PL-900 Practice Test 2 — 25 Questions

Question 1

Which TWO are benefits of using Microsoft Power Platform for business process automation? (Select TWO)

Accepted Answer

It reduces development time compared to traditional coding.. Microsoft Power Platform provides pre-built connectors, templates, and low-code tools like Power Automate and Power Apps that drastically reduce the time required to build business process automation compared to writing code from scratch. This enables rapid development and iteration without the overhead of traditional software development lifecycles.

Answer

It can be used offline without any connectivity.

Answer

It requires no coding skills for any scenario.

Answer

It only works with Microsoft data sources.

Question 2

A business analyst wants to create a real-time dashboard showing sales performance from Dynamics 365 Sales data. Which tool should they use?

Accepted Answer

Power BI. Power BI is the correct tool for creating real-time dashboards because it is designed specifically for data visualization and business intelligence. It can connect directly to Dynamics 365 Sales data via the Dataverse connector or direct query mode, enabling live, interactive dashboards that refresh automatically as data changes.

Answer

Power Apps

Answer

Power Pages

Answer

Power Automate

Question 3

A healthcare organization is deploying Power Apps for patient intake. They must ensure that the app complies with HIPAA regulations. Which feature should they use to protect patient data at rest?

Accepted Answer

Enable Customer Managed Key (CMK) for the Power Platform environment.. Customer Managed Key (CMK) allows the healthcare organization to control the encryption key used to protect data at rest in their Power Platform environment. This ensures that even Microsoft cannot access the underlying data without the organization's key, which is a critical requirement for HIPAA compliance regarding data encryption at rest.

Answer

Require multi-factor authentication (MFA) for app users.

Answer

Enable audit logging in the Power Platform admin center.

Answer

Create a Data Loss Prevention (DLP) policy to restrict connectors.

Question 4

A company uses Power Automate flows that connect to SharePoint and Microsoft Entra ID. The administrator needs to ensure that the flows can access data only from approved data sources. What should the administrator configure?

Accepted Answer

Create a Data Loss Prevention (DLP) policy that restricts connectors to approved data sources. Data Loss Prevention (DLP) policies in the Power Platform allow administrators to control which connectors can be used together in flows and apps, effectively restricting flows to approved data sources like SharePoint and Microsoft Entra ID. By classifying connectors as Business or Non-Business, DLP policies prevent unauthorized data sharing between environments, which directly addresses the requirement to limit data access to approved sources.

Answer

Define SharePoint site permissions for the flows

Answer

Configure data policies in Power Apps settings

Answer

Set connector sharing permissions to limit access

Question 5

Refer to the exhibit. An administrator runs this PowerShell command against a Power Platform environment. What can the administrator conclude?

Accepted Answer

The environment is accessible only to members of the ContosoUsers security group. The PowerShell command `Get-AdminPowerAppEnvironment` returns the environment details, including the `SecurityGroupId` property. If this property is populated with a GUID, it indicates a security group is assigned to the environment, restricting access to its members. Since the exhibit shows a non-null `SecurityGroupId` for the ContosoUsers group, the environment is accessible only to members of that security group.

Answer

The environment creation failed

Answer

The environment has no security group assigned

Answer

The environment is a personal productivity environment

Question 6

An organization needs to create a custom app that displays data from Dynamics 365 Sales and allows users to update records. The app should automatically generate a responsive UI based on the data model. Which type of app should they build?

Accepted Answer

Model-driven app. A model-driven app is the correct choice because it automatically generates a responsive UI based on the underlying data model (e.g., Dynamics 365 Sales entities like Account, Contact, Opportunity). It provides built-in forms, views, and business process flows that allow users to view and update records without manual UI design, aligning with the requirement for automatic UI generation and data update capabilities.

Answer

Canvas app

Answer

Power Automate

Answer

Power Pages

Question 7

Which TWO of the following are valid environment types in Power Platform?

Accepted Answer

Production. Production and Sandbox are both valid environment types in Power Platform. Production environments are intended for live, end-user applications and data, while Sandbox environments are isolated, non-production environments used for development, testing, and training. Both support the full set of Power Platform capabilities, including Dataverse, Power Apps, Power Automate, and Power Virtual Agents.

Answer

Development

Answer

Trial

Answer

Preview

Question 8

A global organization uses Power Platform to manage IT support tickets. They have the following requirements: 1) Tickets must be routed to the appropriate team based on category. 2) The routing logic must be easy to update by non-developers. 3) All ticket data must be stored in a secure, auditable data source. Which THREE Power Platform components should they use?

Accepted Answer

Power Automate. Power Automate is correct because it provides the workflow automation needed to route tickets to the appropriate team based on category. Its low-code interface allows non-developers to easily update routing logic using triggers, conditions, and actions without writing code.

Answer

Copilot Studio

Answer

Power Apps

Question 9

You have a canvas app that uses a Microsoft Dataverse table. Users need to see only their own records. What is the most efficient method to implement this security?

