Question 1 (choose 2)
A company uses Power Platform. You must ensure that users cannot share customer data with other users. You must also ensure that uses cannot connect to data sources unless you grant the user explicit permissions to access a data source. You need to recommend solutions to meet the company’s security requirements. Which two types of policies should you recommend? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point
- AOption A:
Office cloud policies
- BOption B:
Group Policy Objects
- COption C:
environment-level policies
- DOption D:
tenant-level policies
- EOption E:
preset security policies
Show answer and explanation
Correct answer: C, D
- C. Environment-level policies ✅
- D. Tenant-level policies ✅
Explanation
To meet the security requirements in Power Platform:- Environment-level policies ✅
-
Control how users interact with data and connectors within a specific environment.
-
Help prevent unauthorized sharing of customer data.
- Tenant-level policies ✅
-
Apply security and governance controls across the entire Power Platform tenant.
-
Ensure users can connect only to approved data sources and require explicit permissions where appropriate.
Why the others are incorrect- A. Office cloud policies ❌
-
Used for Microsoft 365 Apps settings, not Power Platform data security.
- B. Group Policy Objects (GPOs) ❌
-
Used for Windows and Active Directory management, not Power Platform governance.
- E. Preset security policies ❌
-
Not the primary policy type used to control data sharing and connector access in Power Platform.