PL-900 Timed Hard Questions — 25 Difficult Questions

Question 1

A Power Automate flow processes incoming emails from a shared mailbox. Recently, some emails are being missed. You suspect the flow is hitting a service protection limit. Which action should you take to diagnose the issue?

15 minute time limit — choose an answer to begin.

Accepted Answer

Review the flow run history and look for 'skipped' status.. Flow run history in Power Automate explicitly records 'skipped' status for runs that were throttled due to service protection limits. By reviewing the run history and filtering for 'skipped' runs, you can directly confirm whether the flow is being rate-limited, which is the most likely cause of missed emails.

Answer

Use the 'Peek code' feature to review the flow definition.

Answer

Check the gateway status for the shared mailbox.

Answer

Pause the flow and restart it.

Question 2

Which THREE capabilities are provided by Microsoft Dataverse? (Select three.)

Accepted Answer

Data storage with role-based security. Microsoft Dataverse provides secure data storage with role-based security, allowing administrators to control access to tables and records using security roles, teams, and business units. This ensures that users only see and interact with data they are authorized to access, which is fundamental for enterprise compliance and data governance.

Answer

AI model building

Answer

Interactive dashboard creation

Question 3

A company wants to build a custom copilot for internal IT support. The copilot should answer common questions and escalate to a human agent if needed. Which component should they use?

Accepted Answer

Microsoft Copilot Studio. Microsoft Copilot Studio is the correct choice because it is specifically designed to build custom copilots (formerly Power Virtual Agents) that can handle conversational Q&A and seamlessly escalate to a human agent when the copilot cannot resolve the issue. This directly matches the requirement for an internal IT support copilot that answers common questions and escalates to a human agent.

Answer

Power Automate

Answer

Power BI

Answer

Power Apps

Question 4

A Power Apps canvas app that uses Dataverse is being migrated from a development environment to a production environment. After migration, the app fails to load data. The developer checks the connection and finds that the Dataverse connector is pointing to the development environment. What should the developer do?

Accepted Answer

Update the connection reference in the app to use production Dataverse. The app's connection references must be updated to point to the production Dataverse environment. Option B is correct. Option A is wrong because re-importing the solution alone does not update connection references. Option C is wrong because the app is already in production. Option D is wrong because changing environment variables is not the direct fix for hard-coded connections.

Answer

Re-import the solution into the production environment

Answer

Delete the app and recreate it in production

Answer

Modify the environment variable values for the connection

Question 5

A manufacturing company uses Power Apps to manage inventory. The app includes a main screen that displays a gallery of inventory items, a detail screen for editing item properties, and a form screen for adding new items. The app uses a SharePoint list as the data source. Recently, users reported that when they edit an item on the detail screen and save, the changes do not appear in the gallery until they manually refresh the app. Additionally, some users occasionally encounter a 'Delegation warning' when filtering the gallery by item name. The app is shared with 200 users, and performance is becoming an issue. You need to resolve these issues. Which action should you take?

Accepted Answer

Modify the detail screen's Save button to use the Refresh() function on the gallery's data source after the form submission, and change the gallery's Items property to use a Filter query on an indexed SharePoint column to avoid delegation.. The Refresh() function after form submission ensures the gallery's data source is updated immediately, eliminating the need for manual refresh. Changing the gallery's Items property to use a Filter query on an indexed SharePoint column avoids delegation warnings by ensuring the query can be processed server-side, as SharePoint supports delegation only for indexed columns and certain operators.

Answer

Convert the model-driven app to a canvas app to gain more control over data refresh and delegation.

Answer

Increase the data row limit in Power Apps settings to 2000 to prevent delegation warnings.

Answer

Migrate the data source from SharePoint to Microsoft Dataverse to eliminate delegation warnings and improve performance.

Question 6

A company has multiple Power Platform environments: Development, Test, and Production. They want to ensure that changes to a Power Automate cloud flow are validated before reaching production. Which approach should they use?

Accepted Answer

Use solution-aware flows and managed properties in Dev, then import to Test, and finally to Production after testing.. Solution-aware flows support managed properties and allow for structured application lifecycle management (ALM). By exporting the solution from Dev as a managed solution and importing it into Test for validation, then into Production, the company ensures that changes are validated at each stage. This approach prevents direct edits in production and maintains version control.

Answer

Edit the flow directly in the Production environment.

Answer

Create a new flow in Production based on a copy of the Dev flow.