Accepted Answer

Use the Filter function with User().Email or User().FullName.. The most efficient method is to use the Filter function with User().Email or User().FullName to filter records based on the current user. This approach leverages the app's built-in context without requiring additional security configuration. Option A is incorrect because removing datasource permissions undermines data security and is not a best practice. Option B is incorrect because while security roles can restrict access, they are more complex to set up and may not be the most efficient for simply filtering by user identity. Option D is incorrect because storing user ID in a global variable is less efficient and can be less secure compared to using the User() function directly in the filter.

Answer

Remove the datasource permissions and let the app handle all security.

Answer

Set up Dataverse security roles and assign them to users.

Answer

Store the user ID in a global variable and use it in queries.

Question 10

A small business wants to create a chatbot to answer common customer questions about store hours and return policies. Which Power Platform tool should they use?

Accepted Answer

Copilot Studio. Copilot Studio (formerly Power Virtual Agents) is the correct tool because it is specifically designed to create conversational AI chatbots without writing code. It allows the business to build a bot that answers common questions about store hours and return policies by defining topics and using natural language processing to interact with users.

Answer

Power BI

Answer

Power Automate

Answer

Power Apps

Question 11

A healthcare organization uses Power Apps to manage patient intake forms. The app is built on Dataverse and includes a field for medical record number (MRN) that must be unique. The app currently uses a text input, but duplicate MRNs have been entered. What is the best way to enforce uniqueness at the data layer?

Accepted Answer

Create a Dataverse alternate key on the MRN field. A Dataverse alternate key enforces uniqueness at the database level, preventing duplicate MRN values from being saved regardless of how data enters the system. This is the only option that operates at the data layer, ensuring integrity even if the app, a flow, or an external integration submits a record. Alternate keys are indexed and validated by Dataverse before commit, making them the proper solution for unique field constraints.

Answer

Use a Power Automate flow to check for duplicates after submission

Answer

Configure a business rule on the MRN field

Answer

Add a validation rule in the app to check for duplicates before submitting

Question 12

A Power Platform administrator needs to restrict data loss prevention (DLP) policies to prevent sensitive data from being shared with non-approved connectors. Which scope should the administrator apply?

Accepted Answer

Environment-level. Environment-level DLP policies allow administrators to apply data loss prevention rules to specific environments, ensuring that sensitive data is not shared with non-approved connectors within that environment. This granular control is necessary when different environments have different compliance requirements, such as separating development from production data flows.

Answer

Group-level

Answer

Tenant-level

Answer

User-level

Question 13

A company uses Microsoft Copilot Studio to create a custom copilot. The copilot needs to access customer data stored in a Dataverse table that contains sensitive information. The compliance team requires that data accessed by the copilot must be audited. What should the admin configure?

Accepted Answer

Enable auditing in Microsoft Purview and log copilot interactions.. Microsoft Purview auditing captures detailed logs of user and admin activities, including interactions with custom copilots built in Copilot Studio. By enabling auditing in Purview and logging copilot interactions, the admin can meet the compliance requirement to audit all data accessed by the copilot, ensuring a traceable record of sensitive customer data access.

Answer

Deploy Microsoft Sentinel to monitor copilot behavior.

Answer

Configure a DLP policy to block non-compliant data access.

Answer

Use Copilot Studio analytics to track usage.

Question 14

A company wants to enforce data loss prevention (DLP) policies for Power Automate flows. Which TWO actions can the administrator perform?

Accepted Answer

Block specific connectors from being used in flows. Administrators can block specific connectors from being used in Power Automate flows as part of a DLP policy, preventing data from being shared with unauthorized services. Option C is correct because DLP policies can be scoped to a specific environment, allowing granular control over connector usage within that environment. This enables the administrator to enforce data protection rules tailored to different business contexts.

Answer

Allow users to bypass DLP policies with administrator approval

Answer

Assign DLP policies to specific users

Answer

Inherit the tenant-level DLP policy for all environments

Question 15

A sales team uses a Canvas app to track leads. Users report that the app loads slowly when accessing on mobile devices. Which component should be optimized to improve performance?

Accepted Answer

Optimize data source connections and queries. Optimizing data source connections and queries directly reduces the amount of data transferred and the number of round trips between the Canvas app and its data source (e.g., Dataverse, SharePoint, SQL). On mobile devices, network latency and bandwidth are often constrained, so inefficient queries (e.g., loading all records instead of using filters) cause significant slowdowns. This is the primary performance lever for Canvas apps, as per Microsoft's guidance on app optimization.

Answer

Update the app version number

Answer

Increase the app icon size

Answer

Change the app's background color

Question 16

You are a Power Platform consultant for a large university that wants to build a public-facing Power Pages site for alumni. The site must allow alumni to register, update their profile, view upcoming events, and donate to the university. The university uses Microsoft Entra ID for staff and students, but alumni will use their personal email accounts to register. The security team requires that all data transmitted between the browser and the portal be encrypted. Additionally, the alumni relations team needs to send targeted emails to alumni based on their interests, which are captured during registration. The development team wants to use a low-code approach to integrate the donation functionality, which should process payments through a third-party payment gateway. You need to design the solution. Which of the following is the best approach?

