Question 40
At the Alder housing nonprofit after a wider deployment, an app hides a command button but users with direct API access can still change restricted financial rows. The operations team needs a supportable remediation with evidence for the handover. Which ongoing engineering control would most directly reduce recurrence?
Explanation
Correct Answer
The most relevant long-term safeguard is to retest table and row privileges after security-role and team changes. It preserves the remediation to enforce Dataverse role, team and row-access privileges independently of presentation controls as operating conditions change. In the Alder housing nonprofit, assess this against the documented security authorization boundaries scenario.
Incorrect Answers
“Track virtual-table provider capabilities and unsupported operations before enhancements” checks a different ongoing risk rather than the reported failure: at the Alder housing nonprofit after a wider deployment, an app hides a command button but users with direct API access can still change restricted financial rows. The operations team needs a supportable remediation with evidence for the handover. The relevant mechanism is hiding a user-interface command is not an authorization boundary. The directly matched preventive control is “Retest table and row privileges after security-role and team changes”.
That safeguard is appropriate for maintaining server versus client enforcement. It would not primarily prevent the reported failure, for which the relevant control is to retest table and row privileges after security-role and team changes. For case R082-PL400-CASE-0010, the decisive context is the 2 deployment setting at the Alder housing nonprofit.
“Review agent topics, tools, and permissions as connected services evolve” checks a different ongoing risk rather than the reported failure: at the Alder housing nonprofit after a wider deployment, an app hides a command button but users with direct API access can still change restricted financial rows. The operations team needs a supportable remediation with evidence for the handover. The relevant mechanism is hiding a user-interface command is not an authorization boundary. The directly matched preventive control is “Retest table and row privileges after security-role and team changes”.