Answer

Export the flow as a ZIP file from Dev and import to Production.

Question 7

A healthcare organization is deploying Power Apps for patient intake. They must ensure that the app complies with HIPAA regulations. Which feature should they use to protect patient data at rest?

Accepted Answer

Enable Customer Managed Key (CMK) for the Power Platform environment.. Customer Managed Key (CMK) allows the healthcare organization to control the encryption key used to protect data at rest in their Power Platform environment. This ensures that even Microsoft cannot access the underlying data without the organization's key, which is a critical requirement for HIPAA compliance regarding data encryption at rest.

Answer

Require multi-factor authentication (MFA) for app users.

Answer

Enable audit logging in the Power Platform admin center.

Answer

Create a Data Loss Prevention (DLP) policy to restrict connectors.

Question 8

A global organization uses Power Platform to manage IT support tickets. They have the following requirements: 1) Tickets must be routed to the appropriate team based on category. 2) The routing logic must be easy to update by non-developers. 3) All ticket data must be stored in a secure, auditable data source. Which THREE Power Platform components should they use?

Accepted Answer

Power Automate. Power Automate is correct because it provides the workflow automation needed to route tickets to the appropriate team based on category. Its low-code interface allows non-developers to easily update routing logic using triggers, conditions, and actions without writing code.

Answer

Copilot Studio

Answer

Power Apps

Question 9

A healthcare organization uses Power Apps to manage patient intake forms. The app is built on Dataverse and includes a field for medical record number (MRN) that must be unique. The app currently uses a text input, but duplicate MRNs have been entered. What is the best way to enforce uniqueness at the data layer?

Accepted Answer

Create a Dataverse alternate key on the MRN field. A Dataverse alternate key enforces uniqueness at the database level, preventing duplicate MRN values from being saved regardless of how data enters the system. This is the only option that operates at the data layer, ensuring integrity even if the app, a flow, or an external integration submits a record. Alternate keys are indexed and validated by Dataverse before commit, making them the proper solution for unique field constraints.

Answer

Use a Power Automate flow to check for duplicates after submission

Answer

Configure a business rule on the MRN field

Answer

Add a validation rule in the app to check for duplicates before submitting

Question 10

A company uses Microsoft Copilot Studio to create a custom copilot. The copilot needs to access customer data stored in a Dataverse table that contains sensitive information. The compliance team requires that data accessed by the copilot must be audited. What should the admin configure?

Accepted Answer

Enable auditing in Microsoft Purview and log copilot interactions.. Microsoft Purview auditing captures detailed logs of user and admin activities, including interactions with custom copilots built in Copilot Studio. By enabling auditing in Purview and logging copilot interactions, the admin can meet the compliance requirement to audit all data accessed by the copilot, ensuring a traceable record of sensitive customer data access.

Answer

Deploy Microsoft Sentinel to monitor copilot behavior.

Answer

Configure a DLP policy to block non-compliant data access.

Answer

Use Copilot Studio analytics to track usage.

Question 11

You are a Power Platform consultant for a large university that wants to build a public-facing Power Pages site for alumni. The site must allow alumni to register, update their profile, view upcoming events, and donate to the university. The university uses Microsoft Entra ID for staff and students, but alumni will use their personal email accounts to register. The security team requires that all data transmitted between the browser and the portal be encrypted. Additionally, the alumni relations team needs to send targeted emails to alumni based on their interests, which are captured during registration. The development team wants to use a low-code approach to integrate the donation functionality, which should process payments through a third-party payment gateway. You need to design the solution. Which of the following is the best approach?

Accepted Answer

Enable HTTPS for the site (default), store alumni profiles and interests in Dataverse, use Power Automate with a custom connector for payment processing, and use Power Automate to send targeted emails.. The best approach. Power Pages enables HTTPS by default, ensuring encrypted data transmission. Alumni can register using personal accounts via local authentication or external identity providers (like Microsoft Entra ID, but not required). Storing profiles and interests in Dataverse allows the alumni relations team to use Power Automate to send targeted emails based on interests. For payment processing, a custom connector in Power Automate can be built to call the third-party payment gateway, satisfying the low-code requirement. Option A is incorrect because using a custom web API with Liquid contradicts the low-code requirement and adds complexity. Option B is incorrect because requiring alumni to create Microsoft accounts and using Entra ID as the only provider would prevent alumni from using personal email accounts, which is a requirement. Option C is incorrect because using custom JavaScript for payment processing violates the low-code approach and may introduce security risks.

