Question
A company uses Power Platform.
You must ensure that users cannot share customer data with other users. You must also ensure that users cannot connect to data sources unless you grant the user explicit permissions to access a data source.
You need to recommend solutions to meet the company's security requirements.
Which two types of policies should you recommend? Each correct answer presents part of the solution.
- A. Office cloud policies
- B. Group Policy Objects
- C. environment-level policies Correct
- D. tenant-level policies Correct
- E. preset security policies
Explanation
Power Platform data policies (data loss prevention policies) control which connectors apps and flows can use and which connectors can share data with each other. They can be scoped at the tenant level to cover all or selected environments, or at the environment level for a single environment, and together they meet both requirements. Office cloud policies configure Microsoft 365 Apps settings, Group Policy Objects manage Windows devices, and preset security policies belong to Microsoft Defender for Office 365; none govern Power Platform connectors.
