PL-900 Manage the Microsoft Power Platform environment Practice Test 10 — 15 Questions

Question 1

A large enterprise uses Power Platform with multiple environments. They need to enforce a policy that blocks all Canvas apps from using the 'Twitter' connector, but only in the 'Production' environment. What should the administrator do?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Create an environment-level DLP policy for the Production environment and set 'Twitter' to 'Blocked'. Environment-level DLP policies allow administrators to apply connector restrictions to specific environments, such as blocking the 'Twitter' connector only in 'Production' while leaving it available in other environments. This granular control is essential for enforcing governance without affecting development or testing environments.

Answer

Create a DLP policy at the tenant level and set the 'Twitter' connector to 'Blocked'

Answer

Disable the 'Twitter' connector in the Power Platform admin center for the Production environment

Answer

Use the 'Set Connector' API to disable the connector for the Production environment

Question 2

An organization uses Power Automate flows that connect to Microsoft Dataverse. The flows need to run under a service account with specific permissions. What is the best practice to manage the connection?

Accepted Answer

Create a connection reference that uses the service account's connection. Connection references decouple the connection details from the flow definition, allowing you to configure a service account's connection once and reuse it across multiple flows. When you create a connection reference and set it to use a service account's connection (e.g., a pre-created Dataverse connection authenticated with the service account), the flow runs under that account's permissions without exposing credentials or requiring the flow owner to share their identity. This is the recommended pattern for service principal or application user scenarios in Power Automate.

Answer

Use the flow owner's credentials and share the flow with the service account

Answer

Create a service account connection type in the Power Platform admin center

Answer

Hardcode the service account credentials in the flow

Question 3

A Power Platform administrator wants to see the capacity usage of all environments in the tenant. Where should they look?

Accepted Answer

Power Platform admin center > Capacity. The Capacity page in the Power Platform admin center provides a tenant-level view of all capacity entitlements (database, file, log) and their consumption across environments. This is the dedicated location for monitoring capacity usage, including add-ons and storage overages, as documented in Microsoft's capacity management guidance.

Answer

Power Platform admin center > Environments

Answer

Power Platform admin center > Analytics

Answer

Power Platform admin center > Billing

Question 4

Which TWO actions can a Power Platform administrator perform in the Power Platform admin center?

Accepted Answer

Create and delete environments. The Power Platform admin center provides administrators with the ability to create and delete environments, which are isolated containers for managing apps, flows, and data. This is a core administrative function that directly controls the lifecycle of Power Platform resources.

Answer

Manage SharePoint Online site collections

Answer

Manage Exchange Online mailboxes

Answer

Manage Microsoft Entra ID roles

Question 5

The exhibit shows a DLP policy configuration for a Power Platform environment. Which connector is allowed for business use?

Accepted Answer

SharePoint. SharePoint is classified as 'Business' in the DLP policy because it is a Microsoft-owned enterprise service that supports data loss prevention (DLP) actions like blocking, monitoring, or restricting data flow. The exhibit shows SharePoint under the 'Business' data group, meaning it is allowed for business use without triggering policy violations. In contrast, Outlook, Twitter, and Facebook are placed in the 'Non-Business' group, which blocks their connectors from being used in apps and flows within this environment.

Answer

Outlook

Answer

Twitter

Answer

Facebook

Question 6

A company uses Microsoft Power Platform and requires that all environment creation requests go through an approval process. The security team wants to prevent non-admins from creating trial environments. What should the administrator configure?

Accepted Answer

In Power Platform Admin Center, set 'Disable trial environments created by non-admins' to Yes. The Power Platform Admin Center provides a dedicated tenant-level setting called 'Disable trial environments created by non-admins' that, when set to 'Yes', prevents users without administrative privileges from creating trial environments. This directly addresses the security team's requirement to block non-admins from creating trial environments, as it enforces an approval-based control at the environment creation level.

Answer

Assign users to an environment group with restricted permissions

Answer

In Power Apps settings, disable 'Allow users to create environments'

Answer

Create a Data Loss Prevention (DLP) policy that blocks trial environments

Question 7

An organization uses Microsoft Power Platform and wants to enforce data loss prevention (DLP) policies across all environments. They need to block the use of a specific third-party connector in all environments. What should the administrator do?

Accepted Answer

Create a tenant-level DLP policy that blocks the connector. DLP policies in Microsoft Power Platform can be configured at the tenant level to apply across all environments. By creating a tenant-level DLP policy and blocking the specific third-party connector, the administrator ensures consistent enforcement without needing to manage individual environment policies. This approach centralizes control and prevents the connector from being used in any environment.

Answer

Create a DLP policy for each environment and block the connector

Answer

Create a custom connector with the same name and block it

Answer

Remove the connector from the default solution

Question 8

A company uses Power Automate flows that connect to SharePoint and Microsoft Entra ID. The administrator needs to ensure that the flows can access data only from approved data sources. What should the administrator configure?

