You design a data security strategy for a university department. The student recruitment department engages student workers to call prospective students using the Power Platform solution. But the department does not want student workers to have access to the prospective student`s high school diploma score (GPA). Only department staff can view this information. 
Please select three steps that you would take to implement this requirement.

Answer options:

A.Add GPA column to the security profile Staff with “Yes” to Allow Read permission
B.Create a field security profile Workers and add the student workers as the profile members
C.Add GPA column to the security profile Staff with “Yes” to Allow Update permission
D.Create a field security profile Staff and add the department staff as the profile members
E.Add GPA column to the security profile Workers with “No” to Allow Read permission
F.Enable column security for GPA column
G.Add GPA column to the security profile Workers with “No” to Allow Update permission

Correct Answers: A, D and F 
Dataverse provides column (field) security level on a column-by-column basis for all custom and most system columns. 
Column-level security gives users more granularity. It has a global scope. You need to be cautious about using this feature. You can enable record-level security on the table level. If you enable the column-level of security, it will override the record or table levels for this column. The field will be visible on the app`s screen and marked as secured with the stars for the field value and a lock sign on the field`s side. The field would return the null value in your app.
For management simplification, Dataverse groups the secured column (field) permissions into a profile. Only admin and members of a Field Security Profile can see the column value. A system administrator can grant access to the profiles to specific users or teams. 
Suppose you need to secure access to the column (GPA) for one group, e.g., department staff. First, you need to enable column security for the GPA. Then, you create a Field security profile for the department staff. And, finally, add the GPA field permission for Allow Read with "Yes" to the security profile.
Option A is correct because you need to add the GPA column to the security profile Staff with “Yes” to Allow Read permission.
Option D is correct because you need to create a security profile Staff and add the department staff as the profile members.
Option F is correct because you need to enable column security for the GPA column.
All other options are incorrect because after column security for the GPA column is enabled, only the administrator can access this column. Therefore, you do not need to create a security profile for the student workers because they are already locked out from column access. 
For more information about Dataverse field-level (column-level) security, please visit the below URLs: 

https://docs.microsoft.com/en-us/learn/modules/model-security/4-dataverse
https://docs.microsoft.com/en-us/power-platform/admin/wp-security-cds#field-level-security-in-dataverse
https://docs.microsoft.com/en-us/power-platform/admin/field-level-security