PL-900 Practice Exam 58 — 20 Questions

Question 1

Refer to the exhibit. You are analyzing a Power Automate flow definition. The flow is intended to create a new user record in Dataverse and send an email notification when manually triggered or daily at 8 AM. However, when the flow runs on its schedule, it fails because the trigger output 'name' is empty. What is the most likely cause?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The schedule trigger does not provide a 'name' field in its outputs, causing the expression to fail.. A scheduled trigger in Power Automate does not include a 'name' field in its outputs, whereas a manual trigger (e.g., Power Apps or button) typically does. When the flow runs on its daily 8 AM schedule, the expression referencing trigger outputs 'name' evaluates to empty, causing the subsequent actions to fail. This is a common mismatch between trigger types and expected output schemas.

Answer

The action 'CreateRecord' has an invalid entity name 'Users'.

Answer

The flow is configured to run only on manual trigger, ignoring the schedule.

Answer

The flow does not have permission to create records in Dataverse.

Question 2

A company uses Power BI to create reports from Dataverse data. The administrator needs to ensure that report creators can only see data from tables they have access to in Dataverse. Which security feature should the administrator configure?

Accepted Answer

Define row-level security (RLS) roles in Power BI and map them to Dataverse roles. Row-level security (RLS) in Power BI can be used to restrict data access at the row level, and by mapping Power BI RLS roles to Dataverse roles, report creators will only see data from tables they have access to in Dataverse. Option A is wrong because environment security group controls access to the environment, not data within reports. Option B is wrong because table-level permissions in Dataverse control access to the table itself, but when using Power BI to report on Dataverse data, the data is imported or queried; RLS in Power BI is needed to enforce row-level restrictions. Option D is wrong because the Environment Maker role allows creating resources in the environment but does not restrict data visibility in reports.

Answer

Set environment security group to include only report creators

Answer

Configure table-level permissions in Dataverse

Answer

Assign the 'Environment Maker' role to report creators

Question 3

Your organization uses Power Virtual Agents (now Copilot Studio) for customer service. You need to ensure that the bot can access customer data from a Dataverse table that contains sensitive information. What is the best approach to secure the data?

Accepted Answer

Assign appropriate security roles and field-level security to the bot's service principal.. Power Virtual Agents (Copilot Studio) uses a service principal to authenticate with Dataverse. By assigning appropriate security roles and field-level security to that service principal, you can grant the bot granular, least-privilege access to only the necessary customer data, ensuring sensitive information is protected while still enabling the bot to function.

Answer

Configure a data loss prevention (DLP) policy to block the bot from accessing the table.

Answer

Use the bot's authentication settings to require multi-factor authentication.

Answer

Restrict access to the environment to only the bot's service account.

Question 4

An organization uses Power Apps to manage inventory. The app uses a SharePoint list as the data source. Users report that when two employees update the same item simultaneously, data is lost. What is the best solution?

Accepted Answer

Enable versioning on the SharePoint list and modify the app to check the last modified timestamp before update. It directly addresses the root cause of data loss: concurrent updates overwriting each other. By enabling versioning on the SharePoint list, the app can retrieve the last modified timestamp before performing an update. If the timestamp has changed since the record was loaded, the app can detect a conflict and prompt the user to refresh, preventing silent overwrites. This pattern is known as optimistic concurrency control and is the standard approach for SharePoint-based Power Apps.

Answer

Switch the data source to Microsoft Dataverse

Answer

Restrict editing to one user at a time using permissions

Answer

Use Power Automate to create a flow that queues updates

Question 5

You are creating a Power Automate flow to copy files from a SharePoint document library to a OneDrive for Business folder. The flow triggers when a new file is created in SharePoint. After saving the flow, you get a warning that the flow uses a trigger that is not supported in the 'Solutions' context. What does this mean?

Accepted Answer

The chosen trigger cannot be used in a solution-aware flow.. The 'When a new file is created' trigger for SharePoint is not available in solution-aware flows (it is a non-solution trigger). Option A is wrong because the OneDrive for Business connector is licensed and supported. Option C is wrong because the flow can be saved outside a solution, but the warning indicates that the trigger cannot be used in a solution. Option D is wrong because the warning is informational and does not prevent the flow from running.

Answer

The OneDrive for Business connector is not licensed.

Answer

The flow cannot be saved outside a solution.

Answer

The flow will not run because of this warning.

Question 6

An organization has multiple Power Platform environments including production, development, and test. They want to ensure that changes made in development are promoted to test and then to production, with approval gates. Which feature should they use?

Accepted Answer

Use managed solutions with environment variables and configure deployment pipelines.. Managed solutions with environment variables and deployment pipelines provide a structured, automated way to promote solutions across environments with approval gates. This approach ensures that only managed solutions (which are locked and not directly editable) are deployed to production, while environment variables allow configuration values to change per environment without modifying the solution itself.

