PL-900 Manage the Microsoft Power Platform environment Practice Test 10 — 15 Questions

Question 1

A manufacturing company is deploying Microsoft Power Platform for its sales team. The environment must be segregated from production to allow experimentation without affecting live data. The solution must also support automated deployment pipelines. What should the administrator create?

Accepted Answer

A developer environment. A developer environment is designed for isolated development and testing, and it can be used with automated deployment pipelines via solutions. Option A is wrong because a production environment is for live use. Option B is wrong because Dataverse for Teams is limited in scope. Option D is wrong because a trial environment expires.

Answer

A production environment with Dataverse

Answer

A Dataverse for Teams environment

Answer

A trial environment

Question 2

An organization has multiple Power Platform environments. The security team mandates that all environments must use Microsoft Entra ID conditional access policies to enforce multi-factor authentication. However, one environment hosts a service account that cannot perform interactive logins. What should the administrator do to comply without breaking the service account?

Accepted Answer

Exclude the service account from the conditional access policy. Excluding the service account from the conditional access policy is the correct approach because service accounts cannot perform MFA. Option A is wrong because disabling MFA for the entire environment weakens security. Option B is wrong because changing the service account to interactive login is not feasible. Option D is wrong because creating a new environment does not resolve the policy conflict.

Answer

Create a new environment for the service account

Answer

Change the service account to use interactive login

Answer

Disable MFA for that environment

Question 3

A company wants to allow users to build Power Apps and Power Automate flows using prebuilt templates and connectors, but without the ability to create custom connectors or access the Dataverse. Which environment type should be assigned to these users?

Accepted Answer

Dataverse for Teams environment. A Dataverse for Teams environment provides basic capabilities with templates and standard connectors, but restricts custom connectors and Dataverse customization. Option A is wrong because a production environment with Dataverse gives full access. Option B is wrong because a developer environment is for development. Option D is wrong because a default environment is similar to production.

Answer

Developer environment

Answer

Production environment with Dataverse

Answer

Default environment

Question 4

A global company with offices in multiple regions wants to ensure that Power Automate flows processing sensitive customer data are only executed in specific geographic regions to comply with data residency requirements. What should the administrator configure?

Accepted Answer

Data loss prevention (DLP) policies. Data loss prevention (DLP) policies can restrict the use of connectors and data movement across regions. Option A is wrong because environment routing is not a feature. Option B is wrong because solution checkers analyze code, not data residency. Option D is wrong because audit logs only record events, not enforce residency.

Answer

Audit log settings

Answer

Solution checker

Answer

Environment routing rules

Question 5

An administrator needs to manage multiple Power Platform environments across several tenants. The administrator wants to use a single tool to view environment details, apply updates, and configure settings for all environments. Which tool should the administrator use?

Accepted Answer

Power Platform Admin Center. The Power Platform Admin Center is the central tool for managing environments across tenants. Option A is wrong because PowerShell is a scripting tool, not a single interface for all tasks. Option B is wrong because Power Apps Maker Portal is for app creation. Option D is wrong because Microsoft 365 admin center does not manage Power Platform environments fully.

Answer

PowerShell cmdlets

Answer

Power Apps Maker Portal

Answer

Microsoft 365 admin center

Question 6

A company wants to ensure that changes to a Power Platform solution are tracked and can be rolled back if necessary. The development team uses source control. What should the administrator configure to enable solution lifecycle management?

Accepted Answer

Use managed solutions and export to source control. Using managed solutions and exporting them to source control enables versioning and rollback. Option A is wrong because backing up the environment is not granular. Option B is wrong because sharing the app does not provide version control. Option D is wrong because disabling sharing does not help with lifecycle management.

Answer

Backup the environment daily

Answer

Share the app with the team

Answer

Disable sharing to prevent changes

Question 7

An organization is using Power Virtual Agents (now Copilot Studio) to create a customer service chatbot. The chatbot must be available only to users inside the organization, not to external customers. What should the administrator do?

Accepted Answer

Configure authentication in the chatbot. Configuring authentication in the chatbot ensures only internal users can access it. Option A is wrong because creating a new environment does not restrict access. Option B is wrong because publishing to a public website would make it accessible externally. Option D is wrong because disabling analytics does not affect access.

Answer

Publish the chatbot to a public website

Answer

Create a new environment for the chatbot

Answer

Disable analytics for the chatbot

Question 8

A company has multiple Power Platform environments. The administrator notices that a production environment is running low on storage. The administrator needs to free up space without disrupting active users. What should the administrator do FIRST?

Accepted Answer

Identify large or unused solutions and remove them. Identifying large or unused solutions helps target cleanup. Option A is wrong because deleting audit logs may not free significant space. Option B is wrong because adding storage is a cost, not cleanup. Option D is wrong because disabling plugins may break functionality.

