PL-900 Practice Exam 55 — 20 Questions

Question 1

Drag and drop the steps to set up a Microsoft Dataverse environment in the correct order.

Accepted Answer

Step 1: Sign in to the Power Platform admin center. Step 2: Navigate to Environments and click New environment. Step 3: Specify environment type, name, and region. Step 4: Add a database (if required) and create the environment.. The admin center is used to create environments, specifying type, region, name, and database.

Answer

Step 1: Add a database to an existing environment. Step 2: Sign in to the Power Platform admin center. Step 3: Navigate to Environments and click New environment. Step 4: Specify environment type, name, and region.

Answer

Step 1: Sign in to the Power Platform admin center. Step 2: Specify environment type, name, and region. Step 3: Navigate to Environments and click New environment. Step 4: Add a database (if required) and create the environment.

Answer

Step 1: Sign in to the Power Platform admin center. Step 2: Navigate to Environments and click New environment. Step 3: Add a database (if required) and create the environment. Step 4: Specify environment type, name, and region.

Question 2

Which TWO components of Microsoft Power Platform are primarily used to create and deploy custom business applications without writing code?

Accepted Answer

Power Apps. Power Apps is a low-code platform for building custom app interfaces with drag-and-drop, while Power Pages enables creating external-facing websites (e.g., customer portals) as custom business applications. Both allow creation and deployment without writing code, whereas Power Automate is for workflow automation, not app creation.

Answer

Power BI

Answer

AI Builder

Answer

Power Automate

Question 3

A marketing team wants to create a public Power Pages site to showcase upcoming events. They need to update event details frequently without developer assistance. What is the recommended approach?

Accepted Answer

Store events in a Dataverse table and use a list component to display them.. Storing events in a Dataverse table and using a list component allows non-developers to manage data directly through a model-driven app or the portal's frontend, without needing to edit code. Option A is wrong because hardcoding event details in the page source requires manual code changes each time. Option C is wrong because while a SharePoint list could be used, it is not the recommended approach for Power Pages; Dataverse is the native data source and provides better integration with Power Platform. Option D is wrong because editing the Liquid template requires developer skills and is not a sustainable solution for frequent updates.

Answer

Hardcode the event details in the page source.

Answer

Use a SharePoint list and connect it to the portal.

Answer

Edit the Liquid template each time an event changes.

Question 4

You need to restrict access to a specific page on a Power Pages site to only authenticated users from your organization. Which authentication provider should you configure?

Accepted Answer

Microsoft Entra ID. Microsoft Entra ID is used for organizational identity. Option B is wrong because Azure AD B2C is for external identities. Option C is wrong because local authentication is for generic users. Option D is wrong because LinkedIn is not supported natively.

Answer

Answer

Azure AD B2C

Answer

Local authentication

Question 5

Which THREE of the following are capabilities of Power Pages? (Choose three.)

Accepted Answer

Integrate with Microsoft Copilot Studio for chatbots. Power Pages enables users to create low-code, responsive websites (Option E), integrate with Microsoft Copilot Studio for chatbots (Option A), and connect to Microsoft Dataverse as a data source (Option D). Option B (real-time co-authoring in Word) is not a Power Pages feature; it's related to Office apps. Option C (scheduled data refresh) is a Power BI feature, not Power Pages.

Answer

Real-time co-authoring in Microsoft Word

Answer

Schedule data refresh for reports

Question 6

A Power Pages site needs to integrate a Microsoft Copilot Studio chatbot to answer customer questions. What must be done to add the chatbot to the portal?

Accepted Answer

Add the Copilot Studio chatbot component to a page and configure it with the bot's details.. The correct approach is to use the built-in Chatbot component in Power Pages. You add it to a page and configure it with the Copilot Studio bot's ID or URL. Option A is incorrect because Liquid code is not needed; the component abstracts the API calls. Option C is incorrect because embedding via iFrame is not the recommended method and may cause functionality issues. Option D is incorrect because the native component is already available; no third-party plugin is required.

Answer

Write custom Liquid code to call the Copilot Studio API.

Answer

Embed the chatbot using an iFrame in a web template.

Answer

Install a third-party chatbot plugin from the Power Platform marketplace.

Question 7

You are a Power Platform administrator for a government agency that uses Power Pages to provide a public portal for business license renewals. The portal includes a multi-step form for users to enter contact information, business details, and payment. Recently, users have reported that the form frequently times out during the payment step, and some submissions are lost. You need to ensure that partial submissions are saved and users can resume from where they left off. Your solution must minimize development effort and work within Power Pages capabilities. What should you do?

Accepted Answer

Enable the 'Save Progress' feature on the multi-step form to allow users to save and resume.. Power Pages multi-step forms support saving partial progress by enabling the 'Save Progress' feature, which stores data in Dataverse and allows users to resume later. Option D directly addresses this requirement without custom development. Option A (Power Automate) would require additional setup and may not preserve form state. Option B (Azure Functions) is overkill and not needed. Option C (JavaScript local storage) is complex and error-prone, and would not integrate with Power Pages' built-in capabilities.

Answer

Create a Power Automate flow that saves form data to a SharePoint list after each step.

Answer

Implement an Azure Function that caches form data in a Redis cache and provides a resume endpoint.

Answer

Use JavaScript to store form data in the browser's local storage and restore it on page load.

Question 8

You are designing a Power Automate flow that processes sensitive employee data from Dataverse. The flow must run in a secure environment and be triggered by changes to a table that supports auditing. The company policy requires that all flows handling sensitive data use managed identities for authentication and execute within a dedicated environment with data loss prevention (DLP) policies applied. Which combination of features should you use?

Accepted Answer

Solution-aware automated flow deployed to a dedicated environment with a managed identity. A solution-aware flow can be packaged and deployed to a dedicated environment with DLP policies, and a managed identity (now service principal) provides secure authentication. Option A is incorrect because instant flows are manually triggered, not triggered by data changes. Option B is incorrect because the 'When a row is modified' trigger does not use service principal; it uses the owner's credentials. Option C is incorrect because automated flows can be triggered by Dataverse changes, but the 'Run only for the flow owner' setting does not use managed identity.

Answer

Instant flow with user connection reference

Answer

Automated flow using the 'When a row is modified' trigger with a service principal connection

Answer

Automated flow with the 'Run only for the flow owner' setting

Question 9

A retail company uses Power BI to analyze sales data. They want to allow store managers to view their own store's sales but not other stores. Which Power BI feature should they implement?

Accepted Answer

Row-level security (RLS). Row-level security (RLS) in Power BI allows you to restrict data access for specific users based on roles and filters. By defining a role that filters sales data by store ID and assigning store managers to that role, each manager can only see their own store's sales, meeting the requirement without duplicating reports or data.

Answer

Power Apps embedding

Answer

Power Automate flows to filter data

Answer

Microsoft Copilot Studio

Question 10

A healthcare provider wants to digitize patient intake forms. The solution must comply with HIPAA and allow patients to fill forms on their own devices. The data should be stored securely, and staff should receive notifications when a form is completed. Which approach using Power Platform should they take?

Accepted Answer

Use Power Pages for the patient portal, Dataverse for storage, and Power Automate for notifications. Power Pages provides a secure, externally-facing portal where patients can fill forms on their own devices, Dataverse (the underlying data platform) supports HIPAA-compliant storage with encryption and auditing, and Power Automate can trigger notifications to staff when a form is completed. This combination meets all requirements: patient self-service, secure storage, and automated alerts.

Answer

Build a Power Apps canvas app for patients and use Power Automate for notifications

Answer

Use Power BI dashboards for patients to submit data and Power Automate for notifications

Answer

Use Power Automate with AI Builder to process forms and store results in SharePoint

Question 11

A company wants to build a custom app for field technicians to log maintenance reports offline and sync when connected. Which Power Platform component should be used?

Accepted Answer

Power Apps. Power Apps is the correct component because it allows building custom canvas or model-driven apps that can run offline on mobile devices using the Power Apps mobile app. Field technicians can log maintenance reports without connectivity, and the app automatically syncs data to Dataverse or other data sources when a network connection is restored, leveraging the offline-first capability.

