McAfee-Secured Website

Exam Bundle

Exam Code: PL-400

Exam Name Microsoft Power Platform Developer

Certification Provider: Microsoft

Corresponding Certification: Microsoft Certified: Power Platform Developer Associate

Microsoft PL-400 Bundle $25.00

100% Microsoft PL-400 Guaranteed Success With Testking Training Materials

Get Real PL-400 Exam Questions & Expert Verified Answers as Experienced on the Real Exam!

  • Questions & Answers

    PL-400 Questions & Answers

    429 Questions & Answers

    The ultimate exam preparation tool, Questions & Answers mirrors the actual PL-400 exam while allowing you to hone and measure every aspect of your test-taking ability.

  • PL-400 Video Course

    PL-400 Video Course

    106 Video Lectures

    PL-400 Video Course is developed by Microsoft Professionals to help you pass the PL-400 exam.

    Description

    This course will improve your knowledge and skills required to pass Microsoft Power Platform Developer exam.

Microsoft Power Platform Developer (PL-400) Practice Tests

Satisfaction Guaranteed

Money Back Guarantee

Testking provides hassle-free money back guarantee with our products. That is because we have 100% trust in the abilities of our professional and experience product team, and our record is a proof of that.

99.6% PASS RATE
Total Cost: $164.98
Bundle Price: $139.98

Purchase Individually

  • Questions & Answers

    Questions & Answers

    429 Questions

    $124.99
  • PL-400 Video Course

    Video Course

    106 Video Lectures

    $39.99

Microsoft PL-400 Practice Test 68

Question 670

At Brookside Manufacturing, the plant software team is implementing a work-order system upgrade under requirements for planned downtime and production traceability. After the proposed change, the release reviewer requires evidence for: Two systems update a shared customer address concurrently and the last sync wins without a conflict policy. Which result BEST proves the intended fix is effective?

  1. Changing an email address keeps the same contact identity and does not create an unwanted duplicate.
  2. A sync after a small update retrieves only changed records and correctly advances its checkpoint.
  3. A deliberate concurrent update resolves according to policy and emits an auditable conflict record.
  4. A source deletion is reflected by the agreed downstream retention rule without orphaned active rows.

Explanation

Correct Answer

C:

A deliberate concurrent update resolves according to policy and emits an auditable conflict record. This directly tests whether the reported failure has been corrected: Two systems update a shared customer address concurrently and the last sync wins without a conflict policy. The intended action was Define source-of-truth ownership or timestamp/version conflict handling before applying upserts. The observed Brookside Manufacturing outcome is stronger evidence than a completed ticket or a saved configuration alone.

Incorrect Answers

A:

Changing an email address keeps the same contact identity and does not create an unwanted duplicate. Such evidence would validate a different change: A sync pipeline uses contact email as its unique key even though a person can change email and multiple contacts can share a mailbox. It follows the separate remedy Choose a stable immutable external identifier as the Dataverse alternate key rather than a mutable display attribute. The Brookside Manufacturing scenario instead reports Two systems update a shared customer address concurrently and the last sync wins without a conflict policy. The decisive observation must be: A deliberate concurrent update resolves according to policy and emits an auditable conflict record.

B:

A sync after a small update retrieves only changed records and correctly advances its checkpoint. Such evidence would validate a different change: An integration polls the full Accounts table each hour to find changes and spends most of its quota on unchanged rows. It follows the separate remedy Enable and use Dataverse change tracking with a retained change token for incremental synchronization. The Brookside Manufacturing scenario instead reports Two systems update a shared customer address concurrently and the last sync wins without a conflict policy. The decisive observation must be: A deliberate concurrent update resolves according to policy and emits an auditable conflict record.

D:

A source deletion is reflected by the agreed downstream retention rule without orphaned active rows. Such evidence would validate a different change: A source system deletes a customer record but the synchronization process imports only additions and updates. It follows the separate remedy Handle documented change-tracking delete tombstones and map them to authorized target deletion or archival policy. The Brookside Manufacturing scenario instead reports Two systems update a shared customer address concurrently and the last sync wins without a conflict policy. The decisive observation must be: A deliberate concurrent update resolves according to policy and emits an auditable conflict record.

Question 671

At Juniper Media, the production operations team is implementing a content licensing automation under requirements for governed asset rights. During the implementation check, developers discover: Two systems update a shared customer address concurrently and the last sync wins without a conflict policy. Which change BEST resolves this specific problem?

  1. Choose a stable immutable external identifier as the Dataverse alternate key rather than a mutable display attribute.
  2. Define source-of-truth ownership or timestamp/version conflict handling before applying upserts.
  3. Enable and use Dataverse change tracking with a retained change token for incremental synchronization.
  4. Advance the change-tracking token only after durable application of the corresponding changes and support safe replay.

Explanation

Correct Answer

B:

Define source-of-truth ownership or timestamp/version conflict handling before applying upserts. This specifically addresses Two systems update a shared customer address concurrently and the last sync wins without a conflict policy. For Juniper Media, the design decision changes the underlying Power Platform solution behavior rather than an unrelated surface setting. A measurable acceptance result is: A deliberate concurrent update resolves according to policy and emits an auditable conflict record.

Incorrect Answers

A:

Choose a stable immutable external identifier as the Dataverse alternate key rather than a mutable display attribute. This is a plausible technique for a DIFFERENT requirement: A sync pipeline uses contact email as its unique key even though a person can change email and multiple contacts can share a mailbox. The Juniper Media failure described here instead concerns Two systems update a shared customer address concurrently and the last sync wins without a conflict policy. That choice does not establish the required correction; the acceptance result must be: A deliberate concurrent update resolves according to policy and emits an auditable conflict record.

C:

Enable and use Dataverse change tracking with a retained change token for incremental synchronization. This is a plausible technique for a DIFFERENT requirement: An integration polls the full Accounts table each hour to find changes and spends most of its quota on unchanged rows. The Juniper Media failure described here instead concerns Two systems update a shared customer address concurrently and the last sync wins without a conflict policy. That choice does not establish the required correction; the acceptance result must be: A deliberate concurrent update resolves according to policy and emits an auditable conflict record.

D:

Advance the change-tracking token only after durable application of the corresponding changes and support safe replay. This is a plausible technique for a DIFFERENT requirement: An incremental sync fails after processing half a change batch but stores the new tracking token before the batch commits. The Juniper Media failure described here instead concerns Two systems update a shared customer address concurrently and the last sync wins without a conflict policy. That choice does not establish the required correction; the acceptance result must be: A deliberate concurrent update resolves according to policy and emits an auditable conflict record.

Question 672

At Juniper Media, the production operations team is implementing a content licensing automation under requirements for governed asset rights. The team says the following incident was fixed: Two systems update a shared customer address concurrently and the last sync wins without a conflict policy. Which result BEST proves the intended fix is effective?

  1. A sync after a small update retrieves only changed records and correctly advances its checkpoint.
  2. Restarting after a simulated failure retrieves or replays missing changes without permanent data loss.
  3. Replaying a customer record updates the existing row and the total customer count stays constant.
  4. A deliberate concurrent update resolves according to policy and emits an auditable conflict record.

Explanation

Correct Answer

D:

A deliberate concurrent update resolves according to policy and emits an auditable conflict record. This directly tests whether the reported failure has been corrected: Two systems update a shared customer address concurrently and the last sync wins without a conflict policy. The intended action was Define source-of-truth ownership or timestamp/version conflict handling before applying upserts. The observed Juniper Media outcome is stronger evidence than a completed ticket or a saved configuration alone.

Incorrect Answers

A:

A sync after a small update retrieves only changed records and correctly advances its checkpoint. Such evidence would validate a different change: An integration polls the full Accounts table each hour to find changes and spends most of its quota on unchanged rows. It follows the separate remedy Enable and use Dataverse change tracking with a retained change token for incremental synchronization. The Juniper Media scenario instead reports Two systems update a shared customer address concurrently and the last sync wins without a conflict policy. The decisive observation must be: A deliberate concurrent update resolves according to policy and emits an auditable conflict record.

B:

Restarting after a simulated failure retrieves or replays missing changes without permanent data loss. Such evidence would validate a different change: An incremental sync fails after processing half a change batch but stores the new tracking token before the batch commits. It follows the separate remedy Advance the change-tracking token only after durable application of the corresponding changes and support safe replay. The Juniper Media scenario instead reports Two systems update a shared customer address concurrently and the last sync wins without a conflict policy. The decisive observation must be: A deliberate concurrent update resolves according to policy and emits an auditable conflict record.

C:

Replaying a customer record updates the existing row and the total customer count stays constant. Such evidence would validate a different change: A partner system creates a second customer every time the same external identifier is replayed. It follows the separate remedy Define an alternate key on the external identifier and upsert using the corresponding key-based identity. The Juniper Media scenario instead reports Two systems update a shared customer address concurrently and the last sync wins without a conflict policy. The decisive observation must be: A deliberate concurrent update resolves according to policy and emits an auditable conflict record.

Question 673

At Highland Education, the campus services team is implementing an apprenticeship management app under requirements for secure integration and predictable performance. The architecture review finds: A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. Which change BEST resolves this specific problem?

  1. Configure the supported OAuth authorization endpoint, redirect URI and minimum scopes for the intended environment.
  2. Extend the connector OpenAPI document with stable operation IDs, summaries and valid response schemas.
  3. Configure the connector's supported Entra OAuth authentication and the Function's corresponding authorization policy.
  4. Correct the OpenAPI parameter type and schema before regenerating connector operations.

Explanation

Correct Answer

D:

Correct the OpenAPI parameter type and schema before regenerating connector operations. This specifically addresses A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. For Highland Education, the design decision changes the underlying Power Platform solution behavior rather than an unrelated surface setting. A measurable acceptance result is: The test operation accepts the full account identifier and sends the expected request shape.

Incorrect Answers

A:

Configure the supported OAuth authorization endpoint, redirect URI and minimum scopes for the intended environment. This is a plausible technique for a DIFFERENT requirement: A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. The Highland Education failure described here instead concerns A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. That choice does not establish the required correction; the acceptance result must be: The test operation accepts the full account identifier and sends the expected request shape.

B:

Extend the connector OpenAPI document with stable operation IDs, summaries and valid response schemas. This is a plausible technique for a DIFFERENT requirement: A legacy service's OpenAPI file exposes no operation identifiers and imported actions appear with ambiguous names. The Highland Education failure described here instead concerns A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. That choice does not establish the required correction; the acceptance result must be: The test operation accepts the full account identifier and sends the expected request shape.

C:

Configure the connector's supported Entra OAuth authentication and the Function's corresponding authorization policy. This is a plausible technique for a DIFFERENT requirement: A custom connector must call an Azure Function protected by Microsoft Entra ID but currently uses an anonymous URL. The Highland Education failure described here instead concerns A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. That choice does not establish the required correction; the acceptance result must be: The test operation accepts the full account identifier and sends the expected request shape.

Question 674

At Highland Education, the campus services team is implementing an apprenticeship management app under requirements for secure integration and predictable performance. After the proposed change, the release reviewer requires evidence for: A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. Which result BEST proves the intended fix is effective?

  1. Authorized connector requests reach the function while anonymous and wrong-scope requests are denied.
  2. An existing app still executes the old documented operation after a compatible API revision.
  3. The test operation accepts the full account identifier and sends the expected request shape.
  4. A second authorized user completes sign-in and invokes the service without using the maker's identity.

Explanation

Correct Answer

C:

The test operation accepts the full account identifier and sends the expected request shape. This directly tests whether the reported failure has been corrected: A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. The intended action was Correct the OpenAPI parameter type and schema before regenerating connector operations. The observed Highland Education outcome is stronger evidence than a completed ticket or a saved configuration alone.

Incorrect Answers

A:

Authorized connector requests reach the function while anonymous and wrong-scope requests are denied. Such evidence would validate a different change: A custom connector must call an Azure Function protected by Microsoft Entra ID but currently uses an anonymous URL. It follows the separate remedy Configure the connector's supported Entra OAuth authentication and the Function's corresponding authorization policy. The Highland Education scenario instead reports A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. The decisive observation must be: The test operation accepts the full account identifier and sends the expected request shape.

B:

An existing app still executes the old documented operation after a compatible API revision. Such evidence would validate a different change: A GitHub-hosted OpenAPI definition is imported once and future service changes silently break existing connector actions. It follows the separate remedy Version and review the OpenAPI contract, test backward compatibility and deploy managed connector updates. The Highland Education scenario instead reports A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. The decisive observation must be: The test operation accepts the full account identifier and sends the expected request shape.

D:

A second authorized user completes sign-in and invokes the service without using the maker's identity. Such evidence would validate a different change: A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. It follows the separate remedy Configure the supported OAuth authorization endpoint, redirect URI and minimum scopes for the intended environment. The Highland Education scenario instead reports A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. The decisive observation must be: The test operation accepts the full account identifier and sends the expected request shape.

Question 675

At Eastshore Energy, the remote operations team is implementing a maintenance platform rollout under requirements for reliable cross-region event processing. During the implementation check, developers discover: A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. Which change BEST resolves this specific problem?

  1. Correct the OpenAPI parameter type and schema before regenerating connector operations.
  2. Configure the connector's supported Entra OAuth authentication and the Function's corresponding authorization policy.
  3. Configure the supported OAuth authorization endpoint, redirect URI and minimum scopes for the intended environment.
  4. Extend the connector OpenAPI document with stable operation IDs, summaries and valid response schemas.

Explanation

Correct Answer

A:

Correct the OpenAPI parameter type and schema before regenerating connector operations. This specifically addresses A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. For Eastshore Energy, the design decision changes the underlying Power Platform solution behavior rather than an unrelated surface setting. A measurable acceptance result is: The test operation accepts the full account identifier and sends the expected request shape.

Incorrect Answers

B:

Configure the connector's supported Entra OAuth authentication and the Function's corresponding authorization policy. This is a plausible technique for a DIFFERENT requirement: A custom connector must call an Azure Function protected by Microsoft Entra ID but currently uses an anonymous URL. The Eastshore Energy failure described here instead concerns A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. That choice does not establish the required correction; the acceptance result must be: The test operation accepts the full account identifier and sends the expected request shape.

C:

Configure the supported OAuth authorization endpoint, redirect URI and minimum scopes for the intended environment. This is a plausible technique for a DIFFERENT requirement: A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. The Eastshore Energy failure described here instead concerns A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. That choice does not establish the required correction; the acceptance result must be: The test operation accepts the full account identifier and sends the expected request shape.

D:

Extend the connector OpenAPI document with stable operation IDs, summaries and valid response schemas. This is a plausible technique for a DIFFERENT requirement: A legacy service's OpenAPI file exposes no operation identifiers and imported actions appear with ambiguous names. The Eastshore Energy failure described here instead concerns A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. That choice does not establish the required correction; the acceptance result must be: The test operation accepts the full account identifier and sends the expected request shape.

Question 676

At Eastshore Energy, the remote operations team is implementing a maintenance platform rollout under requirements for reliable cross-region event processing. The team says the following incident was fixed: A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. Which result BEST proves the intended fix is effective?

  1. Authorized connector requests reach the function while anonymous and wrong-scope requests are denied.
  2. The test operation accepts the full account identifier and sends the expected request shape.
  3. Maker interfaces display distinct well-typed actions and the intended operation is callable.
  4. A second authorized user completes sign-in and invokes the service without using the maker's identity.

Explanation

Correct Answer

B:

The test operation accepts the full account identifier and sends the expected request shape. This directly tests whether the reported failure has been corrected: A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. The intended action was Correct the OpenAPI parameter type and schema before regenerating connector operations. The observed Eastshore Energy outcome is stronger evidence than a completed ticket or a saved configuration alone.

Incorrect Answers

A:

Authorized connector requests reach the function while anonymous and wrong-scope requests are denied. Such evidence would validate a different change: A custom connector must call an Azure Function protected by Microsoft Entra ID but currently uses an anonymous URL. It follows the separate remedy Configure the connector's supported Entra OAuth authentication and the Function's corresponding authorization policy. The Eastshore Energy scenario instead reports A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. The decisive observation must be: The test operation accepts the full account identifier and sends the expected request shape.

C:

Maker interfaces display distinct well-typed actions and the intended operation is callable. Such evidence would validate a different change: A legacy service's OpenAPI file exposes no operation identifiers and imported actions appear with ambiguous names. It follows the separate remedy Extend the connector OpenAPI document with stable operation IDs, summaries and valid response schemas. The Eastshore Energy scenario instead reports A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. The decisive observation must be: The test operation accepts the full account identifier and sends the expected request shape.

D:

A second authorized user completes sign-in and invokes the service without using the maker's identity. Such evidence would validate a different change: A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. It follows the separate remedy Configure the supported OAuth authorization endpoint, redirect URI and minimum scopes for the intended environment. The Eastshore Energy scenario instead reports A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. The decisive observation must be: The test operation accepts the full account identifier and sends the expected request shape.

Question 677

At Maplewood Schools, the education applications team is implementing a parent services portal under requirements for limited learner information disclosure. The architecture review finds: A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. Which change BEST resolves this specific problem?

  1. Configure the supported OAuth authorization endpoint, redirect URI and minimum scopes for the intended environment.
  2. Extend the connector OpenAPI document with stable operation IDs, summaries and valid response schemas.
  3. Version and review the OpenAPI contract, test backward compatibility and deploy managed connector updates.
  4. Transform the response through a supported connector code/policy or corrected API contract and validate the shape.

Explanation

Correct Answer

A:

Configure the supported OAuth authorization endpoint, redirect URI and minimum scopes for the intended environment. This specifically addresses A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. For Maplewood Schools, the design decision changes the underlying Power Platform solution behavior rather than an unrelated surface setting. A measurable acceptance result is: A second authorized user completes sign-in and invokes the service without using the maker's identity.

Incorrect Answers

B:

Extend the connector OpenAPI document with stable operation IDs, summaries and valid response schemas. This is a plausible technique for a DIFFERENT requirement: A legacy service's OpenAPI file exposes no operation identifiers and imported actions appear with ambiguous names. The Maplewood Schools failure described here instead concerns A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. That choice does not establish the required correction; the acceptance result must be: A second authorized user completes sign-in and invokes the service without using the maker's identity.

C:

Version and review the OpenAPI contract, test backward compatibility and deploy managed connector updates. This is a plausible technique for a DIFFERENT requirement: A GitHub-hosted OpenAPI definition is imported once and future service changes silently break existing connector actions. The Maplewood Schools failure described here instead concerns A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. That choice does not establish the required correction; the acceptance result must be: A second authorized user completes sign-in and invokes the service without using the maker's identity.

D:

Transform the response through a supported connector code/policy or corrected API contract and validate the shape. This is a plausible technique for a DIFFERENT requirement: A backend API returns a nested response that violates the custom connector's documented result schema. The Maplewood Schools failure described here instead concerns A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. That choice does not establish the required correction; the acceptance result must be: A second authorized user completes sign-in and invokes the service without using the maker's identity.

Question 678

At Maplewood Schools, the education applications team is implementing a parent services portal under requirements for limited learner information disclosure. After the proposed change, the release reviewer requires evidence for: A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. Which result BEST proves the intended fix is effective?

  1. The test operation accepts the full account identifier and sends the expected request shape.
  2. Maker interfaces display distinct well-typed actions and the intended operation is callable.
  3. A second authorized user completes sign-in and invokes the service without using the maker's identity.
  4. The connector action response contains required fields but excludes the confidential fields in every tested call.

Explanation

Correct Answer

C:

A second authorized user completes sign-in and invokes the service without using the maker's identity. This directly tests whether the reported failure has been corrected: A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. The intended action was Configure the supported OAuth authorization endpoint, redirect URI and minimum scopes for the intended environment. The observed Maplewood Schools outcome is stronger evidence than a completed ticket or a saved configuration alone.

Incorrect Answers

A:

The test operation accepts the full account identifier and sends the expected request shape. Such evidence would validate a different change: A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. It follows the separate remedy Correct the OpenAPI parameter type and schema before regenerating connector operations. The Maplewood Schools scenario instead reports A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. The decisive observation must be: A second authorized user completes sign-in and invokes the service without using the maker's identity.

B:

Maker interfaces display distinct well-typed actions and the intended operation is callable. Such evidence would validate a different change: A legacy service's OpenAPI file exposes no operation identifiers and imported actions appear with ambiguous names. It follows the separate remedy Extend the connector OpenAPI document with stable operation IDs, summaries and valid response schemas. The Maplewood Schools scenario instead reports A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. The decisive observation must be: A second authorized user completes sign-in and invokes the service without using the maker's identity.

D:

The connector action response contains required fields but excludes the confidential fields in every tested call. Such evidence would validate a different change: A connector response includes confidential fields that the client does not need and its body must be sanitized consistently. It follows the separate remedy Apply a supported connector policy or backend transformation that removes the forbidden fields before returning the response. The Maplewood Schools scenario instead reports A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. The decisive observation must be: A second authorized user completes sign-in and invokes the service without using the maker's identity.

Question 679

At Brookside Manufacturing, the plant software team is implementing a work-order system upgrade under requirements for planned downtime and production traceability. During the implementation check, developers discover: A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. Which change BEST resolves this specific problem?

