Be able to identify valid environment types, read Power Platform admin PowerShell output, and apply DLP policies to block connectors across environments. The key skill is knowing that governance is environment-scoped, so choose the right environment and policy scope for each admin scenario.
Start practicing
Manage the Microsoft Power Platform environment — choose a session length
Free · No account required
Domain overview
This domain covers administering Power Platform environments: creating and selecting environment types, using the Power Platform admin center, applying data loss prevention (DLP) policies, and managing environment lifecycle with PowerShell cmdlets like Get-AdminPowerAppEnvironment. Questions present admin scenarios and ask you to interpret commands, choose valid environment types, or pick correct governance actions.
Exam objectives
Environment types: Sandbox, Production, Trial, and Developer, and when each is appropriate
Power Platform admin center tasks: creating environments, assigning admin roles, and managing settings
Data loss prevention policies that classify connectors as Business, Non-Business, or Blocked
PowerShell admin cmdlets such as Get-AdminPowerAppEnvironment and Set-AdminPowerAppEnvironment
Confusing environment types with app types; assuming 'Test' or 'Staging' are official Power Platform environment types when they are not.
Thinking DLP policies apply per app or per user; they are scoped to environments and control connectors, not individual makers.
Believing the default environment can be deleted or that every user can create environments; tenant settings govern this.
Click any question to see the full explanation and answer options, or start a focused practice session above.
Your organization uses Power Automate to automate business processes. A flow that runs daily fails intermittently with 'HTTP 429 - Too Many Requests' errors. What should you do to resolve this issue?
2Your organization has a Power Apps portal that allows external users to submit support tickets. You need to ensure that only authenticated external users from specific domains can access the portal. What should you configure?
3Your organization has multiple Power Platform environments. You need to ensure that a specific connector (e.g., SQL Server) is blocked in the production environment but allowed in the development environment. What should you configure?
4Your organization uses Power Virtual Agents (now Copilot Studio) for customer service. You need to ensure that the bot can access customer data from a Dataverse table that contains sensitive information. What is the best approach to secure the data?
5Which THREE actions can a Power Platform administrator perform in the Power Platform admin center to manage environments?
6Which TWO of the following are valid environment types in Power Platform?
7A Power Platform administrator notices that a production environment has exceeded its storage quota. The administrator needs to free up storage without impacting active solutions. Which action should the administrator take first?
8A company is deploying Power Virtual Agents (now Copilot Studio) chatbots across multiple departments. Each department needs its own environment to manage chatbots independently. However, the company wants to share a common set of entities and workflows across all environments. Which approach should the administrator take?
9A Power Platform administrator is configuring data loss prevention (DLP) policies. The company uses Power Automate flows that connect to Microsoft SharePoint and Microsoft Teams. The security team wants to block any flow from sending data from SharePoint to unsanctioned third-party services. Which DLP policy configuration should the administrator apply?
10An organization wants to enable Microsoft Copilot Studio (formerly Power Virtual Agents) to answer questions from employees about company policies. The chatbot must only use internal company documents stored in SharePoint as its knowledge source. Which configuration should the administrator use?
11An administrator needs to prevent users from creating Power Apps outside of the approved environment (Production). The company has a Development and a Production environment. Users should only be able to create apps in Development. Which configuration should the administrator use?
12A company has a Power Platform environment that contains several unmanaged solutions. The administrator wants to promote a solution to production. Which action should the administrator take to ensure the solution can be deployed to other environments?
13A company wants to use Microsoft Copilot Studio to build a chatbot that helps employees reset their passwords. Which TWO components are required? (Choose two.)
14A company is implementing Microsoft Power Platform and needs to ensure that only licensed users can create environments. Which setting should be enabled?
15A large enterprise uses Power Platform with multiple environments. They need to enforce a policy that blocks all Canvas apps from using the 'Twitter' connector, but only in the 'Production' environment. What should the administrator do?
16An organization uses Power Automate flows that connect to Microsoft Dataverse. The flows need to run under a service account with specific permissions. What is the best practice to manage the connection?
17A Power Platform administrator wants to see the capacity usage of all environments in the tenant. Where should they look?
18Which TWO actions can a Power Platform administrator perform in the Power Platform admin center?
19The exhibit shows a DLP policy configuration for a Power Platform environment. Which connector is allowed for business use?
20A company uses Microsoft Power Platform and requires that all environment creation requests go through an approval process. The security team wants to prevent non-admins from creating trial environments. What should the administrator configure?
21An organization uses Microsoft Power Platform and wants to enforce data loss prevention (DLP) policies across all environments. They need to block the use of a specific third-party connector in all environments. What should the administrator do?
