PL-900 Manage the Microsoft Power Platform environment Practice Test 10 — 15 Questions

Question 1

A Power Platform administrator is configuring a data loss prevention (DLP) policy for a production environment. The policy must block the use of the SharePoint connector but allow the use of the SQL Server connector. The administrator creates a policy and assigns it to the environment. However, users can still use the SharePoint connector. What is the most likely reason?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

A tenant-level DLP policy allows SharePoint and is set to a higher priority.. Data loss prevention (DLP) policies can be configured at both the tenant level and the environment level. When both levels have policies, the tenant-level policy takes precedence if it is set to a higher priority. In this scenario, a tenant-level DLP policy that allows the SharePoint connector would override the environment-level policy that blocks it, explaining why users can still use SharePoint. Option A is incorrect because the policy was assigned to the environment. Option B is incorrect because user roles do not bypass DLP policies. Option D is incorrect because saved and published policies take effect immediately.

Answer

The policy was not assigned to the correct environment.

Answer

The users have the System Administrator role in the environment.

Answer

The DLP policy has not been saved and published.

Question 2

A company is using Power Automate flows that connect to multiple third-party services. The security administrator wants to ensure that no sensitive data is sent to unauthorized external services. Which feature should be used to enforce this requirement?

Accepted Answer

Create and apply Data Loss Prevention (DLP) policies.. Data Loss Prevention (DLP) policies allow blocking or restricting connectors to prevent data leakage. Option A is correct. Option B is incorrect because audit logs only record activity, not prevent it. Option C is incorrect because environment routing does not control connectors. Option D is incorrect because Copilot is an AI assistant, not a security feature.

Answer

Enable audit logging in the Power Platform admin center.

Answer

Configure environment routing rules.

Answer

Use the Power Platform Copilot to monitor flows.

Question 3

A Power Platform administrator wants to delegate the responsibility of managing environments to regional leads without granting them full admin privileges. Which role should the administrator assign?

Accepted Answer

Environment Admin role.. The Environment Admin role allows a user to manage all aspects of a specific environment, including security and settings, without tenant-wide privileges. Option B, Dynamics 365 Administrator, is a broader role that includes Dynamics 365 apps and is not specific to Power Platform environment management. Option C, System Customizer, only allows customization of system settings and forms, not full environment management. Option D, Power Platform Administrator, is a tenant-wide role that grants administrative access to all environments, which is more than what is needed for delegation to regional leads.

Answer

Dynamics 365 Administrator role.

Answer

System Customizer role.

Answer

Power Platform Administrator role.

Question 4

The exhibit shows a JSON snippet used to create a Power Platform environment via the Power Platform API. The administrator runs the script but the environment is created with the default language and currency instead of the specified values. What is the most likely reason?

Accepted Answer

The JSON syntax is invalid because of the empty securityGroupId.. The JSON snippet uses an empty GUID for 'securityGroupId' (all zeros). In the Power Platform API, an empty or invalid GUID in this field can cause the entire Dataverse settings block to be ignored, resulting in the environment being created with default language and currency. Option A correctly identifies this syntax issue. Options B, C, and D are incorrect because the API version, environment name, and location are valid.

Answer

The API version used does not support specifying language and currency.

Answer

The environment name "ContosoSales" is already in use.

Answer

The location "eastus" is not a valid Azure region for Power Platform.

Question 5

A Power Platform administrator is planning to implement environment lifecycle management. Which TWO actions should the administrator take to ensure unused environments are automatically cleaned up?

Accepted Answer

Create a Power Automate flow that runs periodically and deletes environments that have not been accessed in 30 days.. The two correct actions are D and E. Option D: Creating a Power Automate flow that periodically deletes environments inactive for 30 days automates cleanup. Option E: Setting an environment retention policy in the Power Platform admin center automatically deletes environments after a period of inactivity. Both are automated approaches. Other options are not automatic or not effective: A assigns admin role but doesn't auto-clean, B relies on manual intervention via Copilot, C is manual and not automatic.

Answer

Assign the Environment Admin role to all makers so they can delete their own environments.

Answer

Use the Power Platform Copilot to identify unused environments.

Answer

Manually review environments each month.

Question 6

You are a Power Platform administrator for a medium-sized business. The company uses Power Apps and Power Automate extensively. The development team has requested the ability to create their own sandbox environments for testing without waiting for IT. However, the security team requires that all environments be subject to data loss prevention (DLP) policies and that environment creation be tracked. You need to design a solution that allows developers to self-service environment creation while maintaining governance. The developers currently have Power Apps Plan 2 licenses. What should you do?

Accepted Answer

Create a security group in Microsoft Entra ID, add developers, and configure tenant settings to allow only members of that group to create environments. Enable audit logging.. The best approach is to create a security group in Microsoft Entra ID, add developers to it, and then configure the tenant settings to allow that group to create environments. Additionally, enable audit logging to track creation. Option A is incorrect because assigning the Power Platform Administrator role gives too much privilege. Option B is incorrect because disabling creation for non-admins prevents self-service. Option C is incorrect because the CoE Starter Kit is for governance but does not directly enable self-service creation.

Answer

Assign the Power Platform Administrator role to all developers.

Answer

Disable environment creation for non-admins and have developers submit requests to IT.

Answer

Install the CoE Starter Kit and configure the environment creation policy to allow all users.

Question 7

A manufacturing company is deploying Microsoft Power Platform for its sales team. The environment must be segregated from production to allow experimentation without affecting live data. The solution must also support automated deployment pipelines. What should the administrator create?

