PL-900 Practice Test 21 — 15 Questions

Question 1

A user reports that they cannot create a new Power App in the default environment. The administrator checks that the user has a Power Apps license, but the user still cannot create apps. What is the most likely cause?

Accepted Answer

The environment is not enabled for app creation. If the environment is not enabled for app creation, users cannot create apps even with a license. Option A is wrong because the user has a license. Option B is wrong because browser issues would not prevent creation entirely. Option D is wrong because mobile access is not required for creation.

Answer

The user does not have a Power Apps license

Answer

The user does not have a mobile device

Answer

The user is using an unsupported browser

Question 2

An organization is preparing for a Power Platform rollout. They need to ensure that only licensed users can create new environments, and that environment creation is audited. Additionally, they want to restrict which connectors can be used in production environments. Which THREE capabilities should they use?

Accepted Answer

Data Loss Prevention (DLP) policies. Power Platform Admin Center provides environment creation controls. Licensing must be managed in Microsoft 365 admin center to restrict creation to licensed users. DLP policies block unwanted connectors.

Answer

Power Virtual Agents bot

Answer

Power Apps mobile app

Question 3

An organization has multiple Power Platform environments including production, development, and test. They want to ensure that changes made in development are promoted to test and then to production, with approval gates. Which feature should they use?

Accepted Answer

Use managed solutions with environment variables and configure deployment pipelines.. Option D is correct because managed solutions with environment variables and ALM (Application Lifecycle Management) using pipelines or Azure DevOps provide structured promotion with approvals. Option A is wrong because simply using unmanaged solutions does not enforce approval gates. Option B is wrong because Power Apps check-in is not part of ALM. Option C is wrong because exporting to a SharePoint library lacks approval controls.

Answer

Use Power Apps check-in feature and version history.

Answer

Use unmanaged solutions and export/import manually between environments.

Answer

Export solutions to a SharePoint document library and import from there.

Question 4

Refer to the exhibit. A Power Platform admin creates a DLP policy with this JSON configuration. What is the effect?

Accepted Answer

The SharePoint connector is blocked in all production environments.. Option D is correct because the JSON shows a DLP policy that blocks the SharePoint connector in all environments of type Production. Option A is wrong because the policy does not specify a specific environment. Option B is wrong because the policy blocks SharePoint, not restricts it. Option C is wrong because the policy does not mention SharePoint Online vs on-premises.

Answer

The policy blocks all SharePoint Online and SharePoint on-premises connectors.

Answer

The SharePoint connector is restricted to the business data group.

Answer

The SharePoint connector is blocked only in the default environment.

Question 5

A company uses Power BI dashboards to monitor real-time production metrics. The dashboards use DirectQuery to a SQL Server database. Users report that the dashboards are slow during peak hours. What is the most effective first step to improve performance?

Accepted Answer

Optimize the SQL queries used in the dataset. Option B is correct because optimizing the source query can reduce the amount of data processed. Option A is wrong because increasing capacity may help but is not the first step. Option C is wrong because switching to Import mode would require scheduled refreshes and is not real-time. Option D is wrong because aggregations are useful but creating them without query optimization may not address the root cause.

Answer

Create aggregations in the dataset

Answer

Increase the Power BI Premium capacity

Answer

Switch the dataset to Import mode

Question 6

A global organization has multiple geographic regions and needs to comply with data residency requirements. Each region must have its own Power Platform environment with data stored locally. What is the recommended approach to manage these environments?

Accepted Answer

Create separate environments for each region within the same tenant.. The correct approach is to create separate environments for each region, as Power Platform supports multiple environments within the same tenant. Option A is incorrect because a single environment cannot enforce data residency for multiple regions. Option B is incorrect because creating a separate tenant per region complicates management and is not recommended. Option D is incorrect because using Microsoft Entra ID groups does not address data residency.

Answer

Use Microsoft Entra ID conditional access policies to enforce data location.

Answer

Create separate tenants for each region.

Answer

Create a single environment and use data policies to restrict data access by region.

Question 7

Which TWO are valid methods to create a new Power Platform environment?

Accepted Answer

Using the Power Platform admin center web interface.. Environments can be created through the Power Platform admin center and via the Power Platform API. Option B is incorrect because SharePoint is not used. Option C is incorrect because the Teams admin center does not create environments. Option E is incorrect because the Power Apps mobile app does not create environments.

Answer

Using the Microsoft Teams admin center.

Answer

Using the Power Apps mobile app.

Answer

Using the SharePoint admin center.

Question 8

A company has multiple Power Platform environments. The administrator notices that a production environment is running low on storage. The administrator needs to free up space without disrupting active users. What should the administrator do FIRST?

Accepted Answer

Identify large or unused solutions and remove them. Identifying large or unused solutions helps target cleanup. Option A is wrong because deleting audit logs may not free significant space. Option B is wrong because adding storage is a cost, not cleanup. Option D is wrong because disabling plugins may break functionality.

Answer

Delete old audit logs

Answer

Disable unused plugins

Answer

Add more storage to the environment

Question 9

A global consulting firm uses Power Platform with environments in multiple regions. They need to enforce data loss prevention (DLP) policies that are consistent across all environments, but allow exceptions for specific connectors in a single environment used for a high-security client project. Which three components should they configure?

Accepted Answer

Environment-level DLP policy. Environment-level DLP policies can be created to override tenant-level policies for specific environments. The tenant-level DLP policy provides a baseline. Connector classification (e.g., Blocked, Business, Non-business) is part of DLP policy configuration.

