問題文
An auditor asks how the organization ensures representatives cannot read data they should not, given that some tools are hidden from their screen. What is the correct framing?
選択肢
- The origins allow list restricts which data can be read, so maintaining that list is how the organization demonstrates control to the auditor.
- Hiding a tool prevents the underlying data from being retrieved at all, so the experience profile is sufficient evidence for the auditor and no role review is needed.
- Hiding a tool in the experience profile is not a permission boundary; data access is governed by security roles and table privileges, and for knowledge articles the Dataverse security boundary is the environment.
- Capacity profiles with assignment blocking prevent data access outside the work that has been assigned, so a representative can only read the records they were given.