PL-900 Practice Test 16 — 15 Questions

Question 1

A healthcare organization needs a Power Apps app to track patient visit data. The data must be stored in Microsoft Dataverse, and the app should automatically generate a timeline of visits for each patient. Which app type is most suitable?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Model-driven app. A model-driven app is the most suitable choice because it is designed for complex, data-centric business applications that require rich relational data modeling, automated business logic, and built-in timeline controls. Dataverse provides the underlying relational storage, and model-driven apps natively support timeline components that automatically aggregate and display patient visit records in chronological order without custom development.

Answer

Portal

Answer

Power Automate

Answer

Canvas app

Question 2

A non-profit organization uses Microsoft 365 but has no IT staff. They want to create a simple app to track volunteer hours and automatically send reminders to volunteers who haven't logged hours in a week. They also need a dashboard to view total hours by project. Which combination of Power Platform tools should they use?

Accepted Answer

Power Apps, Power Automate, and Power BI. Power Apps provides the low-code platform to build the volunteer hour logging app, Power Automate handles the automated reminder emails based on a weekly trigger, and Power BI creates the dashboard for total hours by project. This combination directly addresses all three requirements without needing IT staff, as all tools are designed for citizen developers.

Answer

Power Apps, AI Builder, and Power BI

Answer

Power Pages, Power Automate, and Power BI

Answer

Copilot Studio, Power Automate, and Power BI

Question 3

A user wants to create a flow that automatically copies attachments from incoming Outlook emails to a OneDrive folder. Which trigger and action should be used?

Accepted Answer

'When a new email arrives' trigger and 'Create file' action. 'When a new email arrives' trigger initiates the flow for each incoming email, and the 'Create file' action can save attachments to a OneDrive folder. Option B is incorrect because 'Send an email' action would send an email, not create a file. Option C is incorrect because 'When an item is created' trigger is for SharePoint or similar, not for email. Option D is incorrect because 'When a file is created' trigger and 'Start an approval' action do not relate to copying email attachments.

Answer

'When a new email arrives' trigger and 'Send an email' action

Answer

'When an item is created' trigger and 'Create file' action

Answer

'When a file is created' trigger and 'Start an approval' action

Question 4

An organization needs to create a form for employees to submit vacation requests. The form should automatically calculate the number of days requested based on the start and end dates. Which type of app should they build?

Accepted Answer

Canvas app. Canvas apps allow flexible formulas, such as DateDiff, to automatically calculate the number of days between two dates, making them ideal for forms requiring custom calculations. Option A is wrong because Power Apps portal is designed for external-facing websites, not internal employee forms. Option C is wrong because Power Automate is an automation tool, not a form-building app. Option D is wrong because model-driven apps use standardized forms and custom calculations are less straightforward compared to canvas apps.

Answer

Power Apps portal

Answer

Power Automate

Answer

Model-driven app

Question 5

A company wants to enable its field service technicians to access customer records and update work orders from their mobile devices offline. Which Power Platform solution should they implement?

Accepted Answer

Power Apps (model-driven) configured for offline use. Model-driven Power Apps natively support offline capabilities through the Dynamics 365 offline sync engine, which allows field service technicians to access customer records and update work orders without connectivity. When the device reconnects, changes are automatically synchronized with the Dataverse, ensuring data consistency. This makes it the correct choice for mobile offline scenarios.

Answer

Power Pages website accessible from mobile browsers

Answer

Power BI dashboards embedded in a mobile app

Answer

Power Automate flows to sync data periodically

Question 6

Your organization uses Power Automate to automate business processes. A flow that runs daily fails intermittently with 'HTTP 429 - Too Many Requests' errors. What should you do to resolve this issue?

Accepted Answer

Configure retry policies with exponential backoff in the flow actions.. HTTP 429 responses indicate the flow is hitting Power Automate's service protection limits (throttling). The correct mitigation is to configure retry policies with exponential backoff on the actions that call the throttled connector, so the flow retries after increasing delays instead of failing immediately. This aligns with Microsoft's documented guidance for handling 429 errors.

