MB-910 Describe Dynamics 365 Customer Insights Practice Question
A large enterprise uses Dynamics 365 Customer Insights to manage customer data from multiple subsidiaries. They want to ensure that each subsidiary can only see their own customer data but the corporate team can see all data. What is the best approach?
⚠ Common exam trap
Many exam-takers confuse segments (which are just filtered views of data) with security boundaries, assuming that creating separate segments for each subsidiary would restrict visibility, but segments do not enforce access control at the data level.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create separate data partitions within Customer Insights and assign access permissions accordingly
Data partitions in Dynamics 365 Customer Insights allow you to logically separate data from different sources (e.g., subsidiaries) within a single environment. By assigning role-based access permissions to each partition, you ensure that subsidiary users can only view their own partition data, while corporate users with broader permissions can access all partitions. This is the designed mechanism for multi-tenant or multi-business-unit data isolation without duplicating infrastructure.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Create separate data partitions within Customer Insights and assign access permissions accordingly
Why this is correct
Data partitions allow segmentation of data and access control.
- ✗
Create separate segments for each subsidiary
Why it's wrong here
Segments are for grouping, not access control.
- ✗
Apply enrichment filters to hide data
Why it's wrong here
Enrichment doesn't control visibility.
- ✗
Use match rules to keep data separate
Why it's wrong here
Match rules unify data, not separate it.
Quick reference
Access Control Model Comparison
| Model | Acronym | Who Controls Access? | Best For |
|---|---|---|---|
| Discretionary Access Control | DAC | Resource owner | Small teams, file shares |
| Mandatory Access Control | MAC | System / security labels | Classified govt / military |
| Role-Based Access Control | RBAC | Administrator (via roles) | Enterprise environments |
| Attribute-Based Access Control | ABAC | Policy engine (user + resource attributes) | Fine-grained, dynamic policies |
| Rule-Based Access Control | RuBAC | System rules / ACLs | Firewall rules, network ACLs |
Go deeper
Related to this question
About these practice questions
This MB-910 question is part of Courseiva's 941-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MB-910 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MB-910 exam.