PL-900 Practice Exam 52 — 20 Questions

Question 1

You need to restrict access to a specific page on a Power Pages site to only authenticated users from your organization. Which authentication provider should you configure?

Accepted Answer

Microsoft Entra ID. Option A is correct because Microsoft Entra ID is used for organizational identity. Option B is wrong because Azure AD B2C is for external identities. Option C is wrong because local authentication is for generic users. Option D is wrong because LinkedIn is not supported natively.

Answer

Answer

Azure AD B2C

Answer

Local authentication

Question 2

A company wants to create a public-facing website for customers to submit support tickets, view their ticket history, and update their profile information. Non-authenticated users should only see a welcome page and login option. Which Power Pages feature should be used to control access to pages based on authentication status?

Accepted Answer

Page permissions. Page permissions in Power Pages control access to pages based on user roles and authentication status. Web roles define groups, and page permissions are assigned to those roles. Option A is incorrect because page templates define layout, not access. Option B is incorrect because content snippets are reusable text/HTML, not access control. Option D is incorrect because list forms are for data entry, not page access.

Answer

Content snippets

Answer

List forms

Answer

Page templates

Question 3

Which THREE of the following are capabilities of Power Pages? (Choose three.)

Accepted Answer

Integrate with Microsoft Copilot Studio for chatbots. Power Pages enables users to create low-code websites (Option A), integrate with Microsoft Copilot Studio for chatbots (Option B), and connect to Dataverse as the primary data source (Option D). Option C (real-time co-authoring in Word) is not a Power Pages feature; it's related to Office apps. Option E (scheduled data refresh) is a Power BI feature, not Power Pages.

Answer

Real-time co-authoring in Microsoft Word

Answer

Schedule data refresh for reports

Question 4

A company wants to build a Power Pages site that allows external partners to submit project proposals. The proposals should be stored in Dataverse. What is the first step to create the necessary data structure?

Accepted Answer

Create a custom table in Dataverse. Option A is correct because you need to create a custom table in Dataverse to store the proposals. Option B is wrong because Power Pages uses Dataverse, not SharePoint. Option C is wrong because Excel is not a data source for Power Pages. Option D is wrong because Power Automate creates flows, not data structures.

Answer

Create a Power Automate flow to collect data

Answer

Create a SharePoint list

Answer

Create an Excel file in OneDrive

Question 5

A company wants to create a public-facing website where customers can submit support tickets and view their status. The site must allow anonymous users to submit tickets but require authentication to view ticket details. Which Power Pages feature should be used to configure this behavior?

Accepted Answer

Configure page permissions to allow anonymous users to submit tickets and authenticated users to view details.. Option A is correct because page permissions in Power Pages allow you to restrict access to specific pages based on the user's authentication status. Option B is wrong because web roles define user permissions, not page-level access. Option C is wrong because the Liquid template engine is used for rendering dynamic content, not for access control. Option D is wrong because Dataverse tables store data, but they do not control page access.

Answer

Assign web roles to anonymous and authenticated users to control page access.

Answer

Use Liquid template tags to conditionally show ticket details based on user authentication.

Answer

Store ticket visibility settings in a Dataverse table and filter records based on user authentication.

Question 6

Which TWO of the following are required to set up a Power Pages site that allows external users to sign in using their social media accounts?

Accepted Answer

Set up the social identity provider in the Power Pages admin center.. Options C and D are correct. To enable social login, you need to configure the identity provider (e.g., Facebook, Google) in the Power Pages admin center and provide the client ID and secret from the social platform. Option A is wrong because Microsoft Entra ID is for organizational accounts, not social. Option B is wrong because a local contact record is created after authentication, not before. Option E is wrong because a model-driven app is not required for authentication.

Answer

Deploy a model-driven app to manage user registrations.

Answer

Configure Microsoft Entra ID as the identity provider.

Answer

Create a local contact record for each external user.

Question 7

A small business wants to create a simple public-facing website to showcase their services and allow customers to book appointments. They have no existing IT infrastructure and want to use a low-code solution that integrates with Microsoft 365 for email notifications. They also need to manage appointment data without building a custom database. You recommend Power Pages. What is the most efficient way to set up the appointment booking feature?

Accepted Answer

Create a new Dataverse table for appointments, then use the Power Pages 'List and Form' template to allow users to view available slots and submit bookings.. Power Pages provides a 'List and Form' template that can be based on a Dataverse table. Option D is the simplest. Option A (SharePoint) is not recommended for structured data. Option B (Excel) is not a scalable database. Option C (Power Automate) is not a data storage solution.

Answer

Build a Power Automate portal that accepts form submissions and writes to a Dataverse table.

Answer

Use SharePoint lists to store appointments and embed the list in a Power Pages page using an iframe.

Answer

Use Excel Online as the backend and connect via Power Automate to create appointments from the portal.

