PL-900 Practice Exam 63 — 20 Questions

Question 1

You are a Power BI administrator for a retail company. The sales team uses a Power BI report that connects to an on-premises SQL Server database via an on-premises data gateway. Recently, several users reported that the report is showing stale data. The report is configured to refresh daily at 8:00 AM. Upon investigation, you find that the scheduled refresh failed last night at 8:00 AM with an error: 'The data source credentials could not be encrypted using the gateway's encryption key.' The gateway is installed on a server that was rebooted for maintenance at 7:30 AM. The gateway service account is a local service account. The data source credentials were configured using a SQL Server authentication login. What should you do to resolve the issue?

Accepted Answer

In the Power BI Online service, go to the gateway settings and click 'Recover' to restore the encryption key.. The error 'The data source credentials could not be encrypted using the gateway's encryption key' indicates that the gateway's encryption key was lost or corrupted, which commonly occurs after a server reboot if the key is stored in memory or a volatile location. In the Power BI Online service, the 'Recover' option under gateway settings restores the encryption key from a backup stored in the cloud, allowing the gateway to re-encrypt credentials without reconfiguring the data source. This is the direct fix for the reported error and does not require changing the service account or recreating the data source.

Answer

Change the gateway service account to a domain account and reconfigure the data source credentials.

Answer

Restart the on-premises data gateway service on the server.

Answer

Delete and recreate the data source in the gateway settings.

Question 2

A medium-sized company uses Power Platform to manage its customer service operations. They have a model-driven app built on Dataverse that tracks cases and customer interactions. Recently, the app has been experiencing slow load times when users open a case record. The Dataverse environment is in the same region as the users. The app uses several business rules and calculated fields. The IT team suspects that the issue might be related to the number of components on the form. They want to optimize performance without disabling necessary functionality. The app is used by 50 customer service agents. What should the IT team do to improve form load times?

Accepted Answer

Remove unused fields and columns from the main form. Option A is correct because removing unused fields and columns from the main form reduces the amount of data retrieved and processed when a case record loads. Fewer form components mean fewer calls to Dataverse and less client-side rendering, directly improving load times without disabling necessary business rules or calculated fields.

Answer

Add more calculated fields to precompute values

Answer

Disable all business rules

Answer

Switch the app to a canvas app

Question 3

A global manufacturing company uses Microsoft Power Platform to manage its equipment maintenance processes. The company has over 10,000 maintenance technicians worldwide who use a Power Apps mobile app to report equipment issues and log repairs. The app connects to a common data service (Dataverse) that stores all maintenance records. Recently, the company experienced a data breach where a malicious user exploited a vulnerability in the app to access and delete maintenance records from multiple high-value machines. The security team traced the issue to the app's permissions model: the app was using a single service account with elevated privileges to perform all data operations. The company now wants to redesign the app's security to follow the principle of least privilege while maintaining usability for technicians. The technicians need to view their assigned work orders, create new issue reports, and update the status of their own repairs, but they should not be able to delete records or access records from other regions. Which approach should the company take?

Accepted Answer

Implement row-level security in Dataverse to restrict technicians to their own records and region, assign appropriate role-based access (create, read, update, no delete), and use individual user accounts.. Option C is correct because it applies the principle of least privilege by using individual user accounts with Dataverse role-based security and row-level security (RLS). This ensures each technician can only create, read, and update their own assigned records within their region, while explicitly denying delete permissions. This approach eliminates the shared, over-privileged service account and enforces granular data isolation.

Answer

Replace the Power Apps app with a Power Automate flow that technicians trigger via email to submit and update records.

Answer

Configure each technician's individual user account with a basic user role in Dataverse, and remove the service account.

Answer

Create a separate Power Apps app for each region, each with its own service account that has restricted permissions to that region's data.

Question 4

You work for a retail company that uses Microsoft Power Platform to manage inventory. The company has a Power Apps canvas app that allows store managers to update stock levels. Recently, the app has been slow to load and sometimes times out when multiple managers use it simultaneously. You need to recommend a solution to improve performance. What should you do?

Accepted Answer

Migrate the app to use a Microsoft Dataverse database.. Option B is correct because using a Dataverse database instead of SharePoint provides better performance and scalability for concurrent users. Option A is wrong because it only addresses connectivity, not server-side performance. Option C is wrong because it reduces functionality. Option D is wrong because it adds complexity without addressing the root cause.

Answer

Reduce the number of fields in the SharePoint list.

