Pass Your Microsoft MB-820 Exam Easy!

Microsoft MB-820 Exam Questions & Answers, Accurate & Verified By IT Experts

Instant Download, Free Fast Updates, 99.6% Pass Rate

MB-820 Premium Bundle

$74.99

Microsoft MB-820 Premium Bundle

MB-820 Premium File: 131 Questions & Answers

Last Update: Oct 12, 2026

MB-820 PDF Study Guide: 948 Pages

MB-820 Bundle gives you unlimited access to "MB-820" files. However, this does not replace the need for a .vce exam simulator. To download VCE exam simulator click here
Microsoft MB-820 Premium Bundle
Microsoft MB-820 Premium Bundle

MB-820 Premium File: 131 Questions & Answers

Last Update: Oct 12, 2026

MB-820 PDF Study Guide: 948 Pages

$74.99

MB-820 Bundle gives you unlimited access to "MB-820" files. However, this does not replace the need for a .vce exam simulator. To download your .vce exam simulator click here

Microsoft MB-820 Practice Test 75

Question 740

An AL HttpClient integration already exchanges requests and responses with an external supplier, but it treats HTTP 429 or 503 responses as success during peak traffic. A targeted trial still reproduces the original gap after the team attempted this change: Inspect HTTP status and response body before declaring the exchange successful. Which repair directly addresses the remaining defect?

  1. Correct the content headers and body serialization then replay a representative request
  2. Remove logged secrets, rotate compromised credentials and move authentication into protected request headers
  3. Correct the request construction or outbound-call permission and inspect response status/content on failure
  4. Add explicit success-status checks and suitable retry or failure handling for the returned response

Explanation

Correct Answer

D:

Add explicit success-status checks and suitable retry or failure handling for the returned response. This directly addresses the remaining defect for the requirement—An AL HttpClient integration already exchanges requests and responses with an external supplier, but it treats HTTP 429 or 503 responses as success during peak traffic. It restores the mechanism described here: transport completion does not imply application success; the status code and body determine whether the remote operation succeeded.

Incorrect Answers

A:

This correction is for the separate condition: A warehouse connector posts text data to a service that requires a precise HTTP content type and encoding. It would not directly restore the intended behavior in this situation: An AL HttpClient integration already exchanges requests and responses with an external supplier, but it treats HTTP 429 or 503 responses as success during peak traffic. Here, add explicit success-status checks and suitable retry or failure handling for the returned response, because transport completion does not imply application success; the status code and body determine whether the remote operation succeeded.

B:

This correction is for the separate condition: A supplier sync process risks logging live access tokens when the remote service returns an error. It would not directly restore the intended behavior in this situation: An AL HttpClient integration already exchanges requests and responses with an external supplier, but it treats HTTP 429 or 503 responses as success during peak traffic. Here, add explicit success-status checks and suitable retry or failure handling for the returned response, because transport completion does not imply application success; the status code and body determine whether the remote operation succeeded.

C:

This correction is for the separate condition: A tax extension must submit a structured request to an authorized external tax engine and read its response. It would not directly restore the intended behavior in this situation: An AL HttpClient integration already exchanges requests and responses with an external supplier, but it treats HTTP 429 or 503 responses as success during peak traffic. Here, add explicit success-status checks and suitable retry or failure handling for the returned response, because transport completion does not imply application success; the status code and body determine whether the remote operation succeeded.

Question 741

An AL HttpClient integration already receives a 400 validation response from the tax service but still records the local order as synchronized. Which single AL development or architecture change best resolves this requirement without redesigning unrelated workflows?

  1. Set appropriate HttpContent headers and serialize the payload to the service's media-type contract
  2. Inspect HTTP status and response body before declaring the exchange successful
  3. Keep sensitive credentials in secured configuration and scrub diagnostics around outbound HTTP
  4. Use AL HttpClient with an authorized external endpoint and process the HttpResponseMessage

Explanation

Correct Answer

B:

This targets the concrete requirement—An AL HttpClient integration already receives a 400 validation response from the tax service but still records the local order as synchronized. Transport completion does not imply application success; the status code and body determine whether the remote operation succeeded. The team can establish success when simulated 2xx and error responses follow distinct success, retry or compensating paths without false synchronization.