Answer

Create a custom web API in Azure to handle payments and call it from Power Pages using Liquid.

Answer

Configure Microsoft Entra ID as the only identity provider and require alumni to create a Microsoft account.

Answer

Use the Power Pages design studio to build the donation page with custom JavaScript to call the payment gateway API.

Question 12

A canvas app uses a Patch function to update a SharePoint list item. The update fails silently without error. What is the most likely cause?

Accepted Answer

The column name or data type in the Patch function does not match the SharePoint list.. When a Patch function fails silently, the most common cause is a mismatch between the column name or data type in the function and the actual SharePoint list schema. Power Apps does not throw an error for such mismatches; it simply does not apply the update. This is because the Patch function validates the data against the list's column definitions at runtime, and if the names or types don't align, the operation is ignored without raising an exception.

Answer

The user does not have permission to the SharePoint list.

Answer

The Patch function is being called with incorrect arguments.

Answer

The app is not using delegation.

Question 13

Which TWO are best practices for designing Power Automate flows in a production environment? (Select TWO.)

Accepted Answer

Use 'Configure Run After' to implement error handling.. Options B and E are correct. Using 'Configure Run After' allows you to specify actions to run based on the success, failure, or timeout of previous actions, which is essential for robust error handling in production flows. Option E, using secure inputs and outputs, prevents sensitive data from being displayed in flow run histories, protecting confidential information. Option A is incorrect because disabling logging would hinder troubleshooting and monitoring of production flows. Option C is incorrect because nesting 'Apply to each' actions can lead to performance degradation and throttling; instead, use parallel branches or optimized data processing. Option D is incorrect because hardcoding connection references reduces maintainability and security; use connection references stored in environments or Azure Key Vault for flexibility and security.

Answer

Disable flow logging to improve performance.

Answer

Nest Apply to each actions to handle large datasets.

Answer

Hardcode connection references for simplicity.

Question 14

A model-driven app has a business rule that sets the 'Priority' field to 'High' when the 'Request Type' is 'Urgent'. However, the rule does not fire when the request type is changed from the form. What is the most likely cause?

Accepted Answer

The business rule only triggers when the form loads, not on field changes.. The most likely cause is that the business rule is configured to run only when the form loads, not when a field is changed. In model-driven apps, business rules can be set to trigger 'on form load' or 'on every change'. If the rule is set to 'on form load', it will execute only when the form initially opens and will not re-fire when the 'Request Type' field is changed later. This matches option C. Option A is incorrect because scope 'All Forms' includes custom forms. Option B is incorrect because the condition type ('contains' vs 'equals') would not prevent the rule from firing; it would affect which records meet the condition. Option D is incorrect because a deactivated rule would never fire, not just when changing a field.

Answer

The business rule is set to scope 'All Forms' but the form is custom.

Answer

The condition uses 'contains' instead of 'equals'.

Answer

The business rule is deactivated in the solution.

Question 15

Contoso, Ltd. is a multinational company with a global sales team. They use Microsoft Power Apps to build a model-driven app for managing customer accounts and opportunities. The app uses Microsoft Dataverse as the data source. The sales team accesses the app on mobile devices while traveling. Recently, users have reported that the app is slow when loading large numbers of opportunities. The app has a custom page that displays a list of all opportunities without any filters. The page uses a gallery that loads all records at once. The app also uses several custom connectors to external systems, but the slowness is primarily observed when loading the opportunities list. The IT team has confirmed that the Dataverse environment is in the same region as the users, and network latency is not an issue. They need to improve the performance of the app. Which two actions should the IT team take? (Choose two.)

Accepted Answer

Implement delegation in the gallery to filter data on the server. The correct answers are D and E. Implementing delegation in the gallery (D) ensures that filtering and sorting operations are performed server-side in Dataverse, reducing the amount of data transferred and improving load times. Adding a search box with a delegable filter (E) allows users to search for specific opportunities, and when the filter is delegable, the filtering happens on the server, further reducing the data retrieved. Option A is incorrect because disabling real-time synchronization with Microsoft Entra ID would not address data loading performance and could cause authentication issues. Option B is incorrect because simply replacing a model-driven app with a canvas app does not inherently improve performance; both app types can be optimized, and the issue is with data loading, not the app type. Option C is incorrect because increasing Dataverse storage capacity does not affect query execution speed; it only increases available storage space.