22A company uses Power Automate flows that connect to SharePoint and Microsoft Entra ID. The administrator needs to ensure that the flows can access data only from approved data sources. What should the administrator configure?
23Which THREE are valid components of a Microsoft Power Platform environment?
24Which TWO are best practices for managing Power Platform environments in a large enterprise?
25An organization uses Power Automate flows that connect to Microsoft Dataverse and SharePoint. The administrator needs to ensure that only specific connectors can be used together. What should they configure?
26A company has a Power Platform environment used for development. The development team needs to deploy a solution to a test environment. What is the recommended approach?
27An administrator needs to ensure that only users from a specific Microsoft Entra ID group can access a Power Platform environment. What should the administrator configure?
28An organization has multiple Power Platform environments. The administrator needs to move a solution from a development environment to a production environment. The solution includes custom connectors and environment variables. What is the correct process?
29An organization wants to ensure that all Power Platform solutions in production environments are tracked and changes are approved. What should the administrator implement?
30A company has a Power Platform environment that is running low on storage. The administrator needs to free up storage without deleting important data. What should they do first?
31A company wants to enforce data loss prevention (DLP) policies for Power Automate flows. Which TWO actions can the administrator perform?
32Refer to the exhibit. A Power Platform administrator applies this DLP policy to the default environment. What is the result?
33Refer to the exhibit. An administrator runs this PowerShell command against a Power Platform environment. What can the administrator conclude?
34An organization has several Power Platform environments used for development and testing. They want to prevent accidental deletion of important data. What strategy should they implement?
35A global company uses Power Platform and wants to ensure that data residency requirements are met for users in different regions. What should they configure?
36A company uses Power Automate flows that access Microsoft SharePoint and Microsoft Dataverse. They want to prevent data from leaving the organization. What should they configure?
37A company uses a Power Platform environment that contains several production apps. They need to ensure that changes to these apps are reviewed and approved before deployment to the production environment. What should they implement?
38A user reports they cannot create a new Power Apps app in the default environment. They have a Power Apps license. What is the most likely cause?
39An organization wants to allow external partners to access specific Power Apps and data without granting them full access to the tenant. What should they configure?
40A company has multiple Power Platform environments. They want to automatically apply consistent settings (e.g., DLP policies, audit settings) to all new environments. What should they do?
41Which THREE components are part of the Power Platform environment lifecycle management?
42Which TWO of the following are valid reasons to create multiple Power Platform environments?
43A company uses Microsoft Power Platform and wants to enforce data loss prevention (DLP) policies for all environments. The admin needs to block the use of SharePoint connector in all default environments. Which action should the admin take?
44An organization has multiple Power Platform environments including production, development, and test. They want to ensure that changes made in development are promoted to test and then to production, with approval gates. Which feature should they use?
45A company wants to restrict the ability to create Power Apps and Power Automate flows in the default environment to only a specific security group. What is the recommended approach?
46An admin needs to view the capacity add-ons purchased for a tenant, including AI Builder credits. Where should the admin go?
47A company uses Microsoft Copilot Studio to create a custom copilot. The copilot needs to access customer data stored in a Dataverse table that contains sensitive information. The compliance team requires that data accessed by the copilot must be audited. What should the admin configure?
48A Power Platform admin needs to ensure that all environments have a backup policy that automatically creates backups every 24 hours. What is the default backup frequency for Dataverse environments?
49A manufacturing company uses Power Automate flows to process inventory updates. The flows use standard connectors. The company needs to ensure that the flows can be run by users in their own context without requiring the flow owner's credentials. Which authentication type should be used for the connections?
50A company uses Power BI to visualize sales data from Dynamics 365 Sales. A new policy requires that all data must be stored in the US region only. The Power BI tenant is currently in the default region (home region). What should the admin do to comply with the policy?
51An organization uses Power Apps portals to allow external customers to submit support tickets. The portal uses Microsoft Entra ID for authentication. The security team wants to require multi-factor authentication (MFA) for external portal users. What is the best approach?
52A company uses Power Virtual Agents (now Copilot Studio) to build a customer service chatbot. The bot needs to securely escalate to a live agent when it cannot resolve the issue. The escalation must pass the conversation context to the agent. What should the bot use?
53A non-profit organization uses Power Platform to manage donor information. The organization wants to ensure that only users in the ‘Donor Managers’ security group can edit records in the ‘Donations’ table. What is the best way to achieve this?
54A financial services company uses Power Automate to process loan applications. The flow uses the ‘When a new email arrives’ trigger from a shared mailbox. The flow recently stopped working after an admin changed the mailbox permissions. What is the most likely cause?
