Exam PL-200 All Questions

View all questions & answers for the PL-200 exam

Exam PL-200 topic 1 question 22 discussion

Actual exam question from Microsoft's PL-200

Question #: 22
Topic #: 1

HOTSPOT -
A company deploys several model-driven apps. The company uses shared devices in their warehouse. The devices are always powered on. Users log on to the devices and then launch the apps to perform actions.
Unauthorized users recently uploaded several files after another user failed to log out of a device. The company needs to prevent these incidents from occurring in the future.
You need to configure the solution to prevent the reported security incidents.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

by imbaster at Aug. 31, 2021, 6:23 p.m.

Comments

Submit Cancel

imbaster

Highly Voted 3 years, 11 months ago

Second Answer is wrong: should be "Enter the restricted file types in the PowerPlatform Admin center". This exam does not cover SharePoint. https://docs.microsoft.com/de-de/power-platform/admin/settings-privacy-security

upvoted 93 times

Walterddd

3 years, 3 months ago

i agree with you,to find out how go to admin center power platform>product>behavior

upvoted 3 times

...

Walterddd

3 years, 3 months ago

i agree with you, to find out how go to Admin Center Power Platform>Product>Privacy + Security.

upvoted 3 times

...

andy365

2 years, 1 month ago

I agree. Model-driven apps use Dataverse so restricted files types needs to be entered within the Power Platform Admin Center.

upvoted 2 times

...

gerbendenboer

Highly Voted 3 years, 11 months ago

Set blocked file extensions for attachments (semicolon separated) has to be done in Power Platform admin center. https://docs.microsoft.com/en-us/power-platform/admin/settings-privacy-security Prevent upload or download of certain attachment types that are considered dangerous. Separate file extensions with a semicolon. Default extensions: ade; adp; app; asa; ashx; asmx; asp; bas; bat; cdx; cer; chm; class; cmd; com; config; cpl; crt; csh; dll; exe; fxp; hlp; hta; htr; htw; ida; idc; idq; inf; ins; isp; its; jar; js; jse; ksh; lnk; mad; maf; mag; mam; maq; mar; mas; mat; mau; mav; maw; mda; mdb; mde; mdt; mdw; mdz; msc; msh; msh1; msh1xml; msh2; msh2xml; mshxml; msi; msp; mst; ops; pcd; pif; prf; prg; printer; pst; reg; rem; scf; scr; sct; shb; shs; shtm; shtml; soap; stm; tmp; url; vb; vbe; vbs; vsmacros; vss; vst; vsw; ws; wsc; wsf; wsh

upvoted 26 times

...

Abokhate

Most Recent 1 month, 2 weeks ago

In the first question: prevent unauthorized access to devices possible actions, I choose "Set an inactivity limit in the user's group policy" because that allows you to force log out after a inactivity time. Second option only log out the user log in the app, not in Power Platform

upvoted 1 times

...

Christoz

2 months ago

In practice, you know which file types you want to allow than the ever-increasing list file types you may want to restrict.

upvoted 1 times

...

MVPConsultant

1 year ago

Looks like you can do both of these in power platform admin center steps are environment - select the environment - settings - privacy and security = session expiration is there and blocked attachments

upvoted 3 times

...

LRRooster

1 year, 1 month ago

As an architect, I would never let users upload to the dataverse simply because the cost is prohibitive! I would use sharepoint, that said, i would restrict file types in sharepoint not through power platform admin center. The first question is a little bit tricky because you could set a blanket time out policy on for all the devices using Microsoft Entra Domain Services or you could set the timeout feature in power platform admin center. So you would have to choose which one fits for the exam.

upvoted 1 times

...

WikyWik

1 year, 4 months ago

Second Answer is wrong. Model Driven Apps can't use SP as datasource

upvoted 2 times

...

solidshag

1 year, 6 months ago

Second answer is the third option.

upvoted 1 times

...

Sri2020

1 year, 6 months ago

1.Set a timeout in the Power Platform admin center. 2 .Enter the restricted file types in the Power Platform admin center. Go to Power Platform admin center --> Environmentts --> Settings --> Privacy + Security Set inactivity timeout " On" Set blocked file extensions for attachments (semicolon separated) has to be done in Power Platform admin center.

upvoted 1 times

...

gina_the_boss

1 year, 6 months ago

on exam nov 2023

upvoted 1 times

...

wajid124

1 year, 11 months ago

Set inactivity timeout > Default: Off. Enable to automatically sign out a user.

upvoted 2 times

...

inzagi

2 years ago

Rirst ansver should be 1 Group Policy (One because you need to block access to shared device and not to PowerApp) 3 Second Answer is wrong: should be "Enter the restricted file types in the PowerPlatform Admin center".

upvoted 1 times

...

Aero_1898

2 years ago

1st should be 1 No, you cannot set a timeout for user inactivity in the Power Platform admin center. The Power Platform admin center allows administrators to manage settings for Power Apps, Power Automate, and other Power Platform services, but it does not have the ability to automatically log out users from shared devices after a period of inactivity. To automatically log out users from shared devices after a period of inactivity, you would need to use a feature of the operating system, such as Group Policy for Windows devices. This can be done through the Group Policy Management Console on a Windows server or through the Local Group Policy Editor on a Windows client computer.

upvoted 3 times

...

Leylae

2 years, 8 months ago

this is hard to decide... I feel for 2nd answer 1 and 3 are both correct, it depends on how App set it up... I think because the exam is more about power platform, so I will go with 3, set restrict file type on power platform admin center. ref https://support.microsoft.com/en-us/topic/power-automate-approval-attachment-limitations-and-restrictions-f19bc97c-b353-e3af-b156-6fb6a5a9c273

upvoted 3 times

inespal

2 years, 2 months ago

There is a clear reason why SharePoint is not a valid option. The question mentions model-driven apps, for which the data can only be stored on Dataverse, not any other Datasource.

upvoted 4 times

uberlord

2 years ago

your able to store in sharepoint by use of the file location table, i use it for portals but the functionality is there for modal driven apps to use sharepoint as a backend for the file, and if there block was put there it would work.

upvoted 1 times

MrEz

1 year, 5 months ago

still since sharepoint is not mentioned, maybe the customer is using a debian nextcloud solution as a file location :-). and the question speaks of model driven app (i know about the document tab... but i would rather go for the scenario to upload to e.g. email attachment -> which i would never recommend of course).

upvoted 1 times

...

MoazzamBhuian

2 years, 10 months ago

Right Answer : Set a timeout in the Power Platform admin center Enter the restricted file types in the PowerPlatform Admin center https://docs.microsoft.com/en-us/power-platform/admin/settings-privacy-security

upvoted 8 times

...

Nakom

2 years, 10 months ago

The uploaded files in Model-Driven app doesn`t go to sharepoint, at least not direct. The right answer should be "Restriction from power platform admin center", sharepoint cannot be used in MD apps

upvoted 4 times

...

AdyK

2 years, 11 months ago

Took the exam in August 2022. This question was there.

upvoted 1 times

...

Load full discussion...