Question 8

Refer to the exhibit. A Power Pages site has an entity permission configured as shown. A user assigned to the 'Support Staff' web role reports that they cannot see any cases when visiting the case list page. Other users with the same role can see cases. What is the most likely issue?

Accepted Answer

The user is not assigned to the 'Support Staff' web role.. The entity permission has a scope of 'Global', which means it applies to all records. However, if the user is not authenticated or the web role assignment is not effective, they may not see records. But the most likely issue from the configuration is that the entity permission is set to 'Read' only, and the user might need additional permissions or the list view may be restricted by page permissions. However, the question states other users with the same role can see cases, so the user's role assignment might be missing or incorrect. Option B is incorrect because the permission is explicitly set to 'Read'. Option C is incorrect because the scope is already Global. Option D is incorrect because the entity name is correct.

Answer

The entity name is misspelled; it should be 'cases'.

Answer

The scope should be 'User' instead of 'Global'.

Answer

The permission type should be 'Write' to see records.

Question 9

A company wants to allow external users to access a Power Pages site without requiring them to sign in. Which authentication setting should be configured?

Accepted Answer

Enable anonymous access in the site settings. Option A is correct because enabling anonymous access allows users to browse without signing in. Options B and C are wrong because they require authentication. Option D is wrong because web roles are for authorization, not for enabling anonymous access.

Answer

Configure Microsoft Entra ID as the identity provider

Answer

Set up local authentication with username and password

Answer

Create a web role that grants access to everyone

Question 10

A Power Pages site allows external vendors to register and submit invoices. The site uses Microsoft Entra ID for authentication. Recently, some vendors reported they cannot log in and receive an error about insufficient permissions. What is the most likely cause?

Accepted Answer

The vendors have not been invited as guest users in the Microsoft Entra ID tenant.. Option B is correct because when using Microsoft Entra ID, the vendor must be invited as a guest user in the tenant, and if not, they will get an access error. Option A is wrong because the issue is about authentication, not licensing. Option C is wrong because cookies are not the primary issue. Option D is wrong because the identity provider is configured.

Answer

The identity provider for the site is not configured.

Answer

The site's cookie settings block third-party authentication.

Answer

The vendors do not have a Power Pages license.

Question 11

Refer to the exhibit. An organization is configuring IP address and domain restrictions for a Power Pages site. The policy JSON allows traffic from the 131.107.0.0/16 IP range and from contoso.com domain. A user from IP 192.168.1.10 with an email user@fabrikam.com tries to access the site. What will happen?

Accepted Answer

Access is denied because the IP is not in the allowed range and the domain is not contoso.com. Option C is correct because the policy only allows IPs in the 131.107.0.0/16 range and domains from contoso.com. The user's IP is not in the allowed range and the domain is not contoso.com, so access is denied. Option A is wrong because the IP is not allowed. Option B is wrong because the domain is not allowed. Option D is wrong because both conditions fail.

Answer

Access is granted because the domain is not disallowed

Answer

Access is granted because one of the conditions could be met

Answer

Access is granted because the IP is not in the disallowed list

Question 12

A Power Pages site includes a form that submits data to a Dataverse table. The form has a lookup field to select a related record. The related table has over 10,000 records. What is the best practice to optimize the lookup field's performance?

Accepted Answer

Configure the lookup to use a 'Quick Find' view and limit the number of results. Option C is correct because enabling quick find and setting a view with filters limits the data returned, improving performance. Option A is wrong because disabling search would hinder usability. Option B is wrong because a dropdown with 10,000 items would be slow. Option D is wrong because a text field would not provide the relationship needed.

Answer

Disable search in the lookup field

Answer

Replace the lookup with a text field

Answer

Use a dropdown list instead of a lookup

Question 13

Which TWO of the following are valid ways to integrate AI capabilities into a Power Pages site?

Accepted Answer

Embed a Power Virtual Agents chatbot.. Option A and C are correct. Power Pages supports embedding Power Virtual Agents chatbots and using AI Builder models for scenarios like form processing. Option B is wrong because Azure Cognitive Search is not directly integrated; you would use search via Dataverse or external. Option D is wrong because custom machine learning models cannot be directly hosted in Power Pages. Option E is wrong because Azure OpenAI Service is not directly integrated; you would need custom development.

Answer

Integrate Azure OpenAI Service via a custom connector.

Answer

Deploy a custom machine learning model as a web service and call it from Liquid.

Answer

Add Azure Cognitive Search to provide AI-powered search.

Question 14

A university uses Power Pages to create an alumni portal where graduates can update their contact information, register for events, and make donations. The portal uses Dataverse and allows both authenticated and anonymous access. The university wants to comply with GDPR and allow users to request deletion of their personal data. They need a mechanism for users to submit a deletion request, which then triggers a manual review process before data is deleted. You need to implement this in Power Pages with minimal effort. What should you do?