Answer

Disable real-time synchronization with Microsoft Entra ID

Answer

Replace the model-driven app with a canvas app

Answer

Increase the Dataverse storage capacity

Question 16

Refer to the exhibit. You are troubleshooting a Power Automate flow that fails when trying to access an on-premises SQL Server database. The flow uses the SQL connector. Based on the exhibit, what is the most likely cause of the failure?

Accepted Answer

The flow is using the cloud SQL connector without an on-premises data gateway.. The exhibit shows a Power Automate flow using the SQL connector to access an on-premises SQL Server database. The SQL connector in Power Automate is a cloud-based connector that, by default, cannot directly reach on-premises resources. To bridge this gap, an on-premises data gateway must be installed and configured on a machine within the same network as the SQL Server, and the connector must be associated with that gateway. Without this gateway, the flow will fail with a connection error, making option B the correct answer.

Answer

The Office 365 connector is conflicting with the SQL connector.

Answer

The environment type is Production, which restricts access to on-premises data.

Answer

The region 'eastus' does not support on-premises connectivity.

Question 17

You are a Power Platform administrator at Contoso Ltd. The company uses a Power Automate flow that monitors a SharePoint list for new items. When a new item is added, the flow retrieves data from an external CRM system via an HTTP request, then updates a second SharePoint list. Recently, the flow has been failing with a '400 Bad Request' error from the HTTP action. The CRM API endpoint and authentication are correct. The flow works for some items but fails for others. You need to identify the root cause and fix the flow. What should you do?

Accepted Answer

Add a 'Compose' action to sanitize the input data before the HTTP request. The 400 Bad Request error typically indicates malformed request syntax, such as invalid characters in the payload. Adding a 'Compose' action to sanitize the input data (e.g., encode special characters, remove illegal XML characters) before the HTTP request can resolve the issue. Option A is wrong because the endpoint is confirmed correct, so changing it is unnecessary and would break integration. Option C is wrong because checking for existing items addresses duplication, not malformed requests. Option D is wrong because increasing retry count only re-attempts the same failing request; it does not fix the underlying data quality issue.

Answer

Change the HTTP action to use a different API endpoint

Answer

Add a 'Condition' to check if the item already exists

Answer

Increase the retry count for the HTTP action

Question 18

An administrator reviews the JSON output from a Power Platform environment. What should the administrator be concerned about based on the data?

Accepted Answer

The API rate limit is approaching its maximum. The JSON output shows the 'RateLimitRemaining' field approaching zero, indicating that the API rate limit is nearly exhausted. Power Platform enforces per-tenant and per-user API limits to ensure fair resource usage, and hitting the limit will throttle or block further API calls, disrupting integrations and automated workflows.

Answer

The Dataverse URL is incorrect

Answer

The admin email is not configured

Answer

The environment is out of storage

Question 19

You are troubleshooting a canvas app that loads slowly. The app uses over 50 data sources and many formulas. Which action is most likely to improve performance?

Accepted Answer

Use delegable queries to filter data at the source. Delegable queries process filtering on the data source server, reducing the amount of data transferred to the app and improving load time. Option A is incorrect because increasing the data row limit can actually increase the amount of data loaded, worsening performance. Option C is incorrect because disabling formula-level error checking does not affect performance and can hide issues. Option D is incorrect because removing unused data sources helps reduce app size but may not be the most impactful action for slow loading due to excessive data retrieval.

Answer

Increase the data row limit for each data source

Answer

Disable the formula-level error checking

Answer

Remove unused data sources from the app

Question 20

You are designing a Power Automate flow that processes approvals for expense reports. If an expense exceeds $5,000, the flow must require approval from both the manager and the finance director. If the expense is between $1,000 and $5,000, only manager approval is needed. For expenses under $1,000, no approval is required. Which control structures should you use?

Accepted Answer

Condition action with nested conditions. The scenario requires conditional logic to evaluate the expense amount and branch accordingly. A Condition action is ideal for the primary split (above/below thresholds), and nested conditions handle the sub-branches (e.g., condition for >$5,000 with nested approval actions, else condition for $1,000-$5,000, else no approval). Option A is incorrect because a Switch action is suitable for discrete values, not numerical ranges. Option B is incorrect because Apply to each is used for iterating over arrays, not for conditional branching. Option D is incorrect because Parallel branches execute actions concurrently and do not implement decision-based branching logic.

Answer

Switch action with cases for each range

Answer

Apply to each with a condition inside

Answer

Parallel branches for both approval paths