Incorrect Answers

A:

This choice primarily fits a different requirement: A partner submits JSON to an endpoint that expects application/json but the server rejects the body as an unknown media type. There, http content headers describe the request body representation separately from general request or authentication headers. In the current situation, An AL HttpClient integration already receives a 400 validation response from the tax service but still records the local order as synchronized. Transport completion does not imply application success; the status code and body determine whether the remote operation succeeded. Acceptance requires simulated 2xx and error responses follow distinct success, retry or compensating paths without false synchronization.

C:

This choice primarily fits a different requirement: A transaction uses an external REST call and must not expose customer secrets in URLs or diagnostic telemetry. There, secure integration design limits credential exposure in query strings, published source and support traces. In the current situation, An AL HttpClient integration already receives a 400 validation response from the tax service but still records the local order as synchronized. Transport completion does not imply application success; the status code and body determine whether the remote operation succeeded. Acceptance requires simulated 2xx and error responses follow distinct success, retry or compensating paths without false synchronization.

D:

This choice primarily fits a different requirement: A Business Central extension must call an external shipping service over HTTPS to retrieve current tracking status. There, httpclient enables outbound http exchanges through supported apis rather than direct database or host-level integration. In the current situation, An AL HttpClient integration already receives a 400 validation response from the tax service but still records the local order as synchronized. Transport completion does not imply application success; the status code and body determine whether the remote operation succeeded. Acceptance requires simulated 2xx and error responses follow distinct success, retry or compensating paths without false synchronization.

Question 742

An AL HttpClient integration already receives a 400 validation response from the tax service but still records the local order as synchronized. The developer recommends the following change: Inspect HTTP status and response body before declaring the exchange successful. Which technical explanation most directly justifies it in this case?

  1. HTTP content headers describe the request body representation separately from general request or authentication headers
  2. Secure integration design limits credential exposure in query strings, published source and support traces
  3. Transport completion does not imply application success; the status code and body determine whether the remote operation succeeded
  4. HttpClient enables outbound HTTP exchanges through supported APIs rather than direct database or host-level integration

Explanation

Correct Answer

C:

Transport completion does not imply application success; the status code and body determine whether the remote operation succeeded. It connects the proposed action to the exact failure or requirement—An AL HttpClient integration already receives a 400 validation response from the tax service but still records the local order as synchronized. Confirmation would be simulated 2xx and error responses follow distinct success, retry or compensating paths without false synchronization.

Incorrect Answers

A:

That mechanism explains why the alternative action—set appropriate httpcontent headers and serialize the payload to the service's media-type contract—helps in another case. It does not justify the proposed fix here; transport completion does not imply application success; the status code and body determine whether the remote operation succeeded. The distinguishing requirement is: An AL HttpClient integration already receives a 400 validation response from the tax service but still records the local order as synchronized.

B:

That mechanism explains why the alternative action—keep sensitive credentials in secured configuration and scrub diagnostics around outbound http—helps in another case. It does not justify the proposed fix here; transport completion does not imply application success; the status code and body determine whether the remote operation succeeded. The distinguishing requirement is: An AL HttpClient integration already receives a 400 validation response from the tax service but still records the local order as synchronized.

D:

That mechanism explains why the alternative action—use al httpclient with an authorized external endpoint and process the httpresponsemessage—helps in another case. It does not justify the proposed fix here; transport completion does not imply application success; the status code and body determine whether the remote operation succeeded. The distinguishing requirement is: An AL HttpClient integration already receives a 400 validation response from the tax service but still records the local order as synchronized.

Question 743

An AL HttpClient integration already receives a 400 validation response from the tax service but still records the local order as synchronized. The team implemented a change aligned with this plan: Inspect HTTP status and response body before declaring the exchange successful. Which acceptance result specifically verifies that the reported problem is resolved?

  1. The remote API accepts the payload and parses the intended JSON fields with no media-type rejection
  2. Logs and captured HTTP diagnostics contain no bearer tokens while authorized requests still succeed
  3. The intended service receives the request and a success/error response is handled and logged appropriately
  4. Simulated 2xx and error responses follow distinct success, retry or compensating paths without false synchronization

Explanation

Correct Answer

D:

Simulated 2xx and error responses follow distinct success, retry or compensating paths without false synchronization. This is stronger than an unrelated health check because the desired design action is inspect http status and response body before declaring the exchange successful, and transport completion does not imply application success; the status code and body determine whether the remote operation succeeded. The local requirement is: An AL HttpClient integration already receives a 400 validation response from the tax service but still records the local order as synchronized.