Accepted Answer

Create a Data Loss Prevention (DLP) policy that restricts connectors to approved data sources. Data Loss Prevention (DLP) policies in the Power Platform allow administrators to control which connectors can be used together in flows and apps, effectively restricting flows to approved data sources like SharePoint and Microsoft Entra ID. By classifying connectors as Business or Non-Business, DLP policies prevent unauthorized data sharing between environments, which directly addresses the requirement to limit data access to approved sources.

Answer

Define SharePoint site permissions for the flows

Answer

Configure data policies in Power Apps settings

Answer

Set connector sharing permissions to limit access

Question 9

Which THREE are valid components of a Microsoft Power Platform environment?

Accepted Answer

Custom connector. A custom connector is a valid component of a Microsoft Power Platform environment because it allows you to extend the platform by creating your own API connectors to external services. Custom connectors are stored and managed within an environment, enabling makers to build apps and flows that interact with systems not covered by out-of-the-box connectors.

Answer

Power BI workspace

Answer

Microsoft 365 Group

Question 10

Which TWO are best practices for managing Power Platform environments in a large enterprise?

Accepted Answer

Use separate environments for development, test, and production. Option D is correct because separating development, test, and production environments is a core ALM best practice in Power Platform, allowing makers to build and validate solutions in isolation before promoting them to production, thereby preventing untested changes from affecting live business apps. Option E is correct because Data Loss Prevention (DLP) policies define connector groups (Business, Non-Business, Blocked) and govern which connectors can share data, which is essential in a large enterprise to prevent sensitive data from flowing into unauthorized services. The unmarked options do not belong: A is wrong because allowing every user to create environments leads to environment sprawl and ungoverned resources, B is wrong because granting System Administrator to all users violates least privilege and exposes the tenant to misconfiguration, and C is wrong because a single shared environment mixes development and production workloads, making change management and security impossible.

Answer

Give all users the ability to create environments

Answer

Assign the System Administrator role to all users

Answer

Use a single environment for all apps

Question 11

An organization uses Power Automate flows that connect to Microsoft Dataverse and SharePoint. The administrator needs to ensure that only specific connectors can be used together. What should they configure?

Accepted Answer

Configure a Data Loss Prevention (DLP) policy. Data Loss Prevention (DLP) policies in the Power Platform allow administrators to classify connectors into Business, Non-Business, and Blocked groups, and to define which connectors can be used together within a single flow or app. This directly enforces the requirement that only specific connectors can be combined, preventing data from flowing between incompatible services such as Dataverse and a personal social media connector.

Answer

Enable solution component isolation

Answer

Create an environment security group

Answer

Turn on auditing for the environment

Question 12

A company has a Power Platform environment used for development. The development team needs to deploy a solution to a test environment. What is the recommended approach?

Accepted Answer

Export a managed solution from the development environment and import it into the test environment. Managed solutions are the recommended approach for deploying to non-development environments (e.g., test, UAT, production). A managed solution locks components to prevent direct editing in the target environment, supports lifecycle management (upgrades, patches, and removal), and ensures that only the intended customizations are deployed. Exporting an unmanaged solution (Option A) would leave components editable in the test environment, breaking the managed lifecycle pattern.

Answer

Export an unmanaged solution from the development environment and import it into the test environment

Answer

Manually recreate all components in the test environment

Answer

Copy the entire development environment to the test environment

Question 13

An administrator needs to ensure that only users from a specific Microsoft Entra ID group can access a Power Platform environment. What should the administrator configure?

Accepted Answer

Assign a security group to the environment in the Power Platform admin center. Assigning a security group to an environment in the Power Platform admin center restricts access to only members of that Microsoft Entra ID group. This is the standard method for controlling user access to a Power Platform environment, ensuring that only authorized users can interact with its resources.

Answer

Disable the 'Create personal productivity environments' setting

Answer

Set environment capacity limits

Answer

Configure a data loss prevention (DLP) policy

Question 14

An organization has multiple Power Platform environments. The administrator needs to move a solution from a development environment to a production environment. The solution includes custom connectors and environment variables. What is the correct process?

Accepted Answer

Export a managed solution from development and import it into production. Managed solutions are the standard mechanism for deploying customizations (including custom connectors and environment variables) from a development environment to a production environment. Exporting a managed solution from development and importing it into production ensures that components are packaged as a single, deployable unit, and it prevents accidental modifications in production by making the solution layers read-only after import.

Answer

Copy the entire development environment to production

Answer

Export an unmanaged solution from development and import it into production

Answer

Manually re-create all components in production

Question 15

An organization wants to ensure that all Power Platform solutions in production environments are tracked and changes are approved. What should the administrator implement?

Accepted Answer

Managed solutions with application lifecycle management (ALM). Managed solutions with application lifecycle management (ALM) ensure that all Power Platform solutions in production environments are tracked and changes are approved by enforcing version control, solution layering, and controlled deployment through environments. This approach uses solution components and environment segmentation to prevent unapproved modifications and maintain an audit trail.

Answer

Data Loss Prevention (DLP) policies

Answer

Environment security groups

Answer

Disable the 'Create personal productivity environments' setting