PL-900 Manage the Microsoft Power Platform environment Practice Test 11 — 15 Questions

Question 1

A company has a Power Platform environment that is running low on storage. The administrator needs to free up storage without deleting important data. What should they do first?

Accepted Answer

Review storage analytics in the Power Platform admin center to identify large entities. The first step in freeing up storage without deleting important data is to identify which entities consume the most space. The Power Platform admin center provides storage analytics that break down storage usage by entity, allowing administrators to make informed decisions about data cleanup or archiving. This approach ensures that only non-essential data is targeted, preserving critical business data.

Answer

Disable auditing for all environments

Answer

Delete all audit logs

Answer

Purchase additional storage capacity

Question 2

A company wants to enforce data loss prevention (DLP) policies for Power Automate flows. Which TWO actions can the administrator perform?

Accepted Answer

Block specific connectors from being used in flows. Administrators can block specific connectors from being used in Power Automate flows as part of a DLP policy, preventing data from being shared with unauthorized services. Option C is correct because DLP policies can be scoped to a specific environment, allowing granular control over connector usage within that environment. This enables the administrator to enforce data protection rules tailored to different business contexts.

Answer

Allow users to bypass DLP policies with administrator approval

Answer

Assign DLP policies to specific users

Answer

Inherit the tenant-level DLP policy for all environments

Question 3

Refer to the exhibit. A Power Platform administrator applies this DLP policy to the default environment. What is the result?

Accepted Answer

Microsoft Teams and Twitter connectors are blocked in the default environment. The exhibit shows a Data Loss Prevention (DLP) policy configured with Microsoft Teams and Twitter connectors in the 'Blocked' group. Since this policy is applied to the default environment, only those two connectors are blocked in that environment. All other connectors remain in the 'Allowed' group by default, so they are permitted. Therefore, the correct result is that Microsoft Teams and Twitter connectors are blocked in the default environment.

Answer

All connectors are allowed

Answer

All connectors are blocked

Answer

The policy applies to all environments

Question 4

Refer to the exhibit. An administrator runs this PowerShell command against a Power Platform environment. What can the administrator conclude?

Accepted Answer

The environment is accessible only to members of the ContosoUsers security group. The PowerShell command `Get-AdminPowerAppEnvironment` returns the environment details, including the `SecurityGroupId` property. If this property is populated with a GUID, it indicates a security group is assigned to the environment, restricting access to its members. Since the exhibit shows a non-null `SecurityGroupId` for the ContosoUsers group, the environment is accessible only to members of that security group.

Answer

The environment creation failed

Answer

The environment has no security group assigned

Answer

The environment is a personal productivity environment

Question 5

An organization has several Power Platform environments used for development and testing. They want to prevent accidental deletion of important data. What strategy should they implement?

Accepted Answer

Use the Power Platform admin center to configure environment backups and enable solution checker.. The Power Platform admin center provides automated daily backups (with a 28-day retention for production environments) and allows manual backups, which directly protects against accidental data loss. Enabling solution checker is a separate best practice for quality assurance, but the core strategy for preventing accidental deletion is leveraging the built-in backup and restore capabilities.

Answer

Regularly export all data to Excel files and store them in OneDrive.

Answer

Set environment capacity limits to prevent storage of excessive data.

Answer

Enable versioning on all SharePoint lists used by Power Apps.

Question 6

A global company uses Power Platform and wants to ensure that data residency requirements are met for users in different regions. What should they configure?

Accepted Answer

In the Power Platform admin center, create environments in the appropriate geographic regions (e.g., Europe, United States).. Power Platform environments are the boundary for data storage and compute. By creating environments in specific geographic regions (e.g., Europe, United States) via the Power Platform admin center, the company ensures that all data for that environment resides in the chosen region, meeting data residency requirements. This is the primary mechanism for controlling data location in Power Platform.

Answer

Create data loss prevention (DLP) policies to block data movement between regions.

Answer

Configure Microsoft Entra ID Conditional Access policies to restrict access based on geographic location.

Answer

Use Microsoft Purview to tag environments with data residency labels.

Question 7

A company uses Power Automate flows that access Microsoft SharePoint and Microsoft Dataverse. They want to prevent data from leaving the organization. What should they configure?

Accepted Answer

Create a data loss prevention (DLP) policy in the Power Platform admin center that blocks sharing data with external connectors.. Data Loss Prevention (DLP) policies in the Power Platform admin center are specifically designed to prevent data from leaving the organization by controlling which connectors can share data. By blocking external connectors, the policy ensures that SharePoint and Dataverse data cannot be sent to unauthorized external services, directly addressing the requirement.

Answer

Configure Microsoft Purview to automatically classify and protect data in Power Automate.

Answer

Enable Microsoft Defender XDR to monitor for suspicious data transfers.

Answer

Apply Microsoft Entra ID Conditional Access policies to require managed devices.

Question 8

A company uses a Power Platform environment that contains several production apps. They need to ensure that changes to these apps are reviewed and approved before deployment to the production environment. What should they implement?