Incorrect Answers

A:

This would verify set appropriate httpcontent headers and serialize the payload to the service's media-type contract, which addresses a different engineering need. It does not demonstrate that the current issue is resolved: An AL HttpClient integration already receives a 400 validation response from the tax service but still records the local order as synchronized. The decisive local proof is simulated 2xx and error responses follow distinct success, retry or compensating paths without false synchronization.

B:

This would verify keep sensitive credentials in secured configuration and scrub diagnostics around outbound http, which addresses a different engineering need. It does not demonstrate that the current issue is resolved: An AL HttpClient integration already receives a 400 validation response from the tax service but still records the local order as synchronized. The decisive local proof is simulated 2xx and error responses follow distinct success, retry or compensating paths without false synchronization.

C:

This would verify use al httpclient with an authorized external endpoint and process the httpresponsemessage, which addresses a different engineering need. It does not demonstrate that the current issue is resolved: An AL HttpClient integration already receives a 400 validation response from the tax service but still records the local order as synchronized. The decisive local proof is simulated 2xx and error responses follow distinct success, retry or compensating paths without false synchronization.

Question 744

An AL HttpClient integration already receives a 400 validation response from the tax service but still records the local order as synchronized. A targeted trial still reproduces the original gap after the team attempted this change: Inspect HTTP status and response body before declaring the exchange successful. Which repair directly addresses the remaining defect?

  1. Add explicit success-status checks and suitable retry or failure handling for the returned response
  2. Correct the content headers and body serialization then replay a representative request
  3. Remove logged secrets, rotate compromised credentials and move authentication into protected request headers
  4. Correct the request construction or outbound-call permission and inspect response status/content on failure

Explanation

Correct Answer

A:

Add explicit success-status checks and suitable retry or failure handling for the returned response. This directly addresses the remaining defect for the requirement—An AL HttpClient integration already receives a 400 validation response from the tax service but still records the local order as synchronized. It restores the mechanism described here: transport completion does not imply application success; the status code and body determine whether the remote operation succeeded.

Incorrect Answers

B:

This correction is for the separate condition: A warehouse connector posts text data to a service that requires a precise HTTP content type and encoding. It would not directly restore the intended behavior in this situation: An AL HttpClient integration already receives a 400 validation response from the tax service but still records the local order as synchronized. Here, add explicit success-status checks and suitable retry or failure handling for the returned response, because transport completion does not imply application success; the status code and body determine whether the remote operation succeeded.

C:

This correction is for the separate condition: A supplier sync process risks logging live access tokens when the remote service returns an error. It would not directly restore the intended behavior in this situation: An AL HttpClient integration already receives a 400 validation response from the tax service but still records the local order as synchronized. Here, add explicit success-status checks and suitable retry or failure handling for the returned response, because transport completion does not imply application success; the status code and body determine whether the remote operation succeeded.

D:

This correction is for the separate condition: A tax extension must submit a structured request to an authorized external tax engine and read its response. It would not directly restore the intended behavior in this situation: An AL HttpClient integration already receives a 400 validation response from the tax service but still records the local order as synchronized. Here, add explicit success-status checks and suitable retry or failure handling for the returned response, because transport completion does not imply application success; the status code and body determine whether the remote operation succeeded.

Question 745

A partner submits JSON to an endpoint that expects application/json but the server rejects the body as an unknown media type. Which single AL development or architecture change best resolves this requirement without redesigning unrelated workflows?

  1. Keep sensitive credentials in secured configuration and scrub diagnostics around outbound HTTP
  2. Use AL HttpClient with an authorized external endpoint and process the HttpResponseMessage
  3. Set appropriate HttpContent headers and serialize the payload to the service's media-type contract
  4. Attach the required authentication header to the outbound HttpRequestMessage or HttpClient request

Explanation

Correct Answer

C:

This targets the concrete requirement—A partner submits JSON to an endpoint that expects application/json but the server rejects the body as an unknown media type. HTTP content headers describe the request body representation separately from general request or authentication headers. The team can establish success when the remote api accepts the payload and parses the intended json fields with no media-type rejection.