Answer

Increase the frequency of the flow to run more often.

Answer

Change the flow trigger from a schedule to an instant trigger.

Answer

Set up an on-premises data gateway to bypass the throttling limits.

Question 7

A company uses Power Automate flows that access Microsoft SharePoint and Microsoft Dataverse. They want to prevent data from leaving the organization. What should they configure?

Accepted Answer

Create a data loss prevention (DLP) policy in the Power Platform admin center that blocks sharing data with external connectors.. Data Loss Prevention (DLP) policies in the Power Platform admin center are specifically designed to prevent data from leaving the organization by controlling which connectors can share data. By blocking external connectors, the policy ensures that SharePoint and Dataverse data cannot be sent to unauthorized external services, directly addressing the requirement.

Answer

Configure Microsoft Purview to automatically classify and protect data in Power Automate.

Answer

Enable Microsoft Defender XDR to monitor for suspicious data transfers.

Answer

Apply Microsoft Entra ID Conditional Access policies to require managed devices.

Question 8

A Power Platform administrator wants to see the capacity usage of all environments in the tenant. Where should they look?

Accepted Answer

Power Platform admin center > Capacity. The Capacity page in the Power Platform admin center provides a tenant-level view of all capacity entitlements (database, file, log) and their consumption across environments. This is the dedicated location for monitoring capacity usage, including add-ons and storage overages, as documented in Microsoft's capacity management guidance.

Answer

Power Platform admin center > Environments

Answer

Power Platform admin center > Analytics

Answer

Power Platform admin center > Billing

Question 9

Refer to the exhibit. An administrator wants to enforce a mobile app management policy that prevents screen capture in Power Apps. Which Microsoft service should the administrator use to deploy this policy?

Accepted Answer

Microsoft Intune. Microsoft Intune is the mobile device and application management (MDM/MAM) service in the Microsoft 365 stack, and it is where app protection policies are configured. An Intune app protection policy can enforce data-loss-prevention controls such as blocking screen capture, preventing copy/paste to unmanaged apps, and requiring a PIN, specifically for mobile apps like Power Apps on iOS and Android. This is the correct service to deploy the policy described.

Answer

Microsoft Entra ID

Answer

Microsoft Defender XDR

Answer

Microsoft Purview

Question 10

A company uses Microsoft Power Platform and requires that all environment creation requests go through an approval process. The security team wants to prevent non-admins from creating trial environments. What should the administrator configure?

Accepted Answer

In Power Platform Admin Center, set 'Disable trial environments created by non-admins' to Yes. The Power Platform Admin Center provides a dedicated tenant-level setting called 'Disable trial environments created by non-admins' that, when set to 'Yes', prevents users without administrative privileges from creating trial environments. This directly addresses the security team's requirement to block non-admins from creating trial environments, as it enforces an approval-based control at the environment creation level.

Answer

Assign users to an environment group with restricted permissions

Answer

In Power Apps settings, disable 'Allow users to create environments'

Answer

Create a Data Loss Prevention (DLP) policy that blocks trial environments

Question 11

A global manufacturing company uses Microsoft Power Platform to manage its equipment maintenance processes. The company has over 10,000 maintenance technicians worldwide who use a Power Apps mobile app to report equipment issues and log repairs. The app connects to a common data service (Dataverse) that stores all maintenance records. Recently, the company experienced a data breach where a malicious user exploited a vulnerability in the app to access and delete maintenance records from multiple high-value machines. The security team traced the issue to the app's permissions model: the app was using a single service account with elevated privileges to perform all data operations. The company now wants to redesign the app's security to follow the principle of least privilege while maintaining usability for technicians. The technicians need to view their assigned work orders, create new issue reports, and update the status of their own repairs, but they should not be able to delete records or access records from other regions. Which approach should the company take?

