PL-900 Practice Test 10 — 10 Questions

Question 1

An organization uses Microsoft Power Platform and wants to enforce data loss prevention (DLP) policies across all environments. They need to block the use of a specific third-party connector in all environments. What should the administrator do?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Create a tenant-level DLP policy that blocks the connector. DLP policies in Microsoft Power Platform can be configured at the tenant level to apply across all environments. By creating a tenant-level DLP policy and blocking the specific third-party connector, the administrator ensures consistent enforcement without needing to manage individual environment policies. This approach centralizes control and prevents the connector from being used in any environment.

Answer

Create a DLP policy for each environment and block the connector

Answer

Create a custom connector with the same name and block it

Answer

Remove the connector from the default solution

Question 2

Your team needs to build a custom app that connects to Microsoft 365 and third-party services like Salesforce. Which Power Platform feature enables this?

Accepted Answer

Power Apps connectors. Power Apps connectors are the specific feature that enables integration with external services like Microsoft 365 and Salesforce. Connectors provide pre-built APIs and authentication wrappers that allow Power Apps to securely read, write, and trigger actions in these services without custom code.

Answer

Power Automate triggers

Answer

Power Pages templates

Answer

Power BI datasets

Question 3

Refer to the exhibit.

{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "resources": [
    {
      "type": "Microsoft.PowerPlatform/enterprisePolicies",
      "apiVersion": "2021-01-01",
      "name": "myDlpPolicy",
      "location": "eastus",
      "properties": {
        "definition": {
          "$schema": "https://schema.management.azure.com/providers/Microsoft.PowerPlatform/policyDefinitions/2021-01-01/schema.json#",
          "rules": [
            {
              "name": "Block SharePoint",
              "action": "Block",
              "connectors": [
                "shared_sharepointonline"
              ]
            }
          ]
        }
      }
    }
  ]
}

An admin deploys this ARM template to create a DLP policy. After deployment, users report they can still use the SharePoint connector in Power Automate. What is the most likely reason?

Accepted Answer

The resource type should be 'Microsoft.PowerPlatform/dlpPolicies'. The resource type 'Microsoft.PowerPlatform/enterprisePolicies' is used for creating policies, but the API version and properties may not be correct for DLP policies. The correct resource type for DLP policies is 'Microsoft.PowerPlatform/dlpPolicies'. Option B is wrong because the environment might not have the policy applied, but the template attempts to create a policy. Option C is wrong because the policy is created at the tenant level, not per environment. Option D is wrong because the policy name is set correctly.

Answer

The policy was not applied to the environment where users are working

Answer

The policy name does not match the connector name

Answer

The policy is applied at the tenant level and does not affect individual environments

Question 4

Which TWO are benefits of using Microsoft Power Platform for business process automation?

Accepted Answer

Reduces need for custom coding. Microsoft Power Platform provides low-code and no-code tools like Power Automate and Power Apps, enabling users to create automated workflows and applications without writing custom code. This reduces reliance on professional developers and accelerates business process automation.

Answer

Requires dedicated IT team for every automation

Answer

Only works on-premises

Answer

Requires deep knowledge of programming languages

Question 5

An organization uses Power Automate flows that connect to Microsoft Dataverse. The flows need to run under a service account with specific permissions. What is the best practice to manage the connection?

Accepted Answer

Create a connection reference that uses the service account's connection. Connection references decouple the connection details from the flow definition, allowing you to configure a service account's connection once and reuse it across multiple flows. When you create a connection reference and set it to use a service account's connection (e.g., a pre-created Dataverse connection authenticated with the service account), the flow runs under that account's permissions without exposing credentials or requiring the flow owner to share their identity. This is the recommended pattern for service principal or application user scenarios in Power Automate.

Answer

Use the flow owner's credentials and share the flow with the service account

Answer

Create a service account connection type in the Power Platform admin center

Answer

Hardcode the service account credentials in the flow

Question 6

A company has a model-driven app with a custom table 'Issue' that has a choice column 'Status' with values: New, In Progress, Resolved, Closed. The app uses a business rule to set 'Resolved By' (lookup to User) when status changes to Resolved. Users report that the 'Resolved By' field is not being populated. What is the most likely cause?

Accepted Answer

The business rule is scoped to the form but the status change happens via a quick create form.. Business rules in model-driven apps can be scoped to either the entity (all forms) or a specific form. If the rule is scoped to a particular form (e.g., the main form) but the status change occurs via a quick create form, the rule will not trigger. This is the most likely cause because users report the field is not populated, indicating the rule is not firing in the context where the status is being changed.

Answer

The 'Resolved By' lookup column is not added to the form.

Answer

The 'Resolved By' column is required and users don't fill it.

Answer

The business rule is deactivated.

Question 7

A company uses Microsoft Power Platform and wants to allow external users (guests) to access a canvas app. The app connects to a Dataverse database that contains sensitive customer information. The security team is concerned about data leakage. What should the administrator do to minimize risk?

Accepted Answer

Create a new environment specifically for external users with only the required data.. Creating a separate environment for external users allows the administrator to control exactly which Dataverse tables and data are exposed, minimizing the risk of sensitive customer information being leaked. This approach follows the principle of least privilege by isolating guest access to a sandboxed environment with only the required data, rather than granting access to the existing production environment.

Answer

Disable sharing of the app with external users.

Answer

Add external users as guests in Microsoft Entra ID and grant them access to the existing environment.

Answer

Use DLP policies to block all connectors except the canvas app.

Question 8

A company has a Power Apps app that uses Microsoft Dataverse. They need to ensure that only users with a specific security role can access the app. Where should the administrator configure this?

Accepted Answer

App-level permissions in the Power Apps app settings. To control access to a specific Power Apps app based on security roles, the administrator should configure app-level permissions in the Power Apps app settings. This allows the app owner to assign which security roles (from Dataverse) can use the app. Option B (Environment-level security roles) controls access to the entire environment, not individual apps. Option C (Dataverse security roles in the 'Roles' area) manages data permissions, not app access directly. Option D (Sharing directly from maker portal) shares with individuals or groups, but not role-based access.

Answer

Environment-level security roles in Power Platform Admin Center

Answer

Dataverse security roles in the 'Roles' area of the environment

Answer

Share the app with users directly from the Power Apps maker portal

Question 9

Which THREE components are included in a Power Platform environment?

Accepted Answer

Dataverse database. A Dataverse database (Option B) is a core component of a Power Platform environment because it provides the underlying data storage and management layer for apps, flows, and bots. Without a Dataverse database, many environment features like custom tables, relationships, and security roles are unavailable. This makes it a fundamental building block for any environment that needs structured data persistence.

Answer

Power BI workspaces

Answer

Microsoft 365 groups

Question 10

Which TWO of the following are capabilities of Power Pages?

Accepted Answer

Create data-driven websites using Dataverse. Power Pages creates data-driven websites that use Dataverse as the primary data source. Option C is correct because Power Pages enables external users to view and submit data through its portal capabilities. Option B is wrong because advanced analytics and dashboards are capabilities of Power BI, not Power Pages. Option D is wrong because building canvas mobile apps is a capability of Power Apps, not Power Pages. Option E is wrong because running SQL queries directly on the site is not a capability of Power Pages.

Answer

Generate advanced analytics reports and dashboards

Answer

Build canvas mobile apps with offline capabilities

Answer

Run SQL queries directly on the site