Answer

Power Pages

Answer

Power Automate

Answer

Power BI

Question 12

A Power Automate flow uses the trigger configuration shown. Users report that the flow does not start when a new order is added with Status = 'Pending'. What is the most likely cause?

Accepted Answer

The trigger condition only allows items with Status = 'New'. The trigger condition explicitly filters for items where Status equals 'New'. When a new order is added with Status = 'Pending', the condition evaluates to false, so the flow does not trigger. Trigger conditions in Power Automate act as a pre-filter on the trigger event, preventing the flow from running if the condition is not met.

Answer

The SharePoint dataset URL is incorrect

Answer

The flow is paused or turned off

Answer

The trigger only fires on modification, not creation

Question 13

Refer to the exhibit. An ARM template deploys a Power App with a connection to Office 365 Outlook. What is the purpose of the 'dependsOn' element?

Accepted Answer

To ensure the connection is deployed before the app. The dependsOn element ensures that the connection resource is created before the app resource, because the app references the connection. Option B is correct. Option A is wrong because the order is connection then app. Option C is wrong because dependsOn does not affect pricing. Option D is wrong because dependsOn is about resource creation order, not deployment scope.

Answer

To deploy the resources to different regions

Answer

To ensure the app is deployed before the connection

Answer

To reduce the cost of the deployment

Question 14

A non-profit organization has deployed a Power Pages site for volunteer registration. The site uses Dataverse to store volunteer profiles and their availability. Volunteers can log in using their Microsoft Entra ID (formerly Azure AD) accounts. The organization now wants to extend the site to allow volunteers to sign up for specific shifts, which requires integration with a third-party scheduling API. The API requires an OAuth 2.0 client credentials flow with a client secret. You need to securely call this API from Power Pages without exposing the secret to client-side code. What should you do?

Accepted Answer

Create a Power Automate flow that calls the scheduling API using an HTTP action with OAuth 2.0, and call that flow from Power Pages using the 'Run a flow' button.. The correct approach is to create a Power Automate flow that calls the scheduling API using an HTTP action with OAuth 2.0 and client credentials. Power Automate runs server-side, so the client secret can be securely stored using environment variables or connector references, preventing client-side exposure. Option A (JavaScript with Fetch API) is insecure because the secret would be visible in client-side code. Option C (custom connector) stores secrets in the connector but is typically used for client-side calls and does not provide the same level of security for server-side execution. Option D (Azure Function) is a valid server-side option but adds unnecessary complexity compared to using Power Automate, which is natively integrated with Power Pages.

Answer

Use JavaScript with the Fetch API to call the scheduling API directly, embedding the client secret in a configuration file.

Answer

Create a custom connector for the API using OAuth 2.0 with a client secret stored in the connector.

Answer

Deploy an Azure Function that proxies the API calls and stores the secret in Azure Key Vault; call the function from Power Pages.

Question 15

A company needs to create a mobile app for field service technicians to view and update work orders. The app should work offline and sync when connected. Which type of Power App should they build?

Accepted Answer

Canvas app. A Canvas app is the correct choice because it supports offline capability via the Power Apps mobile player, which can cache data locally and sync changes when connectivity is restored. This is ideal for field service technicians who need to view and update work orders without constant internet access, as Canvas apps allow custom UI tailored to mobile scenarios and can leverage the Offline-first pattern with explicit sync logic.

Answer

SharePoint list app

Answer

Power Automate flow

Answer

Model-driven app

Question 16

An organization is using Microsoft Power Platform to build a compliance solution. They need to ensure that sensitive data in Dataverse is encrypted at rest and that access is audited. Which feature should they enable?

Accepted Answer

Customer-managed encryption key (CMK) and Audit logging. Customer-managed encryption key (CMK) provides control over the encryption key used to encrypt data at rest in Dataverse, ensuring sensitive data is encrypted with a key managed by the organization. Audit logging records all access and changes to data, enabling compliance auditing. Together, they directly address the requirements for encryption at rest and access auditing.