Accepted Answer

Implement row-level security in Dataverse to restrict technicians to their own records and region, assign appropriate role-based access (create, read, update, no delete), and use individual user accounts.. It applies the principle of least privilege by using individual user accounts with Dataverse role-based security and row-level security (RLS). This ensures each technician can only create, read, and update their own assigned records within their region, while explicitly denying delete permissions. This approach eliminates the shared, over-privileged service account and enforces granular data isolation.

Answer

Replace the Power Apps app with a Power Automate flow that technicians trigger via email to submit and update records.

Answer

Configure each technician's individual user account with a basic user role in Dataverse, and remove the service account.

Answer

Create a separate Power Apps app for each region, each with its own service account that has restricted permissions to that region's data.

Question 12

An organization is using Power Virtual Agents (now Copilot Studio) to create a customer service chatbot. The chatbot must be available only to users inside the organization, not to external customers. What should the administrator do?

Accepted Answer

Configure authentication in the chatbot. To restrict a Power Virtual Agents (Copilot Studio) chatbot to internal users only, the administrator should configure authentication in the chatbot. This enforces sign-in and limits access to users within the organization's Microsoft Entra ID tenant, preventing external customers from interacting with it.

Answer

Publish the chatbot to a public website

Answer

Create a new environment for the chatbot

Answer

Disable analytics for the chatbot

Question 13

Which TWO of the following are required to set up a Power Pages site that allows external users to sign in using their social media accounts?

Accepted Answer

Set up the social identity provider in the Power Pages admin center.. Option B is correct because, in the Power Pages admin center (under Security > Identity providers), you must configure and enable the specific social identity provider (e.g., Facebook, Google, LinkedIn) so the site can authenticate external users against it. Option D is correct because every OAuth 2.0/OpenID Connect social provider requires you to register an app on that platform and obtain its client ID and client secret, which are then entered into the Power Pages identity provider settings to complete the trust relationship. Option A is not required, since user registrations are handled by the Power Pages authentication/registration flow and the Contacts table, not by deploying a model-driven app. Option C is not required because Microsoft Entra ID is a work/organizational identity provider, not a social media provider, and the scenario specifically calls for social accounts. Option E is not required to set up the sign-in itself; Power Pages can create or associate the contact record automatically upon first sign-in, so manually creating a local contact for each external user is unnecessary.

Answer

Deploy a model-driven app to manage user registrations.

Answer

Configure Microsoft Entra ID as the identity provider.

Answer

Create a local contact record for each external user.

Question 14

A company is using Microsoft Copilot Studio to build a copilot for employee onboarding. The copilot must authenticate users to provide personalized information. The company uses Azure AD (now Microsoft Entra ID) for identity management. Which authentication method should the administrator configure in Copilot Studio?

Accepted Answer

Microsoft Entra ID (Azure AD) authentication. Microsoft Entra ID (Azure AD) authentication is the correct choice because the company uses Microsoft Entra ID for identity management, and Copilot Studio natively supports this authentication method to provide personalized, authenticated experiences. This allows the copilot to verify user identities via OAuth 2.0 and OpenID Connect, enabling access to user-specific data and context during onboarding.

Answer

Anonymous access

Answer

Manual authentication

Answer

SharePoint authentication

Question 15

A retail chain uses Power Apps for an inventory management app. Employees report that the app loads slowly. What is the most likely cause?

Accepted Answer

The app uses a non-delegable query on a large data source. The most likely cause of slow loading in a Power Apps inventory management app is a non-delegable query on a large data source. When a query cannot be delegated, Power Apps retrieves all records from the data source to the client device, then filters locally, causing significant performance degradation with large datasets. This is a common issue when using functions like `Filter` with unsupported operators or columns on large tables.

Answer

The app has too many controls per screen

Answer

The app uses too many screens

Answer

The app has complex formulas in OnStart