Answer

Instruct managers to use a wired network connection instead of Wi-Fi.

Answer

Implement a custom API to handle updates.

Question 5

You are a Power BI administrator for a large retail company. The company has a Power BI workspace that contains a dashboard named 'Sales Overview'. The dashboard is shared with the sales team. Recently, users have reported that the dashboard is loading slowly, and some visuals show 'Data is not available' errors. The dashboard uses a DirectQuery connection to an on-premises SQL Server database. The database team confirms that the server is not under heavy load. You need to troubleshoot and resolve the issue. What should you do first?

Accepted Answer

Check the on-premises data gateway performance and logs for errors. Option A is correct because the on-premises data gateway is the critical bridge between Power BI and the on-premises SQL Server when using DirectQuery. Slow loading and 'Data is not available' errors often stem from gateway performance issues, connectivity problems, or errors logged by the gateway service. Checking the gateway logs and performance metrics is the first logical troubleshooting step before making architectural changes.

Answer

Replace the DirectQuery connection with an Import connection

Answer

Ask the database team to add more indexes to the SQL Server tables

Answer

Increase the scheduled refresh frequency to every 15 minutes

Question 6

A non-profit organization uses Power Automate to send thank-you emails to donors after a donation is recorded in a SharePoint list. The flow is triggered when a new item is added. Recently, the flow has been failing intermittently with a '400 Bad Request' error. The SharePoint list has columns: DonorName, Email, Amount, Date. The flow uses the 'Send an email (V2)' action. The IT volunteer who set up the flow is unavailable. The organization needs a quick resolution. What is the most likely cause of the error?

Accepted Answer

The 'Send an email' action is using an invalid email address. The '400 Bad Request' error in Power Automate's 'Send an email (V2)' action typically indicates that the email server rejected the request due to a malformed or invalid recipient address. Since the flow dynamically pulls the email from the SharePoint list's 'Email' column, a missing, misspelled, or improperly formatted email address (e.g., missing '@' or domain) would cause the SMTP server to return a 400 status. This is the most common cause in donation-tracking scenarios where manual data entry may introduce errors.

Answer

The flow trigger is misconfigured

Answer

The SharePoint list is full

Answer

The organization's email server is down

Question 7

You are a Power Automate developer for a large retail company. The company uses a SharePoint Online list named 'SalesOrders' to track orders. Each order has a Status column (choice: New, Processing, Shipped, Delivered). When an order is updated to 'Shipped', a flow should send an email with tracking info to the customer. Additionally, if the order amount exceeds $10,000, a manager must approve the shipment before the email is sent. You create a flow with a trigger 'When an item is modified' and add a condition to check if Status equals 'Shipped'. Inside the condition, you add an approval action. The flow currently sends the approval to the manager for all orders, even those under $10,000. You need to modify the flow so that orders under $10,000 skip the approval and directly send the email. What should you do?

Accepted Answer

Add a second condition inside the 'Status equals Shipped' condition that checks if amount exceeds $10,000; place the approval action inside this new condition, and the email action after it. Option B is correct because it adds a nested condition inside the existing 'Status equals Shipped' condition to check if the order amount exceeds $10,000. The approval action is placed inside this nested condition (for orders over $10,000), while the email action is placed after the nested condition but still within the 'Status equals Shipped' condition. This ensures that only orders over $10,000 require manager approval, and all shipped orders (regardless of amount) eventually send the email—either directly (if under $10,000) or after approval (if over $10,000).

Answer

Modify the existing condition to check if amount exceeds $10,000, and if false, terminate the flow

Answer

Use a 'Switch' action based on the amount, with cases for >10000 and <=10000

Answer

Add a 'Parallel branch' after the trigger: one branch for approval, one for email

Question 8

A manufacturing company uses Power Apps to manage inventory. The app includes a main screen that displays a gallery of inventory items, a detail screen for editing item properties, and a form screen for adding new items. The app uses a SharePoint list as the data source. Recently, users reported that when they edit an item on the detail screen and save, the changes do not appear in the gallery until they manually refresh the app. Additionally, some users occasionally encounter a 'Delegation warning' when filtering the gallery by item name. The app is shared with 200 users, and performance is becoming an issue. You need to resolve these issues. Which action should you take?