Accepted Answer

Build a custom form in Power Pages that submits to a Dataverse table 'Deletion Requests', and create a Power Automate flow that notifies admins and performs the deletion after approval.. Power Pages supports building a form that creates a record in Dataverse, which can then trigger a Power Automate flow for the review process. Option B is direct. Option A (Power Apps portal) is the old name for Power Pages. Option C (manual deletion) is not automated. Option D (Azure Logic Apps) is possible but requires external configuration.

Answer

Add a hyperlink to the portal that sends an email to an admin mailbox, and have admins manually delete the data.

Answer

Use an Azure Logic App to expose an HTTP endpoint, and have the portal send data via a custom JavaScript call.

Answer

Create a Power Apps portal (legacy) form that writes to a 'Deletion Requests' Dataverse table and configure a Business Process Flow for review.

Question 15

A Power Pages site includes a page that displays a list of products from a Dataverse table. The marketing team wants to allow anonymous users to view the list but not see product prices. What is the best approach to restrict access to the price column?

Accepted Answer

Configure column-level security profiles to hide the price column for anonymous users. Option B is correct because column-level security profiles can restrict visibility of specific columns for different roles. Option A is wrong because it would hide the entire list. Option C is wrong because removing a column affects the table globally. Option D is wrong because web roles control page access, not column visibility.

Answer

Remove the price column from the Dataverse table

Answer

Set the list component to read-only

Answer

Create a web role that denies access to the price column

Question 16

Which THREE of the following are common use cases for Power Pages?

Accepted Answer

Community forum for product discussions.. Options A, B, and D are correct. Power Pages is used for public-facing websites like customer portals, community sites, and employee self-service. Option C is wrong because Power Pages is not used for internal back-office apps; those are typically built with Power Apps. Option E is wrong because event registration is a specific scenario that can be built, but it's not a top-level common use case.

Answer

Internal employee expense reporting app.

Answer

Event registration and management system.

Question 17

A Power Pages site is experiencing slow load times for a page that displays a list of products from a Dataverse table. The page uses a Liquid template with a fetch query that retrieves all products without filtering. Which change would most improve performance?

Accepted Answer

Modify the fetch query in the Liquid template to include a filter, such as only active products.. Option B is correct because adding a filter to the fetch query reduces the amount of data retrieved, which improves load times. Option A is wrong because the page caching settings in the Power Pages admin center cache the entire page, but if the data changes frequently, caching may not be appropriate. Option C is wrong because the out-of-the-box list component may still load all data. Option D is wrong because enabling CDN helps with static content, not dynamic data from Dataverse.

Answer

Enable the content delivery network (CDN) for the site.

Answer

Adjust the page caching settings in the Power Pages admin center.

Answer

Replace the Liquid template with the out-of-the-box list component.

Question 18

Which THREE of the following are capabilities of Power Pages that help ensure compliance with data protection regulations?

Accepted Answer

Ability to enforce HTTPS and SSL/TLS.. Options A, B, and E are correct. Power Pages supports IP address restrictions, content delivery network (CDN) is a performance feature, not compliance. Option C is wrong because data loss prevention (DLP) policies are set at the environment level in Power Platform, not specifically in Power Pages. Option D is wrong because audit logging is available in Dataverse but not built-in to Power Pages.

Answer

Built-in audit logging of all user actions.

Answer

Data loss prevention (DLP) policies for connectors.

Question 19

You are designing a Power Pages site for a non-profit organization. The site will have multiple sections, each managed by different departments. The IT department wants to ensure that only authorized users can edit the site's content. Which approach should you recommend?

Accepted Answer

Create web roles in Power Pages and assign users to those roles to grant editing permissions.. Option A is correct because Power Pages uses web roles to control who can manage site content. Option B is wrong because Microsoft Entra ID groups can be used in conjunction with web roles, but they are not the direct permission mechanism. Option C is wrong because the admin center is for administrative tasks, not content editing. Option D is wrong because Power Automate can be integrated but is not the primary permission mechanism.

Answer

Implement a custom approval workflow using Power Automate.

Answer

Provide all department heads with administrative access to the Power Pages admin center.

Answer

Use Microsoft Entra ID groups to grant access to the site's editing features.

Question 20

A company wants to build a public-facing website for citizens to submit permit applications and check status. They need to integrate with an existing Microsoft Dataverse database and support anonymous access for browsing but require authentication for submissions. Which TWO features of Power Pages should they use?

Accepted Answer

Anonymous page access for public content. Power Pages allows anonymous access by default for content pages, and requires authentication for forms that submit data. Option B enables anonymous browsing, and option D uses Dataverse as the data source. Option A (Azure AD B2C) is for external identity providers but not required for anonymous browsing; Option C (Power Automate) is not a page feature; Option E (Power BI) is for analytics, not form submission.

Answer

Azure AD B2C for external user authentication

Answer

Power Automate flows for form submission

Answer

Power BI embedded reports for status tracking