5 years, 2 months ago
can any body provide the exact answer with proper link for reference.
upvoted 2 times
...
elka88
5 years, 3 months ago
in exam
upvoted 1 times
...
Ayeenm
5 years, 3 months ago
in exam
upvoted 2 times
...
MAKHUNXA
5 years, 4 months ago
Groups in Admin and Roles in D365 Instance. 1- If you create a group and assign it to Sandbox, only users in the group will be given access. 2- In the sandbox instance, if you remove all roles from user, then user will not be able to access instance. Note: Removing licenses will not give the user access on Production as well.
upvoted 1 times
...
MAKHUNXA
5 years, 4 months ago
Groups in Admin and Roles in D365 Instance. 1- If you create a group and assign it to Sandbox, only users in the group will be given access. 2- In the sandbox instance, if you unassigned all roles to user, then user will be able to access instance. Note: Removing licenses will not give the user access on Production as well.
upvoted 11 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago