Question 260
A developer proposes this approach: Impersonate representative authorized and unauthorized users in a safe test instance. Which business requirement is the strongest reason to choose it?
Explanation
Correct Answer
This business need directly motivates Impersonate representative authorized and unauthorized users in a safe test instance; User-perspective testing detects access paths hidden by broad administrator privileges.
Incorrect Answers
The described situation is better addressed by Enforce read and write ACLs on the finance table and fields in addition to hiding navigation. A hidden module is not a security boundary for direct URLs, APIs or scripts.
The described situation is better addressed by Audit and remove unnecessary role grants using approved access governance. Periodic entitlement review reduces the number of users able to modify application data.
The described situation is better addressed by Give the integration identity a narrowly scoped role with tested create permissions. A least-privilege integration role limits possible misuse if its credentials are compromised.