Accepted Answer

Modify the detail screen's Save button to use the Refresh() function on the gallery's data source after the form submission, and change the gallery's Items property to use a Filter query on an indexed SharePoint column to avoid delegation.. Option B is correct because the Refresh() function after form submission ensures the gallery's data source is updated immediately, eliminating the need for manual refresh. Changing the gallery's Items property to use a Filter query on an indexed SharePoint column avoids delegation warnings by ensuring the query can be processed server-side, as SharePoint supports delegation only for indexed columns and certain operators.

Answer

Convert the model-driven app to a canvas app to gain more control over data refresh and delegation.

Answer

Increase the data row limit in Power Apps settings to 2000 to prevent delegation warnings.

Answer

Migrate the data source from SharePoint to Microsoft Dataverse to eliminate delegation warnings and improve performance.

Question 9

A logistics company uses Power Platform to track shipments. They have a Power Apps app for drivers to update delivery status, and Power Automate flows to notify customers. Recently, drivers reported that the app sometimes fails to sync data when they are in areas with poor connectivity. The company needs a solution that allows offline data entry and automatic sync when connectivity is restored. What should they do?

Accepted Answer

Enable offline capability in the Power Apps canvas app and use Dataverse for offline data storage. Option A is correct because Power Apps canvas apps support offline capability when connected to Dataverse, which can store data locally on the device and automatically synchronize with the server when connectivity is restored. This directly addresses the drivers' need for offline data entry and sync in poor connectivity areas.

Answer

Use AI Builder to predict connectivity issues and queue data

Answer

Migrate the app to a model-driven app with offline sync

Answer

Replace the app with a Power BI dashboard that refreshes periodically

Question 10

Your company has a Power BI dashboard that displays sales data from a SQL Server database hosted on-premises. The dashboard is used by the sales team to monitor daily performance. Recently, the dashboard has been showing stale data. The data is supposed to refresh every night at 2:00 AM. You have confirmed that the SQL Server database is updated with new data each night. However, the Power BI dataset refresh fails. You need to ensure that the dashboard shows up-to-date data every morning. What should you do?

Accepted Answer

Install and configure an on-premises data gateway and assign it to the dataset.. The correct answer is B because an on-premises data gateway is required to bridge the connection between Power BI (a cloud service) and an on-premises SQL Server database. Since the dataset refresh fails despite the database being updated, the gateway is either missing or misconfigured. Installing and configuring the gateway allows the scheduled refresh to access the on-premises data source securely, ensuring the dashboard displays up-to-date data each morning.

Answer

Disable scheduled refresh and manually refresh the dataset every morning.

Answer

Change the data source to an Excel file stored in SharePoint Online.

Answer

Republish the Power BI report from Power BI Desktop.

Question 11

A healthcare provider wants to digitize patient intake forms. The solution must comply with HIPAA and allow patients to fill forms on their own devices. The data should be stored securely, and staff should receive notifications when a form is completed. Which approach using Power Platform should they take?

Accepted Answer

Use Power Pages for the patient portal, Dataverse for storage, and Power Automate for notifications. Option B is correct because Power Pages provides a secure, externally-facing portal where patients can fill forms on their own devices, Dataverse (the underlying data platform) supports HIPAA-compliant storage with encryption and auditing, and Power Automate can trigger notifications to staff when a form is completed. This combination meets all requirements: patient self-service, secure storage, and automated alerts.

Answer

Build a Power Apps canvas app for patients and use Power Automate for notifications

Answer

Use Power BI dashboards for patients to submit data and Power Automate for notifications

Answer

Use Power Automate with AI Builder to process forms and store results in SharePoint

Question 12

Your organization uses Microsoft Power Platform to manage customer support tickets. The current process: when a ticket is created in Dataverse, a Power Automate flow sends an email to the support team. The team then updates the ticket status manually in a Power Apps canvas app. However, the team often forgets to update the status, leading to delayed responses. The manager wants an automated solution that sends a reminder if the status is not changed within 24 hours. Additionally, if the status is not changed within 48 hours, the ticket should be escalated to the manager. You need to design a solution using Power Automate and Power Apps. Which approach should you take?

Accepted Answer

Create two scheduled Power Automate flows: one runs daily to check tickets older than 24 hours and send reminder; another runs daily to check tickets older than 48 hours and escalate.. Option C is correct. Using two separate scheduled flows allows checking at specific intervals and performing actions based on conditions. Option A is wrong because a single trigger flow would run once, not repeatedly. Option B is wrong because Power Apps reminders require user action. Option D is wrong because a single flow with a delay would only run once, not multiple times.

Answer

Modify the Power Apps app to include a reminder notification using the notify function after 24 hours.