Incorrect Answers

A:

This choice primarily fits a different requirement: A transaction uses an external REST call and must not expose customer secrets in URLs or diagnostic telemetry. There, secure integration design limits credential exposure in query strings, published source and support traces. In the current situation, A partner submits JSON to an endpoint that expects application/json but the server rejects the body as an unknown media type. HTTP content headers describe the request body representation separately from general request or authentication headers. Acceptance requires the remote api accepts the payload and parses the intended json fields with no media-type rejection.

B:

This choice primarily fits a different requirement: A Business Central extension must call an external shipping service over HTTPS to retrieve current tracking status. There, httpclient enables outbound http exchanges through supported apis rather than direct database or host-level integration. In the current situation, A partner submits JSON to an endpoint that expects application/json but the server rejects the body as an unknown media type. HTTP content headers describe the request body representation separately from general request or authentication headers. Acceptance requires the remote api accepts the payload and parses the intended json fields with no media-type rejection.

D:

This choice primarily fits a different requirement: An external carrier API requires a bearer token on every outbound request from the Business Central extension. There, http authentication headers convey credentials according to the external service's contract rather than as unprotected url query text. In the current situation, A partner submits JSON to an endpoint that expects application/json but the server rejects the body as an unknown media type. HTTP content headers describe the request body representation separately from general request or authentication headers. Acceptance requires the remote api accepts the payload and parses the intended json fields with no media-type rejection.

Question 746

A partner submits JSON to an endpoint that expects application/json but the server rejects the body as an unknown media type. The developer recommends the following change: Set appropriate HttpContent headers and serialize the payload to the service's media-type contract. Which technical explanation most directly justifies it in this case?

  1. Secure integration design limits credential exposure in query strings, published source and support traces
  2. HttpClient enables outbound HTTP exchanges through supported APIs rather than direct database or host-level integration
  3. HTTP authentication headers convey credentials according to the external service's contract rather than as unprotected URL query text
  4. HTTP content headers describe the request body representation separately from general request or authentication headers

Explanation

Correct Answer

D:

HTTP content headers describe the request body representation separately from general request or authentication headers. It connects the proposed action to the exact failure or requirement—A partner submits JSON to an endpoint that expects application/json but the server rejects the body as an unknown media type. Confirmation would be the remote api accepts the payload and parses the intended json fields with no media-type rejection.

Incorrect Answers

A:

That mechanism explains why the alternative action—keep sensitive credentials in secured configuration and scrub diagnostics around outbound http—helps in another case. It does not justify the proposed fix here; http content headers describe the request body representation separately from general request or authentication headers. The distinguishing requirement is: A partner submits JSON to an endpoint that expects application/json but the server rejects the body as an unknown media type.

B:

That mechanism explains why the alternative action—use al httpclient with an authorized external endpoint and process the httpresponsemessage—helps in another case. It does not justify the proposed fix here; http content headers describe the request body representation separately from general request or authentication headers. The distinguishing requirement is: A partner submits JSON to an endpoint that expects application/json but the server rejects the body as an unknown media type.

C:

That mechanism explains why the alternative action—attach the required authentication header to the outbound httprequestmessage or httpclient request—helps in another case. It does not justify the proposed fix here; http content headers describe the request body representation separately from general request or authentication headers. The distinguishing requirement is: A partner submits JSON to an endpoint that expects application/json but the server rejects the body as an unknown media type.

Question 747

A partner submits JSON to an endpoint that expects application/json but the server rejects the body as an unknown media type. The team implemented a change aligned with this plan: Set appropriate HttpContent headers and serialize the payload to the service's media-type contract. Which acceptance result specifically verifies that the reported problem is resolved?

  1. The remote API accepts the payload and parses the intended JSON fields with no media-type rejection
  2. Logs and captured HTTP diagnostics contain no bearer tokens while authorized requests still succeed
  3. The intended service receives the request and a success/error response is handled and logged appropriately
  4. The authorized endpoint accepts the call with a valid credential and rejects a missing or invalid one

Explanation

Correct Answer

A:

The remote API accepts the payload and parses the intended JSON fields with no media-type rejection. This is stronger than an unrelated health check because the desired design action is set appropriate httpcontent headers and serialize the payload to the service's media-type contract, and http content headers describe the request body representation separately from general request or authentication headers. The local requirement is: A partner submits JSON to an endpoint that expects application/json but the server rejects the body as an unknown media type.