Accepted Answer

Enable HTTPS for the site (default), store alumni profiles and interests in Dataverse, use Power Automate with a custom connector for payment processing, and use Power Automate to send targeted emails.. The best approach. Power Pages enables HTTPS by default, ensuring encrypted data transmission. Alumni can register using personal accounts via local authentication or external identity providers (like Microsoft Entra ID, but not required). Storing profiles and interests in Dataverse allows the alumni relations team to use Power Automate to send targeted emails based on interests. For payment processing, a custom connector in Power Automate can be built to call the third-party payment gateway, satisfying the low-code requirement. Option A is incorrect because using a custom web API with Liquid contradicts the low-code requirement and adds complexity. Option B is incorrect because requiring alumni to create Microsoft accounts and using Entra ID as the only provider would prevent alumni from using personal email accounts, which is a requirement. Option C is incorrect because using custom JavaScript for payment processing violates the low-code approach and may introduce security risks.

Answer

Create a custom web API in Azure to handle payments and call it from Power Pages using Liquid.

Answer

Configure Microsoft Entra ID as the only identity provider and require alumni to create a Microsoft account.

Answer

Use the Power Pages design studio to build the donation page with custom JavaScript to call the payment gateway API.

Question 17

A canvas app uses a Patch function to update a SharePoint list item. The update fails silently without error. What is the most likely cause?

Accepted Answer

The column name or data type in the Patch function does not match the SharePoint list.. When a Patch function fails silently, the most common cause is a mismatch between the column name or data type in the function and the actual SharePoint list schema. Power Apps does not throw an error for such mismatches; it simply does not apply the update. This is because the Patch function validates the data against the list's column definitions at runtime, and if the names or types don't align, the operation is ignored without raising an exception.

Answer

The user does not have permission to the SharePoint list.

Answer

The Patch function is being called with incorrect arguments.

Answer

The app is not using delegation.

Question 18

Which TWO are best practices for designing Power Automate flows in a production environment? (Select TWO.)

Accepted Answer

Use 'Configure Run After' to implement error handling.. Options B and E are correct. Using 'Configure Run After' allows you to specify actions to run based on the success, failure, or timeout of previous actions, which is essential for robust error handling in production flows. Option E, using secure inputs and outputs, prevents sensitive data from being displayed in flow run histories, protecting confidential information. Option A is incorrect because disabling logging would hinder troubleshooting and monitoring of production flows. Option C is incorrect because nesting 'Apply to each' actions can lead to performance degradation and throttling; instead, use parallel branches or optimized data processing. Option D is incorrect because hardcoding connection references reduces maintainability and security; use connection references stored in environments or Azure Key Vault for flexibility and security.

Answer

Disable flow logging to improve performance.

Answer

Nest Apply to each actions to handle large datasets.

Answer

Hardcode connection references for simplicity.

Question 19

You are a data analyst at a manufacturing company that uses Microsoft 365 and Power BI. The company has a Power BI tenant with Free, Pro, and Premium Per User (PPU) licenses. Your team has created a Power BI report that visualizes production line efficiency from a SQL Server database on-premises. The report is published to a workspace assigned to a PPU capacity. You need to ensure that all 50 users in the production department can view the report on their mobile devices, with data refreshing every 30 minutes. The users have a mix of Free and Pro licenses. The report uses DirectQuery mode to the on-premises SQL Server. You have configured an on-premises data gateway in personal mode. Users report that the report is slow and sometimes fails to load. What should you do to improve performance and reliability while meeting the refresh requirement?

Accepted Answer

Switch the on-premises data gateway from personal mode to standard mode and add additional gateways to the cluster.. The report uses DirectQuery mode, which requires a standard (on-premises data gateway) mode to handle concurrent queries efficiently. Personal mode is limited to a single user and cannot scale to support 50 users, causing slow performance and failures. Adding additional gateways to a standard mode cluster distributes the query load, improving reliability and performance while maintaining the 30-minute refresh requirement via DirectQuery.

Answer

Move the report to a shared capacity and assign all users Pro licenses.

Answer

Change the report from DirectQuery to Import mode and configure scheduled refresh every 30 minutes.

Answer

Assign all users Premium Per User licenses to ensure they can view the report.

Question 20

A Power Pages site needs to display a dynamic banner that changes based on the user's language preference. The banner text is stored in multiple languages. Which Power Pages feature should be used to manage the multilingual content?

Accepted Answer

Content snippets. Content snippets in Power Pages are used to store localized text strings. They support multiple languages and can be referenced in Liquid templates to display content based on the user's language. Option A is incorrect because web templates are for custom page layouts. Option C is incorrect because basic forms are for data entry. Option D is incorrect because page templates define the overall page structure.

Answer

Web templates

Answer

Basic forms

Answer

Page templates