Answer

Create one Power Automate flow with a recurrence trigger every hour. Check tickets older than 24 hours and send reminder; if also older than 48 hours, escalate. Add condition to avoid duplicate actions.

Answer

Create a single Power Automate flow triggered when a ticket is created. Add a 24-hour delay then check status; if not updated, send reminder and wait another 24 hours then escalate.

Question 13

A financial services firm needs to create a compliance dashboard for regulators. The dashboard must display real-time data from multiple sources, including on-premises SQL Server and Dataverse. The firm requires interactive visualizations and the ability to drill down to transaction details. They also need to ensure that sensitive data is masked for certain users. Which Power Platform components should they use?

Accepted Answer

Power BI, on-premises data gateway, and Dataverse. Option B is correct because the scenario requires real-time data from on-premises SQL Server and Dataverse, which necessitates an on-premises data gateway for live connectivity. Power BI provides the interactive visualizations and drill-down capabilities, while Dataverse serves as the unified data source for compliance data. The combination of these components enables real-time dashboards with role-based security for data masking.

Answer

Power Automate, AI Builder, and Power BI

Answer

Copilot Studio, Power BI, and Dataverse

Answer

Power Apps, Dataverse, and Power Automate

Question 14

You are a Power Platform administrator for a medium-sized business. The company uses Power Apps and Power Automate extensively. The development team has requested the ability to create their own sandbox environments for testing without waiting for IT. However, the security team requires that all environments be subject to data loss prevention (DLP) policies and that environment creation be tracked. You need to design a solution that allows developers to self-service environment creation while maintaining governance. The developers currently have Power Apps Plan 2 licenses. What should you do?

Accepted Answer

Create a security group in Microsoft Entra ID, add developers, and configure tenant settings to allow only members of that group to create environments. Enable audit logging.. The best approach is to create a security group in Microsoft Entra ID, add developers to it, and then configure the tenant settings to allow that group to create environments. Additionally, enable audit logging to track creation. Option A is incorrect because assigning the Power Platform Administrator role gives too much privilege. Option B is incorrect because disabling creation for non-admins prevents self-service. Option C is incorrect because the CoE Starter Kit is for governance but does not directly enable self-service creation.

Answer

Assign the Power Platform Administrator role to all developers.

Answer

Disable environment creation for non-admins and have developers submit requests to IT.

Answer

Install the CoE Starter Kit and configure the environment creation policy to allow all users.

Question 15

A small business wants to adopt Power Apps to create a custom inventory management app. They have a single Microsoft 365 Business Basic subscription which includes Power Apps and Power Automate capabilities. The IT manager, who is not a dedicated administrator, needs to set up the environment. They want to ensure that the app's data is stored securely and that only authorized employees can access it. The IT manager plans to create a new environment for the app. What should the IT manager do first to ensure proper governance and security?

Accepted Answer

Use the default environment and configure data loss prevention (DLP) policies to restrict data sharing.. Because the organization has a single Microsoft 365 Business Basic subscription, the default environment already exists. Creating a new environment is not necessary and could complicate management. The best course is to use the default environment with appropriate data policies and sharing settings.

Answer

Purchase additional Power Apps licenses for each user before creating the environment.

Answer

Create a trial environment to test the app before deploying to production.

Answer

Create a new production environment in the Power Platform Admin Center.

Question 16

You are the Power Platform administrator for a large multinational corporation. The company has a single Microsoft Entra ID tenant with users in North America, Europe, and Asia. Due to data residency regulations, each region must store its data within its geographic boundaries. The company has three production environments: NA-Prod (East US), EU-Prod (West Europe), and ASIA-Prod (Southeast Asia). Each production environment has a corresponding sandbox environment for development. Recently, the security team discovered that a developer in Europe accidentally accessed customer data from the NA-Prod environment by using a connection reference that pointed to the North American Dataverse instance. To prevent cross-region data access, you need to implement a solution that blocks any Power Automate flow or Power Apps canvas app from connecting to Dataverse instances in other regions. You must also ensure that developers can still use non-Dataverse connectors (e.g., SharePoint, Office 365) that may be global. What should you do?