55Which TWO are valid ways to distribute a Power App to end users? (Select 2)
56A global organization has multiple geographic regions and needs to comply with data residency requirements. Each region must have its own Power Platform environment with data stored locally. What is the recommended approach to manage these environments?
57A company is using Power Automate flows that connect to multiple third-party services. The security administrator wants to ensure that no sensitive data is sent to unauthorized external services. Which feature should be used to enforce this requirement?
58A Power Platform administrator wants to delegate the responsibility of managing environments to regional leads without granting them full admin privileges. Which role should the administrator assign?
59The exhibit shows a JSON snippet used to create a Power Platform environment via the Power Platform API. The administrator runs the script but the environment is created with the default language and currency instead of the specified values. What is the most likely reason?
60Which TWO are valid methods to create a new Power Platform environment?
61An organization has multiple Power Platform environments. The security team mandates that all environments must use Microsoft Entra ID conditional access policies to enforce multi-factor authentication. However, one environment hosts a service account that cannot perform interactive logins. What should the administrator do to comply without breaking the service account?
62A company wants to ensure that changes to a Power Platform solution are tracked and can be rolled back if necessary. The development team uses source control. What should the administrator configure to enable solution lifecycle management?
63An organization is using Power Virtual Agents (now Copilot Studio) to create a customer service chatbot. The chatbot must be available only to users inside the organization, not to external customers. What should the administrator do?
64An administrator is planning the environment strategy for a large enterprise. Which TWO considerations should the administrator include to ensure proper governance?
65A company is migrating a complex Power Apps solution from a development environment to production. The solution includes custom connectors, flows, and Dataverse tables. Which THREE steps should the administrator take to ensure a successful migration?
66An administrator configures a Data Loss Prevention (DLP) policy with the scope set to 'All environments' and places selected connectors in the 'Blocked' group. What will be the result of this policy?
67You are a Power Platform administrator for a non-profit organization. The organization has a single environment used by volunteers and staff. A new volunteer needs to be able to run a specific Power App that manages event registrations, but should not be able to modify the app or access any other resources in the environment. The volunteer has a valid Power Apps license. You need to provide the volunteer with the minimum permissions necessary. What should you do?
68An organization is preparing for a Power Platform rollout. They need to ensure that only licensed users can create new environments, and that environment creation is audited. Additionally, they want to restrict which connectors can be used in production environments. Which THREE capabilities should they use?
69A multinational corporation uses Power Platform extensively. They have multiple environments: DEV, TEST, UAT, STAGING, and PROD. A developer accidentally published a Power App that connects to a SQL Server database using an unapproved connector in the PROD environment. The organization has strict data governance policies that require all connections to use approved connectors only. The admin needs to block this connector in PROD while still allowing it in other environments. What should the admin do?
70A hospital uses Power Apps to manage patient intake forms. The app stores data in Microsoft Dataverse. The security policy requires that patient health information (PHI) be encrypted at rest and in transit. The environment is already configured with default Dataverse settings. The IT admin needs to ensure compliance. What should the admin do?
71A government agency uses Power Platform with strict compliance requirements. They need to retain all audit logs of user activities within Power Platform for at least 7 years. The agency uses Microsoft Purview for compliance and Microsoft Sentinel for security monitoring. The admin needs to ensure that all Power Platform audit events are captured and retained for the required period. What should the admin do?
72A university uses Power Apps for student registration. The app is built on Dataverse and shared with all students. Recently, a student reported that they cannot access the app and receive an error that they do not have permission. The app was working earlier. The admin checks the environment and finds that the app's sharing settings have been changed. The admin needs to restore access for all students quickly. What should the admin do?
73A Power Platform administrator is configuring a data loss prevention (DLP) policy for a new environment. The policy must allow the use of the SharePoint and Outlook connectors together, but must prevent the use of the Twitter connector with any other connector. How should the administrator configure the DLP policy?
74A Power Platform administrator needs to provide a team of makers with a shared environment that includes a pre-installed Microsoft Dataverse database and sample apps. The environment should be available to all team members without requiring them to create their own. What should the administrator do?
75A Power Platform administrator at Contoso manages a production environment that contains several mission-critical Power Apps canvas apps. The administrator wants to ensure that any change made to an app in this environment is recorded and can be traced back to the user who made it, for audit purposes. Which feature should the administrator enable to meet this requirement?
76A Power Platform administrator is setting up a new environment for a department. The department requires that data stored in the environment remain within a specific geographic region. The administrator creates the environment in the Europe region. Which additional step must the administrator take to ensure that all data, including backups, stays in that region?
