Exam PL-900 topic 1 question 145 discussion

I would go for 1: Authenticate external users 2: Use page templates 3: Browse content anonymously

If I want external (independent) authors to access their data securely, but not everyone else to access that, would I not need to authorize them as external users? -> 1: A

For part 1 I chose to Authenticate external users but Co-Pilot has this to say - For secure access, you can authenticate external users using Azure Active Directory B2C, which allows authors to sign in with their existing social accounts or create new credentials. This ensures that only authorized authors can access their data. Additionally, you can use role-based security in the Common Data Service to control access to data at a granular level.

after doing some light reading, id go with the CDS for question 1 as: The database provided with the CDS can be configured in two modes, Open mode and Restricted mode. Restricted mode enforces the permissions check, which is assigned via roles, me thinks. So even if an authentication is required, you still wont be able to see anything unless a specific role has been assigned to you https://powerapps.microsoft.com/es-es/blog/introducing-the-cds-security-model/

Ensure book authors can securely access their data = Authenticate External Users The question says the company wants to implement Power Apps portal and you need to RECOMMEND FEATURES. So think about it, if they want their independent authors all over the world to securely access their data, you wouldn't recommend or talk about the Common Data Service/Dataverse. If anything, that would probably make them paranoid that their data is in the "common" cloud with everyone else. Instead, you'd explain to them about AUTHENTICATION and how only they could access their data.

Confirmed, it comes in the exam of 03/13/2022.

In exam Jan 2022

in exam 16/1/2022

Verified - this appeared on 11/13/2021

In exam 30th Oct 2021

the 1st one should be Authenticate as the question is regarding "their" data. Each one should only see their respective data so authentication is required.

the last one is -- Authenticate External Users