Power Pages Site Security Configuration

Answer Correct answer: B — Using Microsoft Entra ID authentication alone does not meet the goal because it does not provide the necessary authorization controls to restrict managers to their specific store data.

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You are building a Power Pages site for a supermarket chain. The company plans to have the managers of individual stores use the site. Managers will authenticate on the site each week by using their corporate identity to update stock information for their store. Managers must be able to add and update stock information for their store only. You need to configure the site security. Solution: Use Microsoft Entra ID authentication. Does the solution meet the goal?

  1. Yes
  2. No Correct Answer

Community Votes

A
69%
B
31%

69% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

The question tests the trap of confusing Authentication (who you are) with Authorization (what you can do). The common error is assuming identity verification automatically implies permission scoping.

This PL-200 question evaluates the distinction between authentication and authorization in Microsoft Power Pages. It establishes that while Entra ID handles login, it does not inherently enforce data-level access restrictions.

Candidates choose 'Yes' because they focus solely on the secure login aspect, failing to realize that Entra ID alone does not restrict users to their specific store's data without additional configuration.

Community Discussion (6 comments)

killionb12 👍 3 Selected: A
Yes, using Microsoft Entra ID authentication meets the goal. Microsoft Entra ID (formerly known as Azure Active Directory) provides secure and scalable authentication, allowing managers to use their corporate identity to sign in. This ensures that only authenticated users can access and update stock information for their specific store
ABDFormacion 👍 2 Selected: A
The answer is A. Yes. Here's why: Microsoft Entra ID authentication provides a secure and robust method for authenticating users. This aligns with the requirement for managers to use their corporate identity to authenticate. Fine-grained access control can be implemented using Microsoft Entra ID groups. You can create a group for each store manager and assign them permissions to update stock information only for their specific store. This ensures that managers can only modify data relevant to their store. Therefore, using Microsoft Entra ID authentication with appropriate group-based access control effectively meets the security goals outlined for the supermarket chain's Power Pages site.
MajidAssikiou 👍 1 Selected: B
I agree with Tootru2bReal
Tootru2bReal 👍 3 Selected: B
The scenario is not about Authentication. It's about Authorization. The managers need to be able to "add and update their records". Authentication is to get access to the app/site. Authorization you need permissions to actually do something once inside. Now, if the solution/answer stated using Entra ID and assigned to a security group that was assigned to a security profile with the appropriate permissions (authorization), then it would be Yes.
businesselements1 👍 2 Selected: A
--YES--https://learn.microsoft.com/en-us/entra/identity/authentication/overview-authentication ==> One of the main features of an identity platform is to verify, or authenticate, credentials when a user signs in to a device, application, or service.
91e9a8d 👍 2 Selected: A
From Microsoft perspective, corporate identity solution is Entra ID.

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

The solution fails to meet the goal because it addresses only authentication, not authorization. While Microsoft Entra ID verifies the managers' corporate identities, it does not define the permissions required to limit them to updating stock information for their specific stores only. To achieve the stated security goal, you must configure a security profile and assign appropriate record-level permissions based on business units or teams.

Why the Other Options Are Wrong

Option A is incorrect because simply authenticating users does not grant them specific data access rights. Without explicit authorization rules, authenticated users might have broader access than intended or no structured access at all depending on default settings. The solution provided is incomplete for the requirement of restricting actions to specific records.

Community Comment Notes

Community feedback highlights this exact distinction. One commenter noted, "The scenario is not about Authentication. It's about Authorization," emphasizing that login is just the first step. Another user pointed out that fine-grained control requires more than just the identity platform, stating, "Fine-grained access control can be implemented using Microsoft Entra ID groups" but noting that the option didn't specify these configurations. The consensus among those who chose correctly was that the answer was insufficient as written.

Official Reference

Exam Strategy

Always distinguish between Authentication (login) and Authorization (permissions). If a solution mentions only logging in but asks for specific data access or role-based restrictions, the answer is likely 'No' unless it explicitly mentions security profiles or permissions.

Frequently Asked Questions

Why isn't Entra ID enough for Power Pages security?

Entra ID only handles authentication (verifying identity). It does not handle authorization (permissions), which is needed to restrict users to specific store data.

How do I restrict users to specific stores in Power Pages?

You must create Security Profiles and assign them to Teams or Users, then configure record-level permissions to limit access to specific business units or records.

Related Analysis

← Back to PL-200 Study Guide