AB-410 Hard Questions — 25 Difficult Questions

Question 1

You are auditing environment security. You find that a user can see records they should not have access to. The user is assigned two security roles, one that grants access and one that restricts it. How does Dataverse handle this?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The privileges are additive (union). Dataverse uses a 'Union' approach; the user receives the sum of all privileges from all assigned roles.

Answer

The most restrictive role wins

Answer

The last assigned role takes precedence

Answer

The user is denied access

Question 2

You are creating a custom table. You want to track when a record was created and who created it. What must you do?

Accepted Answer

Enable the table for auditing. Dataverse includes 'Audit' or 'System' fields automatically, but they must be enabled in the table configuration.

Answer

Create custom fields for CreatedBy and CreatedOn

Answer

Add the fields to the form

Answer

Write a workflow

Question 3

A Power Platform environment requires that users from the 'Sales' team cannot see 'Lead' records owned by the 'Marketing' team. You have already verified security roles. What is the next logical step?

Accepted Answer

Assign the teams to different Business Units.. Business units are the primary mechanism for partitioning data access in Dataverse; placing teams into different business units enables security role-based filtering.

Answer

Create a shared mailbox.

Answer

Use Access Teams.

Answer

Implement Field-Level Security.

Question 4

You are configuring field-level security for a sensitive 'Salary' field. You have enabled the field for security. What must be done next to ensure the user cannot read the data?

Accepted Answer

Create a Field Security Profile and assign it to the user. You must create a Field Security Profile and add the user to it with specific permissions.

Answer

Remove the field from the Form

Answer

Assign the user a different security role

Answer

Set the field to read-only on the form

Question 5

You are configuring a model-driven app form. You need to show a field only if a choice column has a specific value. What should you use?

Accepted Answer

Business rule. Business rules are the standard way to configure field visibility based on logic on model-driven forms.

Answer

Workflow

Answer

Power Fx formula in the field property

Answer

Canvas component

Question 6

You have an app that needs to connect to an on-premises SQL Server. What is required to facilitate this?

Accepted Answer

On-premises data gateway. The On-premises data gateway is essential for bridging the cloud to on-premises resources.

Answer

A custom API

Answer

Public IP address

Answer

A cloud-native connector

Question 7

You are generating a canvas app using natural language. The generator creates a table for 'Event Planning' but lacks a 'Venue' field. How do you add this field?

Accepted Answer

Edit the data source in the Data pane. You can modify the data schema directly in the data pane or by adding a column in the Dataverse table designer.

Answer

Use a label control

Answer

Re-generate the entire app

Answer

Modify the app theme

Question 8

Which TWO actions should you take when troubleshooting a broken data connection in a canvas app?

Accepted Answer

Verify the connection status in the Data pane. Check the connection status and verify the user's permissions.

Answer

Reinstall the browser

Answer

Delete the app

Answer

Rename the app

Question 9

You are automating an approval process. The approver is currently on leave. How can you dynamically reassign the approval task?

Accepted Answer

Use the 'Update approval' action. You can use an 'Update approval' action or a flow that queries a manager hierarchy in Dataverse to update the request.

Answer

Restart the flow

Answer

Create a new approval for the manager

Answer

Delete the approval request

Question 10

Which TWO steps are required to set up a Copilot agent for a specific app?

Accepted Answer

Create a bot in Copilot Studio. Integration requires creating a bot and enabling the relevant data connectors.

Answer

Purchase a separate server

Answer

Hard-code the database connection

Answer

Recompile the app binary

Question 11

Which TWO of the following are best practices for securing flow logic? (Choose TWO)

Accepted Answer

Use service principals for connectors. Use least privilege and secure sensitive data.

Answer

Always run flows as System Administrator

Answer

Store passwords in flow variables

Answer

Share flows with 'Everyone' in the org

Question 12

You are building an agent in Microsoft Copilot Studio that needs to orchestrate multiple actions. Which THREE features should you configure to ensure the agent executes tasks in the correct sequence?

Accepted Answer

Topic trigger phrases. Topic triggers, entity extraction, and action chaining are required for sophisticated agent orchestration.

Answer

Copilot Studio Plugin creation

Answer

AI Hub model training

Question 13

You need to ensure that a canvas app user can only save their changes if all required fields are filled. What is the most efficient way to validate this?

Accepted Answer

Set the button DisplayMode based on Form.Valid. The DisplayMode property of the Submit button can be set to 'Edit' only when the form is valid.

Answer

Use a timer

Answer

Use a variable

Answer

Write a manual check for each field

Question 14

Which TWO properties are most important for data performance in a canvas app?

Accepted Answer

Data source configuration. Data source connections and efficient filtering are the biggest factors in app performance.

Answer

App font size

Answer

Control border color

Answer

Background image opacity

Question 15

Which THREE methods can you use to connect a canvas app to a data source?

Accepted Answer

Insert > Data. You can use the Data pane, add existing tables directly, or use connectors.

Answer

Editing the C# source code

Answer

Directly typing a connection string

Question 16

You are troubleshooting a form in a model-driven app. The field is read-only even though the user has 'Write' permissions. What is the most likely cause?

Accepted Answer

Field security profile configuration. The 'Field Security Profile' or form-level 'Read-only' setting is often the culprit for fields that are otherwise writable.

Answer

The app icon

Answer

The browser cache

Answer

The user's password

Question 17

You notice that an image in your canvas app is blurry. What should you check to ensure it displays at high quality?

Accepted Answer

The Image property and control dimensions. The Image property needs to point to a high-resolution version, or the control might need resizing to match the image aspect ratio.

Answer

The app background color

Answer

The number of data sources

Answer

The app theme

Question 18

You are using the 'Copilot' control in your canvas app. How do you link it to your specific data?

Accepted Answer

Configure the Data sources property. You map the Copilot control to a data source, often by configuring the 'Data Sources' property in the control's configuration.

Answer

Change the app name

Answer

Write a custom API connector

Answer

Update the environment variable

Question 19

You need to store sensitive information in your canvas app. How should you protect it?

Accepted Answer

Use Dataverse field-level security. Field-level security in Dataverse is the most robust way to protect sensitive data at the field level.

Answer

Use a variable

Answer

Hide the control

Answer

Rename the field

Question 20

You have an app generated via natural language. You want to change the primary field of the app. Where do you change this?

Accepted Answer

In the table settings within Dataverse. The primary field is a property of the table, which must be configured in the Dataverse table designer.

Answer

In the App designer property pane

Answer

In the Canvas app properties

Answer

By deleting and recreating the app