  1. Version and review the OpenAPI contract, test backward compatibility and deploy managed connector updates.
  2. Correct the OpenAPI parameter type and schema before regenerating connector operations.
  3. Configure the connector's supported Entra OAuth authentication and the Function's corresponding authorization policy.
  4. Configure the supported OAuth authorization endpoint, redirect URI and minimum scopes for the intended environment.

Explanation

Correct Answer

D:

Configure the supported OAuth authorization endpoint, redirect URI and minimum scopes for the intended environment. This specifically addresses A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. For Brookside Manufacturing, the design decision changes the underlying Power Platform solution behavior rather than an unrelated surface setting. A measurable acceptance result is: A second authorized user completes sign-in and invokes the service without using the maker's identity.

Incorrect Answers

A:

Version and review the OpenAPI contract, test backward compatibility and deploy managed connector updates. This is a plausible technique for a DIFFERENT requirement: A GitHub-hosted OpenAPI definition is imported once and future service changes silently break existing connector actions. The Brookside Manufacturing failure described here instead concerns A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. That choice does not establish the required correction; the acceptance result must be: A second authorized user completes sign-in and invokes the service without using the maker's identity.

B:

Correct the OpenAPI parameter type and schema before regenerating connector operations. This is a plausible technique for a DIFFERENT requirement: A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. The Brookside Manufacturing failure described here instead concerns A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. That choice does not establish the required correction; the acceptance result must be: A second authorized user completes sign-in and invokes the service without using the maker's identity.

C:

Configure the connector's supported Entra OAuth authentication and the Function's corresponding authorization policy. This is a plausible technique for a DIFFERENT requirement: A custom connector must call an Azure Function protected by Microsoft Entra ID but currently uses an anonymous URL. The Brookside Manufacturing failure described here instead concerns A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. That choice does not establish the required correction; the acceptance result must be: A second authorized user completes sign-in and invokes the service without using the maker's identity.

Question 680

At Brookside Manufacturing, the plant software team is implementing a work-order system upgrade under requirements for planned downtime and production traceability. The team says the following incident was fixed: A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. Which result BEST proves the intended fix is effective?

  1. Maker interfaces display distinct well-typed actions and the intended operation is callable.
  2. A second authorized user completes sign-in and invokes the service without using the maker's identity.
  3. Authorized connector requests reach the function while anonymous and wrong-scope requests are denied.
  4. The test operation accepts the full account identifier and sends the expected request shape.

Explanation

Correct Answer

B:

A second authorized user completes sign-in and invokes the service without using the maker's identity. This directly tests whether the reported failure has been corrected: A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. The intended action was Configure the supported OAuth authorization endpoint, redirect URI and minimum scopes for the intended environment. The observed Brookside Manufacturing outcome is stronger evidence than a completed ticket or a saved configuration alone.

Incorrect Answers

A:

Maker interfaces display distinct well-typed actions and the intended operation is callable. Such evidence would validate a different change: A legacy service's OpenAPI file exposes no operation identifiers and imported actions appear with ambiguous names. It follows the separate remedy Extend the connector OpenAPI document with stable operation IDs, summaries and valid response schemas. The Brookside Manufacturing scenario instead reports A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. The decisive observation must be: A second authorized user completes sign-in and invokes the service without using the maker's identity.

C:

Authorized connector requests reach the function while anonymous and wrong-scope requests are denied. Such evidence would validate a different change: A custom connector must call an Azure Function protected by Microsoft Entra ID but currently uses an anonymous URL. It follows the separate remedy Configure the connector's supported Entra OAuth authentication and the Function's corresponding authorization policy. The Brookside Manufacturing scenario instead reports A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. The decisive observation must be: A second authorized user completes sign-in and invokes the service without using the maker's identity.

D:

The test operation accepts the full account identifier and sends the expected request shape. Such evidence would validate a different change: A custom connector's imported OpenAPI definition declares an integer account ID although the service requires an opaque string. It follows the separate remedy Correct the OpenAPI parameter type and schema before regenerating connector operations. The Brookside Manufacturing scenario instead reports A custom connector works only for one maker because its OAuth redirect URI and scope are hard-coded for a personal test tenant. The decisive observation must be: A second authorized user completes sign-in and invokes the service without using the maker's identity.