Chapter 8

1. Answer: A - Share the app. When you share an app, you are asked to select one or more security roles for the app. 
2. Answer: B - Accounts in their business unit only. As the access level is a business unit, it doesn't matter which business unit the user is in, they will only see records that are in their business unit.
3. Answer: D - Parent-Child Business Unit. The user has the least restrictive access level.
4. Answer: D - Share the app and select the appropriate security role.
5. Answer: B - Reflect the highest level of access.
6. Answer: B - Business unit. If you add a security role and then change the business unit, all security roles are removed.
7. Answer: C - Azure Active Directory.