MENDIX ADVANCED REVISION EXAM TEST 2025/2026
QUESTIONS WITH SOLUTIONS GRADED A+
✔✔Which of the following statements is NOT an XPath best practice with regards to
optimal performance? - ✔✔Do not use XPath when you can use SQL instead.
✔✔Consider a situation in which there is an entity called Request with an attribute
status that has three values: Draft, Submitted, and Approved. There are three user
roles: Administrator, Customer, and Employee. The Customer user role is granted the
Customer module role. The only access rule configured is read/write access for the
Customer with the XPath [Status = Draft] applied. What would a user with the Customer
user role see on a page with a data grid without any additional XPath constraints? -
✔✔All the requests in the Draft status.
✔✔Consider the exact same situation as above. What would Admin users see? - ✔✔No
results would be returned.
✔✔Consider the same situation again. What would happen if you granted Admin users
access to a page with the Request entity in Studio Pro? - ✔✔Studio Pro would detect an
error and prevent a deployment.
✔✔How does the platform use entity access XPaths to enforce security? - ✔✔The
XPaths are added to all the relevant database retrieves.
✔✔Where are entity access restrictions applied? - ✔✔On relevant database retrieves.
✔✔Which of the following best describes how the Mendix platform applies entity
access? - ✔✔The platform only grants the access explicitly defined in the entity access
rules.
✔✔In this domain model, assume that House is a specialization of Building: - ✔✔Admin
users will be able to read the SquareFoot attribute in data views for Buildings and read
and write in data views for Houses.
✔✔Referring to the same domain model as was used in question #2, if we create a
page with a data grid containing Houses and autogenerate a House_NewEdit page,
which of the following statements is FALSE for an Admin user? - ✔✔Admin users will
not see the SquareFoot attribute in the Edit page.
✔✔Why is it more secure to add security rules on the entity level? - ✔✔Entity level
restrictions are applied at the database level and are thus automatically applied
throughout the application.
, ✔✔For the following questions, assume there is an app with three user roles:
Administrator, Teacher, and Student. Administrators are granted the ability to manage
all user roles, and Teachers can manage users with the Student role. Which of the
following statements is false? - ✔✔Administrators and teachers can create teacher
accounts.
✔✔Let's say you want Teachers to be able to manage accounts for Students, but only
the Students who are in their class. So, you grant Teachers the ability to manage users
with the Student role in the app security menu. Will this be sufficient? - ✔✔No, because
teachers will have the ability to edit the accounts of any Student, not just their own.
✔✔What is a benefit of assigning only one user role to each user? - ✔✔Simplicity
✔✔Which operation can be used to select a specific set of rows in a table? -
✔✔Selection
✔✔The Set Union operation combines two lists into one that contains: - ✔✔one version
of the objects from both lists
✔✔What operation combines the data from two different entities into one table? -
✔✔Cartesian product
✔✔What does the Projection operation do? - ✔✔It allows you to select attributes for all
objects.
Re-take Knowledge CheckNext
✔✔What can you use a constrain function for? - ✔✔To filter on strings and dates in
XPath queries.
✔✔Which of the queries below can be used to filter on dates two weekso in the past? -
✔✔[%BeginOfCurrentDay%] - 2 * [%WeekLength%]
✔✔One of your XPath queries that use the contains() function is not performing very
well. What is the most likely root cause? - ✔✔You are using the function on a string that
is set to 'unlimited'.
✔✔When using the 'and' operator: - ✔✔The 'and' operator will give a different result
based on how you write the XPath query.
✔✔The not() function: - ✔✔Generates a slow query.
QUESTIONS WITH SOLUTIONS GRADED A+
✔✔Which of the following statements is NOT an XPath best practice with regards to
optimal performance? - ✔✔Do not use XPath when you can use SQL instead.
✔✔Consider a situation in which there is an entity called Request with an attribute
status that has three values: Draft, Submitted, and Approved. There are three user
roles: Administrator, Customer, and Employee. The Customer user role is granted the
Customer module role. The only access rule configured is read/write access for the
Customer with the XPath [Status = Draft] applied. What would a user with the Customer
user role see on a page with a data grid without any additional XPath constraints? -
✔✔All the requests in the Draft status.
✔✔Consider the exact same situation as above. What would Admin users see? - ✔✔No
results would be returned.
✔✔Consider the same situation again. What would happen if you granted Admin users
access to a page with the Request entity in Studio Pro? - ✔✔Studio Pro would detect an
error and prevent a deployment.
✔✔How does the platform use entity access XPaths to enforce security? - ✔✔The
XPaths are added to all the relevant database retrieves.
✔✔Where are entity access restrictions applied? - ✔✔On relevant database retrieves.
✔✔Which of the following best describes how the Mendix platform applies entity
access? - ✔✔The platform only grants the access explicitly defined in the entity access
rules.
✔✔In this domain model, assume that House is a specialization of Building: - ✔✔Admin
users will be able to read the SquareFoot attribute in data views for Buildings and read
and write in data views for Houses.
✔✔Referring to the same domain model as was used in question #2, if we create a
page with a data grid containing Houses and autogenerate a House_NewEdit page,
which of the following statements is FALSE for an Admin user? - ✔✔Admin users will
not see the SquareFoot attribute in the Edit page.
✔✔Why is it more secure to add security rules on the entity level? - ✔✔Entity level
restrictions are applied at the database level and are thus automatically applied
throughout the application.
, ✔✔For the following questions, assume there is an app with three user roles:
Administrator, Teacher, and Student. Administrators are granted the ability to manage
all user roles, and Teachers can manage users with the Student role. Which of the
following statements is false? - ✔✔Administrators and teachers can create teacher
accounts.
✔✔Let's say you want Teachers to be able to manage accounts for Students, but only
the Students who are in their class. So, you grant Teachers the ability to manage users
with the Student role in the app security menu. Will this be sufficient? - ✔✔No, because
teachers will have the ability to edit the accounts of any Student, not just their own.
✔✔What is a benefit of assigning only one user role to each user? - ✔✔Simplicity
✔✔Which operation can be used to select a specific set of rows in a table? -
✔✔Selection
✔✔The Set Union operation combines two lists into one that contains: - ✔✔one version
of the objects from both lists
✔✔What operation combines the data from two different entities into one table? -
✔✔Cartesian product
✔✔What does the Projection operation do? - ✔✔It allows you to select attributes for all
objects.
Re-take Knowledge CheckNext
✔✔What can you use a constrain function for? - ✔✔To filter on strings and dates in
XPath queries.
✔✔Which of the queries below can be used to filter on dates two weekso in the past? -
✔✔[%BeginOfCurrentDay%] - 2 * [%WeekLength%]
✔✔One of your XPath queries that use the contains() function is not performing very
well. What is the most likely root cause? - ✔✔You are using the function on a string that
is set to 'unlimited'.
✔✔When using the 'and' operator: - ✔✔The 'and' operator will give a different result
based on how you write the XPath query.
✔✔The not() function: - ✔✔Generates a slow query.
