PL-900 Demonstrate the capabilities of Power Pages Practice Test 7 — 15 Questions

Question 1

A Power Pages site allows external vendors to register and submit invoices. The site uses Microsoft Entra ID for authentication. Recently, some vendors reported they cannot log in and receive an error about insufficient permissions. What is the most likely cause?

Accepted Answer

The vendors have not been invited as guest users in the Microsoft Entra ID tenant.. Option B is correct because when using Microsoft Entra ID, the vendor must be invited as a guest user in the tenant, and if not, they will get an access error. Option A is wrong because the issue is about authentication, not licensing. Option C is wrong because cookies are not the primary issue. Option D is wrong because the identity provider is configured.

Answer

The identity provider for the site is not configured.

Answer

The site's cookie settings block third-party authentication.

Answer

The vendors do not have a Power Pages license.

Question 2

You are designing a Power Pages site for a non-profit organization. The site will have multiple sections, each managed by different departments. The IT department wants to ensure that only authorized users can edit the site's content. Which approach should you recommend?

Accepted Answer

Create web roles in Power Pages and assign users to those roles to grant editing permissions.. Option A is correct because Power Pages uses web roles to control who can manage site content. Option B is wrong because Microsoft Entra ID groups can be used in conjunction with web roles, but they are not the direct permission mechanism. Option C is wrong because the admin center is for administrative tasks, not content editing. Option D is wrong because Power Automate can be integrated but is not the primary permission mechanism.

Answer

Implement a custom approval workflow using Power Automate.

Answer

Provide all department heads with administrative access to the Power Pages admin center.

Answer

Use Microsoft Entra ID groups to grant access to the site's editing features.

Question 3

A Power Pages site displays a list of job openings from a Dataverse table. The HR team wants to add a new column for 'Salary Range' and have it appear on the site. What is the simplest way to achieve this?

Accepted Answer

Add the column to the Dataverse table and refresh the list component configuration in Power Pages.. Option B is correct because adding the column to the Dataverse table and then refreshing the list component in Power Pages will automatically display the new column. Option A is wrong because modifying the Liquid template is more complex and not needed if using a list component. Option C is wrong because editing the page is not necessary. Option D is wrong because Power Automate is overkill.

Answer

Modify the Liquid template to include the new column.

Answer

Create a Power Automate flow to update the page whenever the table changes.

Answer

Edit the page in the Power Pages design studio and add a new form.

Question 4

A Power Pages site uses the out-of-the-box authentication with local contacts. The security team requires that user passwords expire every 90 days. How can this be configured?

Accepted Answer

Use the Power Platform admin center to set password policies for the portal.. Option C is correct because password policies for local authentication are configured in the Power Platform admin center under portal settings. Option A is wrong because the Power Pages admin center does not have password policy settings. Option B is wrong because Microsoft Entra ID password policies apply to Entra ID users, not local contacts. Option D is wrong because Dataverse does not manage password policies.

Answer

Create a custom workflow in Dataverse to enforce password expiration.

Answer

Configure password expiration in the Power Pages admin center.

Answer

Set the password expiration policy in Microsoft Entra ID.

Question 5

A company is migrating an existing website to Power Pages. The current site has custom URL slugs for each page (e.g., /products/widget). How can Power Pages support custom URL patterns?

Accepted Answer

Set the 'Partial URL' field for each web page in Power Pages to the desired slug.. Option A is correct because Power Pages allows you to set a custom partial URL for each page, which becomes the slug. Option B is wrong because rewriting rules are not natively supported in Power Pages. Option C is wrong because the web page name is used for the URL, but it cannot contain special characters. Option D is wrong because web templates do not control URL patterns.

Answer

Modify the web page name to include the desired URL path.

Answer

Create a custom web template that generates URL routes.

Answer

Use the URL Rewrite module in IIS to map custom URLs.

Question 6

Which TWO of the following are valid ways to integrate AI capabilities into a Power Pages site?

Accepted Answer

Embed a Power Virtual Agents chatbot.. Option A and C are correct. Power Pages supports embedding Power Virtual Agents chatbots and using AI Builder models for scenarios like form processing. Option B is wrong because Azure Cognitive Search is not directly integrated; you would use search via Dataverse or external. Option D is wrong because custom machine learning models cannot be directly hosted in Power Pages. Option E is wrong because Azure OpenAI Service is not directly integrated; you would need custom development.