Accepted Answer

Create environment-level DLP policies that block the Dataverse connector in each environment, then add the Dataverse connector back as a business connector only for the local instance using endpoint filtering.. Data Loss Prevention (DLP) policies can be configured at the environment level to block the Dataverse connector in environments where it is not allowed. However, since each environment needs Dataverse for its own region, you need to create DLP policies that block the Dataverse connector for cross-region connections. But DLP policies block connectors entirely, not specific instances. A better approach is to use environment routing rules to restrict traffic to specific Dataverse instances. Option B is incorrect because DLP policies block the connector entirely. Option C is incorrect because conditional access controls user access but not app connections. Option D is incorrect because audit logs only detect, not prevent.

Answer

Use Microsoft Entra ID Conditional Access policies to block cross-region access to Dataverse.

Answer

Create a tenant-level DLP policy that blocks the Dataverse connector for all environments.

Answer

Enable audit logging and create a Power Automate flow to notify administrators when cross-region access is detected.

Question 17

You are the Power Platform administrator for a retail company. The company has a single default environment that all employees use to build and run Power Apps and Power Automate flows. Recently, the IT department noticed that some users are accidentally deleting shared flows that are critical to business operations. To prevent this, you need to implement a solution that allows users to create and edit their own flows, but prevents them from deleting flows owned by others. Additionally, you want to ensure that only approved connectors are used to protect sensitive data. You have been granted permissions to manage environments and security roles. What should you do?

Accepted Answer

Create a new environment, assign users the Environment Maker role, and implement a DLP policy. Creating a new environment with appropriate security roles allows you to control permissions. Assigning the Environment Maker role allows users to create and edit their own flows, but they cannot delete others' flows. Implementing a DLP policy restricts connectors. Option B is wrong because sharing does not prevent deletion. Option C is wrong because removing delete permission for all flows also prevents legitimate cleanup. Option D is wrong because changing the default environment settings does not provide granular control.

Answer

Remove the delete permission for all flows from all users

Answer

Enable audit logging and rely on manual review of deletions

Answer

Share all critical flows with read-only access to all users

Question 18

A university uses Power Apps for student registration. The app is built on Dataverse and shared with all students. Recently, a student reported that they cannot access the app and receive an error that they do not have permission. The app was working earlier. The admin checks the environment and finds that the app's sharing settings have been changed. The admin needs to restore access for all students quickly. What should the admin do?

Accepted Answer

Share the app with the 'All Students' security group in the Power Apps maker portal.. The admin can share the app again with the appropriate security group (e.g., All Students) in the Power Apps maker portal. This is the fastest way to restore access.

Answer

Contact Microsoft Support to restore the previous sharing settings.

Answer

Assign the 'Environment Maker' role to all students.

Answer

Re-create the app from a backup.

Question 19

You are the Power Platform administrator for a large financial services organization. The organization has three environments: Dev, Test, and Prod. The Dev environment is used by a team of 10 developers who frequently create and test solutions. The Test environment is for quality assurance, and Prod is for live applications. Recently, the compliance team has mandated that all environments must have audit logging enabled to track changes and user activities. Additionally, the organization wants to implement a policy that prevents the use of connectors that transmit data outside the organization's Azure region. The compliance team also requires that any new environment created in the future automatically inherits these audit and DLP policies. You need to configure the environment settings to meet these requirements. What should you do?

Accepted Answer

Enable audit logging and create a tenant-level DLP policy that applies to all environments. Enabling audit logging and creating a DLP policy at the tenant level ensures all environments inherit these settings. Option A is wrong because enabling audit only in Prod does not meet the mandate for all environments. Option C is wrong because configuring each environment individually is inefficient and does not automatically apply to new environments. Option D is wrong because a tenant-level policy with a warning does not block data transmission as required.

Answer

Configure audit logging and DLP policies individually for each environment

Answer

Create a tenant-level DLP policy that warns users about data transmission

Answer

Enable audit logging in the Prod environment and create a DLP policy for Dev and Test only

Question 20

A software company uses Power Platform to build customer-facing portals. They have a dedicated production environment and a sandbox environment for development. The developer needs to copy the entire production environment (including all apps, flows, and data) to the sandbox environment for performance testing. The developer wants to ensure that the sandbox environment is an exact copy, including all data. What should the developer do?

Accepted Answer

Use the 'Copy environment' feature in the Power Platform Admin Center, selecting 'Full copy' including data.. The Power Platform Admin Center provides a 'Copy environment' feature that can copy both customizations and data from a production environment to a sandbox environment. This meets the requirement exactly.

Answer

Export the solutions from the production environment and import them into the sandbox environment.

Answer

Manually recreate the apps and flows in the sandbox and use the same data source.

Answer

Use Power Automate to copy all data from production to sandbox.