Answer

Power Apps component library

Answer

Power Automate Cloud Flow

Question 10

A government agency uses Power Platform with strict compliance requirements. They need to retain all audit logs of user activities within Power Platform for at least 7 years. The agency uses Microsoft Purview for compliance and Microsoft Sentinel for security monitoring. The admin needs to ensure that all Power Platform audit events are captured and retained for the required period. What should the admin do?

Accepted Answer

Configure a retention policy in Microsoft Purview for the Power Platform audit logs.. Power Platform audit logs are routed to the Microsoft 365 Audit log, which can be integrated with Microsoft Purview for retention policies. The admin should configure a retention policy in Microsoft Purview to retain audit logs for 7 years.

Answer

Export audit logs to Azure Blob Storage and set a retention policy there.

Answer

Use Microsoft Sentinel to store and retain the logs for 7 years.

Answer

Enable audit logging in each Power Platform environment's settings.

Question 11

Which TWO actions can a Power Platform admin perform in the Power Platform admin center to manage environments? (Choose two.)

Accepted Answer

Create and delete environments.. Options A and D are correct. Admin can create and delete environments, and manage environment security roles. Option B is wrong because assigning licenses is done in Microsoft 365 admin center. Option C is wrong because creating Microsoft Entra ID groups is done in Entra admin center. Option E is wrong because modifying Dataverse schema is done in Power Apps maker portal.

Answer

Modify Dataverse table schemas.

Answer

Assign Power Apps licenses to users.

Answer

Create Microsoft Entra ID security groups.

Question 12

An organization uses Power Apps portals to allow external customers to submit support tickets. The portal uses Microsoft Entra ID for authentication. The security team wants to require multi-factor authentication (MFA) for external portal users. What is the best approach?

Accepted Answer

Create a Conditional Access policy in Microsoft Entra ID that requires MFA for the portal application. Option B is correct because MFA can be enforced via a Conditional Access policy targeting the portal application. Option A is wrong because turning on MFA for all Entra ID users would affect internal users. Option C is wrong because portal authentication settings do not include MFA enforcement. Option D is wrong because MFA enforcement at the identity provider level is not granular for the portal only.

Answer

Enable MFA for all Microsoft Entra ID users

Answer

Use a third-party identity provider that supports MFA

Answer

Configure MFA in the Power Apps portal authentication settings

Question 13

Refer to the exhibit.

{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "resources": [
    {
      "type": "Microsoft.PowerPlatform/enterprisePolicies",
      "apiVersion": "2021-01-01",
      "name": "myDlpPolicy",
      "location": "eastus",
      "properties": {
        "definition": {
          "$schema": "https://schema.management.azure.com/providers/Microsoft.PowerPlatform/policyDefinitions/2021-01-01/schema.json#",
          "rules": [
            {
              "name": "Block SharePoint",
              "action": "Block",
              "connectors": [
                "shared_sharepointonline"
              ]
            }
          ]
        }
      }
    }
  ]
}

An admin deploys this ARM template to create a DLP policy. After deployment, users report they can still use the SharePoint connector in Power Automate. What is the most likely reason?

Accepted Answer

The resource type should be 'Microsoft.PowerPlatform/dlpPolicies'. Option A is correct because the resource type 'Microsoft.PowerPlatform/enterprisePolicies' is used for creating policies, but the API version and properties may not be correct for DLP policies. The correct resource type for DLP policies is 'Microsoft.PowerPlatform/dlpPolicies'. Option B is wrong because the environment might not have the policy applied, but the template attempts to create a policy. Option C is wrong because the policy is created at the tenant level, not per environment. Option D is wrong because the policy name is set correctly.

Answer

The policy was not applied to the environment where users are working

Answer

The policy name does not match the connector name

Answer

The policy is applied at the tenant level and does not affect individual environments

Question 14

The exhibit shows a JSON snippet used to create a Power Platform environment via the Power Platform API. The administrator runs the script but the environment is created with the default language and currency instead of the specified values. What is the most likely reason?

Accepted Answer

The JSON syntax is invalid because of the empty securityGroupId.. The JSON uses "securityGroupId" as an empty GUID (all zeros). The correct property for Dataverse settings is "securityGroupId" but an empty GUID may be interpreted as null, causing the default to be used. However, the more likely issue is that the JSON structure is incorrect: the properties should be nested under "dataverse" properly, but the exhibit shows correct nesting. Another possibility: the API version used does not support these properties. But the most common cause is that the securityGroupId is invalid (empty) and the API ignores the entire dataverse block. Option A is incorrect because the location is correct. Option B is incorrect because the environment name is correct. Option C is incorrect because the syntax is valid.

Answer

The API version used does not support specifying language and currency.

Answer

The environment name "ContosoSales" is already in use.

Answer

The location "eastus" is not a valid Azure region for Power Platform.

Question 15

An administrator needs to manage multiple Power Platform environments across several tenants. The administrator wants to use a single tool to view environment details, apply updates, and configure settings for all environments. Which tool should the administrator use?

Accepted Answer

Power Platform Admin Center. The Power Platform Admin Center is the central tool for managing environments across tenants. Option A is wrong because PowerShell is a scripting tool, not a single interface for all tasks. Option B is wrong because Power Apps Maker Portal is for app creation. Option D is wrong because Microsoft 365 admin center does not manage Power Platform environments fully.

Answer

PowerShell cmdlets

Answer

Power Apps Maker Portal

Answer

Microsoft 365 admin center