Quick Answer
The answer is Business Units with hierarchical security. This feature is correct because it enables a global sales organization to create separate data silos for each region, and hierarchical security then restricts sales representatives to viewing only opportunities owned within their assigned business unit, enforcing regional data isolation for privacy regulations. On the Microsoft Dynamics 365 Fundamentals CRM MB-910 exam, this tests your understanding of how data access is controlled through organizational structure rather than through record-level permissions alone; a common trap is confusing this with teams or field security profiles, which manage collaboration or specific field visibility, not regional data isolation. Remember the memory tip: “BU hierarchy locks the silo” — Business Units create the silos, and the hierarchy locks who can see inside them.
This MB-910 practice question tests your understanding of describe dynamics 365 sales. This is a configuration task: choose the command set that satisfies every stated requirement. Small differences — like 'secret' vs 'password' or 'transport input ssh' vs 'all' — change whether the answer is correct. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
A global sales organization uses Dynamics 365 Sales and wants to ensure that sales representatives in different regions see only their own opportunities due to data privacy regulations. Which feature should be configured?
Access Teams
Why wrong: Access teams are for sharing specific records, not automatic scoping.
Owner Teams
Why wrong: Teams do not automatically restrict by region.
Business Units with hierarchical security
Business units can segment data and security roles enforce visibility.
Field Security Profiles
Why wrong: Field security controls field-level access, not record-level.
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Business Units with hierarchical security
Business Units with hierarchical security is the correct feature because it allows the organization to create separate data silos (business units) for each region, and hierarchical security ensures that sales representatives can only view records owned by their own business unit. This enforces data privacy regulations by restricting access to opportunities based on the user's assigned business unit hierarchy, preventing cross-region visibility.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Access Teams
Why it's wrong here
Access teams are for sharing specific records, not automatic scoping.
Owner Teams
Why it's wrong here
Teams do not automatically restrict by region.
Business Units with hierarchical security
Why this is correct
Business units can segment data and security roles enforce visibility.
Related concept
Read the scenario before looking for a memorised answer.
Field Security Profiles
Why it's wrong here
Field security controls field-level access, not record-level.
Common exam traps
The trap here is that candidates often confuse 'Owner Teams' or 'Access Teams' with data isolation, but those features are designed for collaboration and shared access, not for enforcing regional data privacy restrictions.
Detailed technical explanation
Under the hood, Dynamics 365 uses a business unit hierarchy where each user is assigned to a primary business unit, and the security model includes a 'Read' privilege that can be set to 'Business Unit' level, meaning users can only read records owned by their own business unit. Hierarchical security extends this by allowing parent business units to see child business unit data if configured, but for strict regional isolation, the 'Read' privilege is set to 'User' or 'Business Unit' level without inheritance. In a real-world scenario, a sales rep in the EMEA region would be placed in the 'EMEA' business unit, and the opportunity entity's security role would have read access set to 'Business Unit', ensuring they never see APAC or Americas opportunities.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
A company's IT admin needs to give a contractor read-only access to production logs without sharing account credentials. Using role-based access control (RBAC) and temporary scoped permissions — not a permanent shared password — is the correct pattern. Questions like this test whether you can apply least-privilege access across cloud identity services.
What to study next
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Describe Dynamics 365 Sales — study guide chapter
Learn the concepts, then practise the questions
Describe Dynamics 365 Sales practice questions
Targeted practice on this topic area only
All MB-910 questions
977 questions across all exam domains
Microsoft Dynamics 365 Fundamentals CRM MB-910 study guide
Full concept coverage aligned to exam objectives
MB-910 practice test guide
How to use practice tests most effectively before exam day
Related practice questions
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
Practise MB-910 questions linked to Describe Dynamics 365 Customer Insights.
Practise MB-910 questions linked to Describe Dynamics 365 Sales.
Practise MB-910 questions linked to Describe Dynamics 365 Customer Service.
Practise MB-910 questions linked to Describe Dynamics 365 Field Service.
Practise MB-910 questions linked to Explore the core capabilities of customer engagement apps in Dynamics 365.
Practise MB-910 questions linked to Describe shared features and Copilot capabilities.
Practise MB-910 questions linked to MB-910 fundamentals.
Practise MB-910 questions linked to MB-910 scenario.
Practise MB-910 questions linked to MB-910 troubleshooting.
Practice this exam
Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.
FAQ
Describe Dynamics 365 Sales — This question tests Describe Dynamics 365 Sales — Read the scenario before looking for a memorised answer..
The correct answer is: Business Units with hierarchical security — Business Units with hierarchical security is the correct feature because it allows the organization to create separate data silos (business units) for each region, and hierarchical security ensures that sales representatives can only view records owned by their own business unit. This enforces data privacy regulations by restricting access to opportunities based on the user's assigned business unit hierarchy, preventing cross-region visibility.
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Last reviewed: Jun 24, 2026
This MB-910 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MB-910 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.