Accepted Answer

Use managed solutions and Azure DevOps for application lifecycle management (ALM) with deployment gates.. Managed solutions and Azure DevOps with deployment gates provide a structured Application Lifecycle Management (ALM) process. This allows changes to be reviewed, tested, and approved before deployment to a production environment, ensuring governance and control over modifications.

Answer

Create data loss prevention (DLP) policies for the production environment.

Answer

Assign the System Administrator role to all developers.

Answer

Configure Microsoft Purview to audit changes and require approval.

Question 9

A user reports they cannot create a new Power Apps app in the default environment. They have a Power Apps license. What is the most likely cause?

Accepted Answer

The user has not been assigned the Environment Maker security role for the default environment.. The most likely cause is that the user has not been assigned the Environment Maker security role for the default environment. Even with a Power Apps license, a user must be explicitly granted the Environment Maker role in a specific environment (including the default environment) to create apps. Without this role, the user can only run apps, not create or edit them.

Answer

A data loss prevention (DLP) policy is blocking app creation.

Answer

The environment has reached its maximum number of apps.

Answer

The user does not have a Power Apps license.

Question 10

An organization wants to allow external partners to access specific Power Apps and data without granting them full access to the tenant. What should they configure?

Accepted Answer

Invite partners as guest users in Microsoft Entra ID and assign them appropriate security roles in the Power Platform environment.. Inviting external partners as guest users in Microsoft Entra ID (formerly Azure AD) and assigning them appropriate security roles in the Power Platform environment is the standard method for providing controlled, least-privilege access to specific Power Apps and their underlying data sources. This approach leverages Microsoft Entra B2B collaboration to create guest identities, which can then be granted access to specific environments and resources without giving them full tenant-level permissions.

Answer

Use Microsoft Intune to manage partner devices.

Answer

Create a data loss prevention (DLP) policy that allows external sharing.

Answer

Share the app URL with the partners and ask them to sign in with their own accounts.

Question 11

A company has multiple Power Platform environments. They want to automatically apply consistent settings (e.g., DLP policies, audit settings) to all new environments. What should they do?

Accepted Answer

Create an environment group in the Power Platform admin center and assign policies to the group.. Environment groups in the Power Platform admin center allow administrators to define a set of policies (such as DLP policies and audit settings) that are automatically applied to all environments within the group, including newly created ones. This provides a centralized, no-code method to enforce consistent governance across multiple environments without manual intervention.

Answer

Use PowerShell scripts to configure each environment after creation.

Answer

Use Azure Blueprints to define and apply a set of Azure resources.

Answer

Use Microsoft Intune to enforce settings on Power Platform environments.

Question 12

Which THREE components are part of the Power Platform environment lifecycle management?

Accepted Answer

Environment creation. Environment creation is a core component of Power Platform environment lifecycle management because it establishes the isolated container where apps, flows, and data reside. The lifecycle begins when an administrator provisions a new environment, which sets up a dedicated Dataverse database, security boundaries, and resource limits. Without creation, no subsequent lifecycle operations (backup, restore, deletion) can occur.

Answer

Creating users in Microsoft Entra ID

Answer

Publishing Power BI reports

Question 13

Which TWO of the following are valid reasons to create multiple Power Platform environments?

Accepted Answer

To isolate data for different business units or projects.. Power Platform environments act as security and data boundaries, allowing organizations to isolate data for different business units or projects. Each environment has its own Dataverse database, which prevents data leakage and enables role-based access control tailored to specific teams or initiatives.

Answer

To increase the total storage capacity available.

Answer

To improve performance of Power Automate flows.

Answer

To reduce the cost of Power Apps licenses.

Question 14

A company uses Microsoft Power Platform and wants to enforce data loss prevention (DLP) policies for all environments. The admin needs to block the use of SharePoint connector in all default environments. Which action should the admin take?

Accepted Answer

Create a DLP policy that applies to all environments and block the SharePoint connector.. DLP policies in Microsoft Power Platform are designed to control connector usage across environments. By creating a DLP policy that applies to all environments and blocking the SharePoint connector, the admin ensures that the connector is prohibited in every environment, including all default environments. This action directly enforces the data loss prevention requirement at the tenant level.

Answer

Create a DLP policy and assign it to the default environment only.

Answer

Use Microsoft Entra ID conditional access to block the SharePoint connector.

Answer

Configure connector sharing settings in Power Apps to block SharePoint.

Question 15

An organization has multiple Power Platform environments including production, development, and test. They want to ensure that changes made in development are promoted to test and then to production, with approval gates. Which feature should they use?

Accepted Answer

Use managed solutions with environment variables and configure deployment pipelines.. Managed solutions with environment variables and deployment pipelines provide a structured, automated way to promote solutions across environments with approval gates. This approach ensures that only managed solutions (which are locked and not directly editable) are deployed to production, while environment variables allow configuration values to change per environment without modifying the solution itself.

Answer

Use Power Apps check-in feature and version history.

Answer

Use unmanaged solutions and export/import manually between environments.

Answer

Export solutions to a SharePoint document library and import from there.