Answer

Delete old audit logs

Answer

Disable unused plugins

Answer

Add more storage to the environment

Question 9

A user reports that they cannot create a new Power App in the default environment. The administrator checks that the user has a Power Apps license, but the user still cannot create apps. What is the most likely cause?

Accepted Answer

The environment is not enabled for app creation. If the environment is not enabled for app creation, users cannot create apps even with a license. Option A is wrong because the user has a license. Option B is wrong because browser issues would not prevent creation entirely. Option D is wrong because mobile access is not required for creation.

Answer

The user does not have a Power Apps license

Answer

The user does not have a mobile device

Answer

The user is using an unsupported browser

Question 10

An administrator is planning the environment strategy for a large enterprise. Which TWO considerations should the administrator include to ensure proper governance?

Accepted Answer

Establish environment naming conventions. Environment naming conventions and DLP policies are key governance considerations. Option A is wrong because using only the default environment is not recommended for governance. Option D is wrong because allowing all connectors is not secure. Option E is wrong because disabling monitoring is counterproductive.

Answer

Use only the default environment to simplify management

Answer

Disable environment monitoring to reduce overhead

Answer

Allow all connectors to maximize flexibility

Question 11

A company is migrating a complex Power Apps solution from a development environment to production. The solution includes custom connectors, flows, and Dataverse tables. Which THREE steps should the administrator take to ensure a successful migration?

Accepted Answer

Test the solution in a staging environment first. Exporting as managed solution, using solution checker, and testing in a staging environment are essential steps. Option D is wrong because manually recreating is error-prone. Option E is wrong because deleting the development environment after export is risky.

Answer

Delete the development environment after export

Answer

Manually recreate the solution in production

Question 12

An administrator needs to assign user roles in a Power Platform environment. Which TWO roles can be assigned to allow users to create and edit Power Apps and flows, but not manage environments?

Accepted Answer

Basic User. Environment Maker and Basic User roles allow creation and use of apps without environment management. Option A is wrong because System Administrator manages environments. Option D is wrong because System Customizer customizes system. Option E is wrong because Global Admin has tenant-wide management.

Answer

System Customizer

Answer

System Administrator

Answer

Global Administrator

Question 13

Refer to the exhibit. An administrator is configuring a Data Loss Prevention (DLP) policy. The policy is applied to all environments. What will be the result of this policy?

Accepted Answer

The connectors are blocked in all environments. The policy blocks the specified connectors in all environments. Option A is wrong because the policy targets all environments. Option B is wrong because there is no exclusion. Option D is wrong because the policy blocks the connectors, not just warns.

Answer

The connectors are allowed but audited

Answer

The connectors are blocked only in production environments

Answer

The connectors are blocked except for the default environment

Question 14

You are the Power Platform administrator for a large financial services organization. The organization has three environments: Dev, Test, and Prod. The Dev environment is used by a team of 10 developers who frequently create and test solutions. The Test environment is for quality assurance, and Prod is for live applications. Recently, the compliance team has mandated that all environments must have audit logging enabled to track changes and user activities. Additionally, the organization wants to implement a policy that prevents the use of connectors that transmit data outside the organization's Azure region. The compliance team also requires that any new environment created in the future automatically inherits these audit and DLP policies. You need to configure the environment settings to meet these requirements. What should you do?

Accepted Answer

Enable audit logging and create a tenant-level DLP policy that applies to all environments. Enabling audit logging and creating a DLP policy at the tenant level ensures all environments inherit these settings. Option A is wrong because enabling audit only in Prod does not meet the mandate for all environments. Option C is wrong because configuring each environment individually is inefficient and does not automatically apply to new environments. Option D is wrong because a tenant-level policy with a warning does not block data transmission as required.

Answer

Configure audit logging and DLP policies individually for each environment

Answer

Create a tenant-level DLP policy that warns users about data transmission

Answer

Enable audit logging in the Prod environment and create a DLP policy for Dev and Test only

Question 15

You are the Power Platform administrator for a retail company. The company has a single default environment that all employees use to build and run Power Apps and Power Automate flows. Recently, the IT department noticed that some users are accidentally deleting shared flows that are critical to business operations. To prevent this, you need to implement a solution that allows users to create and edit their own flows, but prevents them from deleting flows owned by others. Additionally, you want to ensure that only approved connectors are used to protect sensitive data. You have been granted permissions to manage environments and security roles. What should you do?

Accepted Answer

Create a new environment, assign users the Environment Maker role, and implement a DLP policy. Creating a new environment with appropriate security roles allows you to control permissions. Assigning the Environment Maker role allows users to create and edit their own flows, but they cannot delete others' flows. Implementing a DLP policy restricts connectors. Option B is wrong because sharing does not prevent deletion. Option C is wrong because removing delete permission for all flows also prevents legitimate cleanup. Option D is wrong because changing the default environment settings does not provide granular control.

Answer

Remove the delete permission for all flows from all users

Answer

Enable audit logging and rely on manual review of deletions

Answer

Share all critical flows with read-only access to all users