Practice questions

Certification code: HSA
Price: $300 USD
Exam: 60 questions · 90 minutes
Pass mark: 70%

Enterprise Architecture and Platform Strategy · 0/6 Data Architecture and Integration · 0/6 Security, Privacy and Governance · 0/6 Scalability, Reliability and Performance · 0/6 AI Architecture and Intelligent Operations · 0/6 Cross-Suite Architecture and Technical Leadership · 0/6

Practice questions

Security, Privacy and Governance

Practice questions are written for study and are never used in the exam.

Practice score: 0/6 · Practice questions answered: 0/6

Enrol to open the full lessons and practice questions. Overview

Identity and Authorization

Company website

Question

A user signs in with a valid Microsoft token from the correct tenant, but their email is not in the tenant User Directory. What happens?

They receive the default Dispatcher role They receive a role based on their Microsoft job title They receive read-only access to every section No Helios role is granted until the exact email is provisioned in the directory

Company website

Question

A customer on Entra Free wants to rely on Conditional Access to enforce MFA for Helios. What should the architect tell them?

Conditional Access needs Entra ID P1; until then Helios itself rejects tokens that do not prove MFA Conditional Access is required for Helios sign-in to work at all Helios skips the MFA check on the Free tier MFA can only be enforced by switching to passwordless email

Data Protection and Compliance

Company website

Question

Which audit record design best supports an investigation of a sensitive configuration change?

A running counter of how many changes occurred each day Tenant-scoped entries that record the actor, the action, the time and the reason Browser console output saved by the administrator A summary shown on screen that is overwritten by the next change

Company website

Question

A client's isolated AI workspace contains a useful solution pattern. Can it be added to Cold Sun's reusable knowledge?

Yes, automatically when the project closes Yes, as soon as the client name is removed by the project team Only after explicit review and approval No, under no circumstances

Secure Operations and Threat Modeling

Company website

Question

A test shows that a signed-in user can read another tenant's work order by changing an id in the request. Which fix addresses the root cause?

Check on the server, using the tenant and role from the session, that the record belongs to the caller's tenant on every read Hide the id field in the browser screen Lengthen the ids so they are harder to guess Ask the browser to send the tenant name with each request

Company website

Question

A developer needs a provider key to test an integration. Where may it be stored?

In the repository, in a file that is excluded from builds In the browser's local storage for convenience In the request payload that the screen sends to the server Only in the hosting secret store, read by the server

Helios Solution Architect

Security, Privacy and Governance

Identity and Authorization

Data Protection and Compliance

Secure Operations and Threat Modeling