Accepted Answer

A developer environment. (a developer environment) is designed for isolated development and testing, and it can be used with automated deployment pipelines via solutions. Option A is wrong because a production environment is for live use. Option B is wrong because Dataverse for Teams is limited in scope. Option D is wrong because a trial environment expires.

Answer

A production environment with Dataverse

Answer

A Dataverse for Teams environment

Answer

A trial environment

Question 8

A company wants to allow users to build Power Apps and Power Automate flows using prebuilt templates and connectors, but without the ability to create custom connectors or access the Dataverse. Which environment type should be assigned to these users?

Accepted Answer

Dataverse for Teams environment. A Dataverse for Teams environment provides basic capabilities with prebuilt templates and standard connectors, but restricts custom connectors and direct access to Dataverse. This matches the requirement. Option A (Developer environment) is wrong because it is intended for individual development and includes full Dataverse access. Option C (Production environment with Dataverse) is wrong because it allows custom connectors and full Dataverse customization. Option D (Default environment) is wrong because it is a production-type environment with unrestricted capabilities.

Answer

Developer environment

Answer

Production environment with Dataverse

Answer

Default environment

Question 9

A global company with offices in multiple regions wants to ensure that Power Automate flows processing sensitive customer data are only executed in specific geographic regions to comply with data residency requirements. What should the administrator configure?

Accepted Answer

Data loss prevention (DLP) policies. Data loss prevention (DLP) policies can be applied to environments in specific geographic regions to restrict connectors and data flow, ensuring that sensitive data is processed only in allowed regions. Environment routing rules do not exist as a feature in Power Platform. Audit logs only record events, not enforce residency. Solution checker analyzes solutions for code issues, not data residency.

Answer

Audit log settings

Answer

Solution checker

Answer

Environment routing rules

Question 10

A company wants to ensure that changes to a Power Platform solution are tracked and can be rolled back if necessary. The development team uses source control. What should the administrator configure to enable solution lifecycle management?

Accepted Answer

Use managed solutions and export to source control. Using managed solutions and exporting them to source control enables versioning and rollback, which is essential for solution lifecycle management. Option B is incorrect because daily environment backups are not granular enough for tracking individual changes. Option C is incorrect because sharing the app does not provide version control. Option D is incorrect because disabling sharing does not help with lifecycle management.

Answer

Backup the environment daily

Answer

Share the app with the team

Answer

Disable sharing to prevent changes

Question 11

An organization is using Power Virtual Agents (now Copilot Studio) to create a customer service chatbot. The chatbot must be available only to users inside the organization, not to external customers. What should the administrator do?

Accepted Answer

Configure authentication in the chatbot. Configuring authentication in the chatbot (option A) ensures that only authenticated users (internal employees) can access the chatbot, restricting external customers. Option B is incorrect because publishing to a public website would make the chatbot accessible to anyone. Option C is incorrect because creating a new environment does not inherently restrict access; authentication is still needed. Option D is incorrect because disabling analytics does not affect access control.

Answer

Publish the chatbot to a public website

Answer

Create a new environment for the chatbot

Answer

Disable analytics for the chatbot

Question 12

A user reports that they cannot create a new Power App in the default environment. The administrator checks that the user has a Power Apps license, but the user still cannot create apps. What is the most likely cause?

Accepted Answer

The environment is not enabled for app creation. By default, the 'Create apps in canvas' and 'Create apps in model-driven' capabilities are disabled in the default environment. Even if a user has a Power Apps license, they cannot create apps unless an administrator explicitly enables app creation for that environment. This is a common environment-level setting that overrides individual licensing.

Answer

The user does not have a Power Apps license

Answer

The user does not have a mobile device

Answer

The user is using an unsupported browser

Question 13

A company is migrating a complex Power Apps solution from a development environment to production. The solution includes custom connectors, flows, and Dataverse tables. Which THREE steps should the administrator take to ensure a successful migration?

Accepted Answer

Test the solution in a staging environment first. To ensure a successful migration, the administrator should test the solution in a staging environment first (A) to validate functionality, export it as a managed solution (C) to maintain component relationships and support future upgrades, and run the solution checker (E) to identify and fix issues before migration. Deleting the development environment after export (B) is risky because it removes the source before the migration is verified. Manually recreating the solution in production (D) is error-prone and not recommended.

Answer

Delete the development environment after export

Answer

Manually recreate the solution in production

Question 14

An administrator needs to assign user roles in a Power Platform environment. Which TWO roles can be assigned to allow users to create and edit Power Apps and flows, but not manage environments?

Accepted Answer

System Customizer. Environment Maker allows users to create and edit Power Apps and flows without environment management. System Customizer also allows creating and editing apps and flows, and additionally can customize system settings, but does not manage environments. Basic User only allows running apps and flows, not creating or editing. System Administrator and Global Administrator include environment management capabilities, which are not desired.

Answer

Basic User

Answer

System Administrator

Answer

Global Administrator

Question 15

An administrator configures a Data Loss Prevention (DLP) policy with the scope set to 'All environments' and places selected connectors in the 'Blocked' group. What will be the result of this policy?

Accepted Answer

The connectors are blocked in all environments. The DLP policy is configured with the scope set to 'All environments' and the selected connectors are in the 'Blocked' group. Therefore, these connectors are blocked in every environment, including production and non-production. Option A is incorrect because audit mode is not enabled; the connectors are blocked, not audited. Option B is incorrect because the policy applies to all environments, not just production. Option D is incorrect because there is no exception for the default environment—the policy applies universally.

Answer

The connectors are allowed but audited

Answer

The connectors are blocked only in production environments

Answer

The connectors are blocked except for the default environment