Incorrect Answers

B:

This would verify keep sensitive credentials in secured configuration and scrub diagnostics around outbound http, which addresses a different engineering need. It does not demonstrate that the current issue is resolved: A partner submits JSON to an endpoint that expects application/json but the server rejects the body as an unknown media type. The decisive local proof is the remote api accepts the payload and parses the intended json fields with no media-type rejection.

C:

This would verify use al httpclient with an authorized external endpoint and process the httpresponsemessage, which addresses a different engineering need. It does not demonstrate that the current issue is resolved: A partner submits JSON to an endpoint that expects application/json but the server rejects the body as an unknown media type. The decisive local proof is the remote api accepts the payload and parses the intended json fields with no media-type rejection.

D:

This would verify attach the required authentication header to the outbound httprequestmessage or httpclient request, which addresses a different engineering need. It does not demonstrate that the current issue is resolved: A partner submits JSON to an endpoint that expects application/json but the server rejects the body as an unknown media type. The decisive local proof is the remote api accepts the payload and parses the intended json fields with no media-type rejection.

Question 748

A partner submits JSON to an endpoint that expects application/json but the server rejects the body as an unknown media type. A targeted trial still reproduces the original gap after the team attempted this change: Set appropriate HttpContent headers and serialize the payload to the service's media-type contract. Which repair directly addresses the remaining defect?

  1. Remove logged secrets, rotate compromised credentials and move authentication into protected request headers
  2. Correct the content headers and body serialization then replay a representative request
  3. Correct the request construction or outbound-call permission and inspect response status/content on failure
  4. Fix credential retrieval and the Authorization header format without exposing secrets in logs

Explanation

Correct Answer

B:

Correct the content headers and body serialization then replay a representative request. This directly addresses the remaining defect for the requirement—A partner submits JSON to an endpoint that expects application/json but the server rejects the body as an unknown media type. It restores the mechanism described here: http content headers describe the request body representation separately from general request or authentication headers.

Incorrect Answers

A:

This correction is for the separate condition: A supplier sync process risks logging live access tokens when the remote service returns an error. It would not directly restore the intended behavior in this situation: A partner submits JSON to an endpoint that expects application/json but the server rejects the body as an unknown media type. Here, correct the content headers and body serialization then replay a representative request, because http content headers describe the request body representation separately from general request or authentication headers.

C:

This correction is for the separate condition: A tax extension must submit a structured request to an authorized external tax engine and read its response. It would not directly restore the intended behavior in this situation: A partner submits JSON to an endpoint that expects application/json but the server rejects the body as an unknown media type. Here, correct the content headers and body serialization then replay a representative request, because http content headers describe the request body representation separately from general request or authentication headers.

D:

This correction is for the separate condition: A reporting endpoint refuses an AL integration because it is missing its approved API credential header. It would not directly restore the intended behavior in this situation: A partner submits JSON to an endpoint that expects application/json but the server rejects the body as an unknown media type. Here, correct the content headers and body serialization then replay a representative request, because http content headers describe the request body representation separately from general request or authentication headers.

Question 749

A warehouse connector posts text data to a service that requires a precise HTTP content type and encoding. Which single AL development or architecture change best resolves this requirement without redesigning unrelated workflows?

  1. Keep sensitive credentials in secured configuration and scrub diagnostics around outbound HTTP
  2. Use AL HttpClient with an authorized external endpoint and process the HttpResponseMessage
  3. Attach the required authentication header to the outbound HttpRequestMessage or HttpClient request
  4. Set appropriate HttpContent headers and serialize the payload to the service's media-type contract

Explanation

Correct Answer

D:

This targets the concrete requirement—A warehouse connector posts text data to a service that requires a precise HTTP content type and encoding. HTTP content headers describe the request body representation separately from general request or authentication headers. The team can establish success when the remote api accepts the payload and parses the intended json fields with no media-type rejection.

Incorrect Answers

A:

This choice primarily fits a different requirement: A transaction uses an external REST call and must not expose customer secrets in URLs or diagnostic telemetry. There, secure integration design limits credential exposure in query strings, published source and support traces. In the current situation, A warehouse connector posts text data to a service that requires a precise HTTP content type and encoding. HTTP content headers describe the request body representation separately from general request or authentication headers. Acceptance requires the remote api accepts the payload and parses the intended json fields with no media-type rejection.