Answer

Integrate Azure OpenAI Service via a custom connector.

Answer

Deploy a custom machine learning model as a web service and call it from Liquid.

Answer

Add Azure Cognitive Search to provide AI-powered search.

Question 7

Which THREE of the following are common use cases for Power Pages?

Accepted Answer

Community forum for product discussions.. Options A, B, and D are correct. Power Pages is used for public-facing websites like customer portals, community sites, and employee self-service. Option C is wrong because Power Pages is not used for internal back-office apps; those are typically built with Power Apps. Option E is wrong because event registration is a specific scenario that can be built, but it's not a top-level common use case.

Answer

Internal employee expense reporting app.

Answer

Event registration and management system.

Question 8

Which TWO of the following are required to set up a Power Pages site that allows external users to sign in using their social media accounts?

Accepted Answer

Set up the social identity provider in the Power Pages admin center.. Options C and D are correct. To enable social login, you need to configure the identity provider (e.g., Facebook, Google) in the Power Pages admin center and provide the client ID and secret from the social platform. Option A is wrong because Microsoft Entra ID is for organizational accounts, not social. Option B is wrong because a local contact record is created after authentication, not before. Option E is wrong because a model-driven app is not required for authentication.

Answer

Deploy a model-driven app to manage user registrations.

Answer

Configure Microsoft Entra ID as the identity provider.

Answer

Create a local contact record for each external user.

Question 9

Which THREE of the following are capabilities of Power Pages that help ensure compliance with data protection regulations?

Accepted Answer

Ability to enforce HTTPS and SSL/TLS.. Options A, B, and E are correct. Power Pages supports IP address restrictions, content delivery network (CDN) is a performance feature, not compliance. Option C is wrong because data loss prevention (DLP) policies are set at the environment level in Power Platform, not specifically in Power Pages. Option D is wrong because audit logging is available in Dataverse but not built-in to Power Pages.

Answer

Built-in audit logging of all user actions.

Answer

Data loss prevention (DLP) policies for connectors.

Question 10

Refer to the exhibit. You are reviewing an ARM template for deploying a Power Pages site. The template sets the 'AllowedExternalDomains' to 'contoso.com'. What is the purpose of this setting?

Accepted Answer

Restrict authentication to users from contoso.com.. Option B is correct. The 'AllowedExternalDomains' setting restricts which external domains can be used for authentication, so only users from contoso.com can sign in. Option A is wrong because it does not allow any domain. Option C is wrong because it's not about content embedding. Option D is wrong because it's not about API calls.

Answer

Allow users from any external domain to sign in.

Answer

Enable cross-origin resource sharing (CORS) for contoso.com.

Answer

Allow embedding of content from contoso.com.

Question 11

You are a Power Platform consultant for a large university that wants to build a public-facing Power Pages site for alumni. The site must allow alumni to register, update their profile, view upcoming events, and donate to the university. The university uses Microsoft Entra ID for staff and students, but alumni will use their personal email accounts to register. The security team requires that all data transmitted between the browser and the portal be encrypted. Additionally, the alumni relations team needs to send targeted emails to alumni based on their interests, which are captured during registration. The development team wants to use a low-code approach to integrate the donation functionality, which should process payments through a third-party payment gateway. You need to design the solution. Which of the following is the best approach?

Accepted Answer

Enable HTTPS for the site (default), store alumni profiles and interests in Dataverse, use Power Automate with a custom connector for payment processing, and use Power Automate to send targeted emails.. Option C is correct because Power Pages enforces HTTPS automatically, ensuring data encryption. Using a Dataverse table to store profile and interest data allows the alumni team to use Power Automate to send targeted emails. The payment gateway can be integrated via a custom connector in Power Automate. Option A is wrong because the university should not use its Entra ID for alumni; alumni should register with personal accounts, and the site already supports local authentication. Option B is wrong because custom code for the payment gateway contradicts the low-code requirement. Option D is wrong because Power Automate flows can be triggered from Power Pages without custom web APIs.

Answer

Create a custom web API in Azure to handle payments and call it from Power Pages using Liquid.

Answer

Configure Microsoft Entra ID as the only identity provider and require alumni to create a Microsoft account.

Answer

Use the Power Pages design studio to build the donation page with custom JavaScript to call the payment gateway API.