Answer

Use Power Apps check-in feature and version history.

Answer

Use unmanaged solutions and export/import manually between environments.

Answer

Export solutions to a SharePoint document library and import from there.

Question 7

Which TWO data sources can be directly connected to a Power Apps canvas app without using an on-premises data gateway? (Choose two.)

Accepted Answer

Microsoft 365 Outlook. Microsoft 365 Outlook is a cloud-based service that can be directly connected to a Power Apps canvas app using built-in connectors without requiring an on-premises data gateway. The Outlook connector uses Microsoft Graph API to access mail, calendar, and contacts, making it a native cloud-to-cloud integration.

Answer

Oracle Database on-premises

Answer

SAP on-premises

Answer

SQL Server on-premises

Question 8

An organization uses Dataverse as a data source for multiple Power Apps. They notice that records created in one app do not appear in another app until the page is refreshed. Which concept explains this behavior?

Accepted Answer

Caching of data by Power Apps. Power Apps caches data from Dataverse locally to improve performance and reduce network calls. When a record is created in one app, the cache in another app is not automatically invalidated, so the new record does not appear until the user manually refreshes the page or triggers a re-query. This caching behavior is by design to minimize latency and is controlled by the 'Enable data caching' setting in the app's advanced settings.

Answer

Different Dataverse environments used

Answer

Delegation limitations of the data source

Answer

Use of Patch mode instead of SubmitForm

Question 9

An app maker creates a canvas app that uses a Dataverse table with 100,000 records. The app includes a gallery that displays all records. Users experience long load times. What should the app maker do to improve performance without changing the data source?

Accepted Answer

Use delegable functions in the gallery's Items property. Using delegable functions (such as Filter, Sort, LookUp) in the gallery's Items property allows the query to be processed on the Dataverse server, returning only the necessary subset of records. This significantly reduces the amount of data transferred and improves performance for large datasets like 100,000 records. Option B is incorrect because it involves changing the data source, which is not allowed per the question. Option C is incorrect because increasing the data row limit in Dataverse settings does not address the delegation issue and may even worsen performance. Option D is incorrect because removing filters would cause the entire dataset to be loaded, making load times even longer.

Answer

Switch to a SharePoint list as the data source

Answer

Increase the data row limit in Dataverse settings

Answer

Remove all filters from the gallery

Question 10

Which TWO actions can a Power Platform administrator perform in the Power Platform admin center?

Accepted Answer

Create and delete environments. The Power Platform admin center provides administrators with the ability to create and delete environments, which are isolated containers for managing apps, flows, and data. This is a core administrative function that directly controls the lifecycle of Power Platform resources.

Answer

Manage SharePoint Online site collections

Answer

Manage Exchange Online mailboxes

Answer

Manage Microsoft Entra ID roles

Question 11

A Power Platform administrator wants to see the capacity usage of all environments in the tenant. Where should they look?

Accepted Answer

Power Platform admin center > Capacity. The Capacity page in the Power Platform admin center provides a tenant-level view of all capacity entitlements (database, file, log) and their consumption across environments. This is the dedicated location for monitoring capacity usage, including add-ons and storage overages, as documented in Microsoft's capacity management guidance.

Answer

Power Platform admin center > Environments

Answer

Power Platform admin center > Analytics

Answer

Power Platform admin center > Billing

Question 12

Which TWO of the following scenarios are best suited for Power Automate's cloud flows?

Accepted Answer

Automating approval processes in SharePoint.. Power Automate cloud flows can integrate with SharePoint to automate approval processes using built-in approval actions and triggers like 'When an item is created or modified'. Option B is correct because cloud flows can use the 'When a user is added to a group' trigger for Microsoft Entra ID (formerly Azure AD) to send a welcome email via connectors like Outlook or SendGrid, enabling real-time automation without on-premises infrastructure.

Answer

Moving files from an on-premises server to a cloud storage.

Answer

Automating data entry from a legacy desktop application.

Question 13

A company wants to build a Power Apps solution that integrates with Microsoft Teams. They want to embed the app directly into a Teams channel. Which type of app should they build?

Accepted Answer

Canvas app. Canvas apps can be embedded directly into a Teams channel using the Power Apps app in Teams. Option B is incorrect because AI Builder is not an app type; it is a feature for adding AI models to apps. Option C is incorrect because model-driven apps are designed for data-centric business applications and, while they can be added to Teams as a tab, they are not typically embedded directly into a Teams channel like a canvas app. Option D is incorrect because Power Virtual Agents are chatbots, not the type of app needed for embedding into Teams.

Answer

AI Builder

Answer

Model-driven app

Answer

Power Virtual Agents

Question 14

A non-profit organization wants to automate the process of sending thank-you emails to donors after a donation is recorded in a SharePoint list. Which Power Platform tool should they use?