Answer

Data Loss Prevention (DLP) policies

Answer

Power Apps business rules

Answer

Microsoft Entra ID Conditional Access policies

Question 17

You are a Power Platform administrator for Contoso Ltd. The company uses Microsoft Copilot Studio to build a customer support copilot. The copilot has several topics for common issues. Recently, users report that when they ask about "refund policy," the copilot responds with unrelated information about shipping. You review the copilot and find that:
- There is a topic called "Refund Policy" with trigger phrases: "refund policy", "return policy", "money back".
- There is a topic called "Shipping Information" with trigger phrases: "shipping", "delivery", "refund policy".
- Both topics are active and have similar confidence thresholds.
- The "Shipping Information" topic was created last week by a new team member.
- The "Fallback" topic responds with "I'm sorry, I didn't understand."

You need to ensure that when users say "refund policy," the correct topic is triggered. You want to minimize changes to existing configurations. What should you do?

Accepted Answer

Remove the trigger phrase "refund policy" from the "Shipping Information" topic.. Removing the trigger phrase 'refund policy' from the 'Shipping Information' topic eliminates the conflicting trigger that causes the copilot to match the wrong topic. In Microsoft Copilot Studio, when multiple topics share the same trigger phrase and have similar confidence thresholds, the system may select the wrong topic based on recency or other scoring factors. By removing the duplicate phrase from the newer topic, the 'Refund Policy' topic becomes the only match for that phrase, ensuring the correct response.

Answer

Reorder topics so that "Refund Policy" appears before "Shipping Information" in the topic list.

Answer

Lower the trigger confidence threshold for the "Refund Policy" topic to 0.7.

Answer

Delete the "Shipping Information" topic and recreate it without the phrase "refund policy."

Question 18

Which TWO benefits does using Microsoft Power Platform provide to an organization?

Accepted Answer

Reduces the time needed to build business applications.. Power Platform reduces development time and enables business users to solve problems directly. It does not require heavy IT involvement for every change, and it is not limited to large enterprises.

Answer

Eliminates the need for any security governance.

Answer

Only benefits large enterprises with extensive IT resources.

Answer

Requires dedicated IT teams for every modification.

Question 19

Refer to the exhibit.

Get-MgDirectoryRole | Where-Object {$_.DisplayName -eq "Power Platform Administrator"} | Select-Object Id

An admin runs this Microsoft Graph PowerShell command and gets no output. What does this indicate?

Accepted Answer

The Power Platform Administrator role is not activated in the tenant. The command filters for a role with DisplayName exactly 'Power Platform Administrator', but the actual role name is 'Power Platform Administrator' (case-sensitive). If the command returns no output, the role may not be activated in the tenant. Option A is wrong because no output means no matching role found, not that the admin lacks permissions. Option C is wrong because no output does not indicate no roles exist; it indicates no matching role. Option D is wrong because the command is valid PowerShell.

Answer

The admin does not have permission to run the command

Answer

There are no directory roles in the tenant

Answer

The command syntax is incorrect

Question 20

Refer to the exhibit. You are deploying a Power Apps environment using an ARM template. The template deploys a Production environment with Dataverse and the D365_FieldService template. After deployment, you need to ensure that users can create model-driven apps based on the Field Service tables. What additional step is required?

Accepted Answer

Assign appropriate Dynamics 365 licenses to users and install the Field Service app in the environment. After deploying the environment with Dataverse and the Field Service template via ARM template, users need appropriate Dynamics 365 licenses (which include rights to use Field Service) and the Field Service app must be installed in the environment (typically done through the Power Platform admin center or license assignment). This step is required to make the Field Service tables available for model-driven app creation. Option B is incorrect because the ARM template already includes Dataverse, so no manual database addition is needed. Option C is incorrect because the deployed environment already contains the necessary template. Option D is incorrect because model-driven apps do not require Power Automate flows for basic functionality.

Answer

Add a Dataverse database manually after deployment

Answer

Create a new environment with a different template

Answer

Create a Power Automate flow to sync Field Service data