77A company has a production environment containing a model-driven app used by 400 sales staff. The administrator wants to review who accessed the app in the last 30 days and which users were inactive, without enabling any paid auditing features. Which tool should the administrator use?
78A Power Platform administrator needs to provide a team of makers with a shared environment that includes a common set of connectors and a preconfigured Microsoft Dataverse database. The makers should be able to collaborate on apps and flows without affecting other environments. What should the administrator create?
79A Power Platform administrator needs to provide a team of makers with a shared environment that includes preinstalled sample data and apps for learning purposes. The team should be able to reset the environment to its initial state if needed. Which environment type should the administrator create?
80An administrator is setting up a new Power Platform environment for a department. The department requires that all users in the environment use only approved connectors, and that data cannot be shared between the approved connectors and any unapproved connectors. What should the administrator configure?
81A small business wants to give its finance team a dedicated space to build apps and flows that only finance team members can access, separate from the default environment used by the rest of the company. The administrator needs to create this isolated workspace. What should the administrator create?
82A Power Platform administrator is configuring a new environment for a team that will use both Power Apps and Power Automate. The administrator needs to ensure that the team can only use a specific set of connectors and that data cannot be shared between certain connectors. Which two actions should the administrator take? (Choose two.)
83A Power Platform administrator needs to delegate the ability to create and manage environments to a specific user without granting full Power Platform administrator privileges. The administrator wants to follow the principle of least privilege. What should the administrator do?
84A Power Platform administrator is configuring data loss prevention (DLP) policies for a tenant. The administrator needs to allow the use of the SharePoint connector and the Outlook connector in the same flow, but must block the use of the Twitter connector. Which DLP policy configuration should the administrator use?
85A Power Platform administrator needs to ensure that all Power Automate cloud flows in a specific environment can only use connectors approved by the security team, and that flows combining a blocked connector with any other connector are prevented from running. Which mechanism should the administrator use?
86A Power Platform administrator needs to monitor the usage of Power Apps and Power Automate across the tenant to identify which environments are consuming the most resources. Which tool should the administrator use?
87A Power Platform administrator needs to manage user access to a specific environment. The administrator wants to allow a group of users to create apps and flows in that environment, but restrict them from modifying environment settings or managing other users. Which two actions should the administrator perform? (Choose two.)
88A Power Platform administrator is reviewing the capacity of a production environment. The environment has a database size of 2 GB, file storage of 10 GB, and log storage of 1 GB. The tenant has a total of 10 GB of database capacity, 50 GB of file capacity, and 2 GB of log capacity. The administrator notices that the production environment is consuming a disproportionate amount of database capacity. Which action should the administrator take to identify the largest tables in the environment?
89A Power Platform administrator needs to view the capacity consumption for the tenant, including how much Dataverse storage and Power Platform request capacity is being used. Where should the administrator go?
90Northwind Traders has a production environment named 'Ops-Prod' with Dataverse enabled. A maker reports that after importing a managed solution, a canvas app that previously worked now fails to connect to a custom connector. The admin confirms the connector exists in the environment and the maker holds the Environment Maker role. What is the most likely cause?
91A help desk technician needs to confirm which Power Platform environments are associated with a specific Microsoft Dataverse database and check the environment type and region for each. The technician has the Power Platform Administrator role. Where should the technician look?
92A Power Platform administrator discovers that a developer has deployed a canvas app to production that connects to both SharePoint and an unapproved third-party REST API using a custom connector. The security team requires that custom connectors be reviewed before production use, while still allowing makers to prototype them in a sandbox environment. What should the administrator configure to meet this requirement?
93An organization wants to ensure that when a Power Apps canvas app is shared with a user, the user can run the app but cannot edit it or share it with others. The app is in a production environment. What should the administrator or maker do?
94A Power Platform administrator needs to monitor the usage of Power Apps and Power Automate across the organization to identify which environments have the highest adoption. Which built-in tool should the administrator use?
95A Power Platform administrator is reviewing the security roles in a new environment. The administrator needs to grant a user the ability to create and modify all components within the environment, including managing other users' security roles. Which security role should be assigned?
Deep-dive questions
The most-searched questions in this domain — detailed explanations, worked examples, full answer breakdowns.
Be able to identify valid environment types, read Power Platform admin PowerShell output, and apply DLP policies to block connectors across environments. The key skill is knowing that governance is environment-scoped, so choose the right environment and policy scope for each admin scenario.
The Courseiva PL-900 question bank contains 95 questions in the Manage the Microsoft Power Platform environment domain, covering the 23% of the exam attributed to this domain in the official Microsoft blueprint. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the Manage the Microsoft Power Platform environment domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included