Accepted Answer

Power Automate. Power Automate is the correct tool because it is designed to create automated workflows that trigger actions based on events, such as a new item being added to a SharePoint list. In this scenario, a Power Automate flow can be configured to run automatically when a donation is recorded, then send a thank-you email via an email connector (e.g., Outlook or SMTP). This directly addresses the need for process automation without manual intervention.

Answer

Power Apps

Answer

Power Virtual Agents

Answer

Power BI

Question 15

Your organization has a Power Apps portal that allows external users to submit support tickets. You need to ensure that only authenticated external users from specific domains can access the portal. What should you configure?

Accepted Answer

Configure the portal to use Microsoft Entra ID authentication and set up domain restrictions.. Power Apps portals can be configured to use Microsoft Entra ID (formerly Azure AD) as the identity provider, and within the portal settings you can restrict sign-in to users from specific domains. This ensures that only authenticated external users whose email domain matches the allowed list can access the portal, meeting the requirement without relying on IP filtering or obscurity.

Answer

Create a data loss prevention (DLP) policy that blocks external users.

Answer

Restrict access to the portal by IP address using a web application firewall.

Answer

Share the portal URL only with users from the allowed domains.

Question 16

An organization is deploying Power Apps to external customers for a self-service portal. They need to ensure that customer data is isolated from internal employee data. What is the best approach?

Accepted Answer

Create separate environments for internal and external users. Creating separate environments for internal and external users provides full tenant-level isolation of customer data from employee data. Each environment in Power Platform has its own databases, security settings, and data storage, ensuring that external customers cannot access internal resources even if security roles are misconfigured.

Answer

Use Data Loss Prevention (DLP) policies in the same environment

Answer

Add external customers as B2B guests in the same environment

Answer

Use the same environment with security role-based access

Question 17

A company wants to analyze customer feedback from surveys stored in Excel and create interactive reports. Which combination of Power Platform components is best?

Accepted Answer

Power BI and Power Automate. Power BI is the primary tool for creating interactive reports and dashboards from data sources like Excel, while Power Automate can be used to automate the ingestion or refresh of survey data from Excel into Power BI, enabling scheduled updates. Together, they directly address the requirement to analyze feedback and build interactive reports without needing custom app development.

Answer

Power Virtual Agents and Power BI

Answer

Power Apps and Power BI

Answer

Power Apps and Power Automate

Question 18

A global manufacturing company uses Microsoft Power Platform to manage its equipment maintenance processes. The company has over 10,000 maintenance technicians worldwide who use a Power Apps mobile app to report equipment issues and log repairs. The app connects to a common data service (Dataverse) that stores all maintenance records. Recently, the company experienced a data breach where a malicious user exploited a vulnerability in the app to access and delete maintenance records from multiple high-value machines. The security team traced the issue to the app's permissions model: the app was using a single service account with elevated privileges to perform all data operations. The company now wants to redesign the app's security to follow the principle of least privilege while maintaining usability for technicians. The technicians need to view their assigned work orders, create new issue reports, and update the status of their own repairs, but they should not be able to delete records or access records from other regions. Which approach should the company take?

Accepted Answer

Implement row-level security in Dataverse to restrict technicians to their own records and region, assign appropriate role-based access (create, read, update, no delete), and use individual user accounts.. It applies the principle of least privilege by using individual user accounts with Dataverse role-based security and row-level security (RLS). This ensures each technician can only create, read, and update their own assigned records within their region, while explicitly denying delete permissions. This approach eliminates the shared, over-privileged service account and enforces granular data isolation.

Answer

Replace the Power Apps app with a Power Automate flow that technicians trigger via email to submit and update records.

Answer

Configure each technician's individual user account with a basic user role in Dataverse, and remove the service account.

Answer

Create a separate Power Apps app for each region, each with its own service account that has restricted permissions to that region's data.

Question 19

Which THREE of the following are capabilities of model-driven apps? (Choose THREE.)

Accepted Answer

Business rules to enforce data validation on forms.. Correct answers: B, D, E. Option B: Business rules allow enforcing data validation on forms. Option D: Model-driven apps provide a unified interface across tablet and mobile devices. Option E: They have responsive design that adapts to screen size. Option A is incorrect because model-driven apps use predefined forms and views, not custom drag-and-drop layouts — that capability is for canvas apps. Option C is incorrect because the built-in camera control is a feature of canvas apps, not model-driven apps.

Answer

Ability to design custom layouts using drag-and-drop.

Answer

Built-in camera control to capture images.

Question 20

An administrator is planning to deploy a solution across multiple environments. Which THREE practices should they follow?

Accepted Answer

Create separate environments for development, test, and production. Microsoft best practices recommend using separate environments for development, test, and production to isolate changes, prevent accidental data loss, and support a structured application lifecycle management (ALM) process. Each environment can have its own data, security settings, and solution versions, ensuring that modifications are validated before reaching production.

Answer

Use unmanaged solutions in production for easier modifications

Answer

Copy the entire development environment to test and production