B:

This choice primarily fits a different requirement: A Business Central extension must call an external shipping service over HTTPS to retrieve current tracking status. There, httpclient enables outbound http exchanges through supported apis rather than direct database or host-level integration. In the current situation, A warehouse connector posts text data to a service that requires a precise HTTP content type and encoding. HTTP content headers describe the request body representation separately from general request or authentication headers. Acceptance requires the remote api accepts the payload and parses the intended json fields with no media-type rejection.

C:

This choice primarily fits a different requirement: An external carrier API requires a bearer token on every outbound request from the Business Central extension. There, http authentication headers convey credentials according to the external service's contract rather than as unprotected url query text. In the current situation, A warehouse connector posts text data to a service that requires a precise HTTP content type and encoding. HTTP content headers describe the request body representation separately from general request or authentication headers. Acceptance requires the remote api accepts the payload and parses the intended json fields with no media-type rejection.

Question 750

A warehouse connector posts text data to a service that requires a precise HTTP content type and encoding. The developer recommends the following change: Set appropriate HttpContent headers and serialize the payload to the service's media-type contract. Which technical explanation most directly justifies it in this case?

  1. HTTP content headers describe the request body representation separately from general request or authentication headers
  2. Secure integration design limits credential exposure in query strings, published source and support traces
  3. HttpClient enables outbound HTTP exchanges through supported APIs rather than direct database or host-level integration
  4. HTTP authentication headers convey credentials according to the external service's contract rather than as unprotected URL query text

Explanation

Correct Answer

A:

HTTP content headers describe the request body representation separately from general request or authentication headers. It connects the proposed action to the exact failure or requirement—A warehouse connector posts text data to a service that requires a precise HTTP content type and encoding. Confirmation would be the remote api accepts the payload and parses the intended json fields with no media-type rejection.

Incorrect Answers

B:

That mechanism explains why the alternative action—keep sensitive credentials in secured configuration and scrub diagnostics around outbound http—helps in another case. It does not justify the proposed fix here; http content headers describe the request body representation separately from general request or authentication headers. The distinguishing requirement is: A warehouse connector posts text data to a service that requires a precise HTTP content type and encoding.

C:

That mechanism explains why the alternative action—use al httpclient with an authorized external endpoint and process the httpresponsemessage—helps in another case. It does not justify the proposed fix here; http content headers describe the request body representation separately from general request or authentication headers. The distinguishing requirement is: A warehouse connector posts text data to a service that requires a precise HTTP content type and encoding.

D:

That mechanism explains why the alternative action—attach the required authentication header to the outbound httprequestmessage or httpclient request—helps in another case. It does not justify the proposed fix here; http content headers describe the request body representation separately from general request or authentication headers. The distinguishing requirement is: A warehouse connector posts text data to a service that requires a precise HTTP content type and encoding.


Microsoft Dynamics 365 Business Central Developer (MB-820) Practice Tests

Purchase Individually

MB-820 Premium File

Premium File
MB-820 Premium File
131 Q&A
$76.99$69.99

MB-820 Study Guide

Study Guide
MB-820 Study Guide
948 PDF Pages
$27.49$24.99

Site Search:

 

VISA, MasterCard, AmericanExpress, UnionPay

SPECIAL OFFER: GET 10% OFF

ExamCollection Premium

ExamCollection Premium Files

Pass your Exam with ExamCollection's PREMIUM files!

  • ExamCollection Certified Safe Files
  • Guaranteed to have ACTUAL Exam Questions
  • Up-to-Date Exam Study Material - Verified by Experts
  • Instant Downloads
Enter Your Email Address to Receive Your 10% Off Discount Code
A Confirmation Link will be sent to this email address to verify your login
We value your privacy. We will not rent or sell your email address

SPECIAL OFFER: GET 10% OFF

Use Discount Code:

MIN10OFF

A confirmation link was sent to your e-mail.
Please check your mailbox for a message from support@examcollection.com and follow the directions.

Next

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your e-mail address below to get started with our interactive software demo of your free trial.

Free Demo Limits: In the demo version you will be able to access only first 5 questions from exam.