Question 12

A company wants to build a public-facing website for citizens to submit permit applications and check status. They need to integrate with an existing Microsoft Dataverse database and support anonymous access for browsing but require authentication for submissions. Which TWO features of Power Pages should they use?

Accepted Answer

Anonymous page access for public content. Power Pages allows anonymous access by default for content pages, and requires authentication for forms that submit data. Option B enables anonymous browsing, and option D uses Dataverse as the data source. Option A (Azure AD B2C) is for external identity providers but not required for anonymous browsing; Option C (Power Automate) is not a page feature; Option E (Power BI) is for analytics, not form submission.

Answer

Azure AD B2C for external user authentication

Answer

Power Automate flows for form submission

Answer

Power BI embedded reports for status tracking

Question 13

You are a Power Platform administrator for a government agency that uses Power Pages to provide a public portal for business license renewals. The portal includes a multi-step form for users to enter contact information, business details, and payment. Recently, users have reported that the form frequently times out during the payment step, and some submissions are lost. You need to ensure that partial submissions are saved and users can resume from where they left off. Your solution must minimize development effort and work within Power Pages capabilities. What should you do?

Accepted Answer

Enable the 'Save Progress' feature on the multi-step form to allow users to save and resume.. Power Pages multi-step forms support saving partial progress by enabling the 'Save Progress' feature, which stores data in Dataverse and allows users to resume later. Option C directly addresses this without custom development. Option A (Power Automate) would require additional setup and may not preserve form state. Option B (custom JavaScript) is complex and error-prone. Option D (Azure Functions) is overkill and not needed.

Answer

Create a Power Automate flow that saves form data to a SharePoint list after each step.

Answer

Implement an Azure Function that caches form data in a Redis cache and provides a resume endpoint.

Answer

Use JavaScript to store form data in the browser's local storage and restore it on page load.

Question 14

A non-profit organization has deployed a Power Pages site for volunteer registration. The site uses Dataverse to store volunteer profiles and their availability. Volunteers can log in using their Microsoft Entra ID (formerly Azure AD) accounts. The organization now wants to extend the site to allow volunteers to sign up for specific shifts, which requires integration with a third-party scheduling API. The API requires an OAuth 2.0 client credentials flow with a client secret. You need to securely call this API from Power Pages without exposing the secret to client-side code. What should you do?

Accepted Answer

Create a Power Automate flow that calls the scheduling API using an HTTP action with OAuth 2.0, and call that flow from Power Pages using the 'Run a flow' button.. Power Pages supports server-side API calls via Power Automate flows that can securely store secrets using the 'Environment Variable' or 'Connector' secrets. Option A uses a custom connector with OAuth, but that is for client-side. Option C (Power Automate flow) is the recommended approach as it runs server-side and can use secure authentication. Option D (Azure Function) is also server-side but adds unnecessary complexity. Option B (JavaScript) would expose the secret.

Answer

Use JavaScript with the Fetch API to call the scheduling API directly, embedding the client secret in a configuration file.

Answer

Create a custom connector for the API using OAuth 2.0 with a client secret stored in the connector.

Answer

Deploy an Azure Function that proxies the API calls and stores the secret in Azure Key Vault; call the function from Power Pages.

Question 15

A retail company uses Power Pages to host a customer portal where users can view their order history and return items. The portal uses Dataverse for data storage and Microsoft Entra ID (formerly Azure AD) for authentication. The company wants to add a chatbot on the portal to answer common questions about returns and shipping. The chatbot should be able to look up order details from Dataverse when the user is authenticated. You need to implement this with minimal custom development. What should you do?

Accepted Answer

Create a chatbot in Microsoft Copilot Studio, connect it to Dataverse, and embed it into the Power Pages site using the chatbot component.. Power Pages can embed a Microsoft Copilot Studio chatbot that can be configured to use Dataverse as a data source and respect user authentication. Option C is the most straightforward. Option A (Azure Bot Service) requires more development. Option B (QnA Maker) is deprecated and does not integrate with Dataverse natively. Option D (Power Automate) would require building a custom chat interface.

Answer

Build a custom chat interface using Power Apps and Power Automate to respond to queries.

Answer

Use QnA Maker to create a knowledge base from FAQ documents and embed it as a web chat control.

Answer

Develop a custom Azure Bot Service bot using the Bot Framework SDK and integrate it with Dataverse.