PL-900 Manage the Microsoft Power Platform environment Practice Test 2 — 15 Questions

Question 1

A company plans to deploy Power Apps for field service technicians. The IT department requires that all users authenticate using their corporate credentials and that access to the Power Apps environment is restricted to users from the company's tenant only. Which configuration should the administrator use?

Accepted Answer

Set the environment security group to 'Only internal users' and disable external sharing. Option D is correct because setting the environment security group to 'Only internal users' and disabling external sharing ensures that only authenticated users from the company's own Microsoft Entra ID (formerly Azure AD) tenant can access the Power Apps environment. This meets the IT requirement of restricting access to corporate credentials and the company's tenant only, preventing any external guest or user from another tenant from signing in.

Answer

Enable 'Allow users from other tenants' in environment settings

Answer

Set the environment security group to 'All users' and enable external sharing

Answer

Assign a security group that includes only specific technicians

Question 2

A Power Platform administrator notices that a production environment has exceeded its storage quota. The administrator needs to free up storage without impacting active solutions. Which action should the administrator take first?

Accepted Answer

Analyze storage by entity and delete unused custom tables. Option A is correct because analyzing storage by entity allows the administrator to identify which custom tables consume the most space, and deleting unused custom tables directly frees up storage without affecting active solutions. This is the recommended first step in the Power Platform admin center, as it targets the root cause of storage overage while preserving production functionality.

Answer

Increase the storage quota

Answer

Remove the environment and create a new one

Answer

Delete all audit logs older than 30 days

Question 3

An organization uses Power Automate flows that connect to Microsoft SharePoint Online and Microsoft Dataverse. The security team requires that all connections to Dataverse use service principal authentication instead of user credentials. The administrator needs to ensure that flows relying on Dataverse connections continue to work after the change. What should the administrator do?

Accepted Answer

Register a service principal in Microsoft Entra ID and update connection references in the flows' solution. Service principal authentication in Power Automate requires registering an application in Microsoft Entra ID (formerly Azure AD) and using its credentials to authenticate to Dataverse. Updating the connection references in the flows' solution to point to a service principal-based connection ensures all flows continue to work without requiring user credentials, meeting the security team's requirement.

Answer

Create a new environment and migrate flows there

Answer

Recreate all flows with a shared connection using a service principal

Answer

Delete existing connections and ask users to create new ones

Question 4

A company is deploying Power Virtual Agents (now Copilot Studio) chatbots across multiple departments. Each department needs its own environment to manage chatbots independently. However, the company wants to share a common set of entities and workflows across all environments. Which approach should the administrator take?

Accepted Answer

Create a separate environment per department and deploy managed solutions containing the common components. Option D is correct because managed solutions allow you to package common components (entities, workflows) and deploy them to multiple environments, ensuring consistency while maintaining departmental isolation. Each department gets its own environment for independent chatbot management, and the shared components are installed via managed solutions that cannot be modified, preserving the common baseline.

Answer

Create a single environment for all departments and use security roles to isolate chatbots

Answer

Use Power Apps component library to share components across environments

Answer

Create a shared environment for common components and link each department environment to it

Question 5

A Power Platform administrator is configuring data loss prevention (DLP) policies. The company uses Power Automate flows that connect to Microsoft SharePoint and Microsoft Teams. The security team wants to block any flow from sending data from SharePoint to unsanctioned third-party services. Which DLP policy configuration should the administrator apply?

Accepted Answer

Classify SharePoint as Business and all third-party services as Blocked. Option B is correct because DLP policies in Power Platform allow administrators to classify connectors into Business, Non-Business, and Blocked categories. By classifying SharePoint as Business and all third-party services as Blocked, the administrator ensures that no flow can send data from SharePoint to unsanctioned third-party connectors, as blocked connectors cannot be used in any flow that also uses a Business connector. This directly enforces the security team's requirement to prevent data exfiltration to unsanctioned services.

Answer

Create a policy that only applies to non-production environments

Answer

Classify SharePoint as Business and all third-party services as Non-Business

Answer

Classify all connectors as Blocked

Question 6

An organization wants to enable Microsoft Copilot Studio (formerly Power Virtual Agents) to answer questions from employees about company policies. The chatbot must only use internal company documents stored in SharePoint as its knowledge source. Which configuration should the administrator use?

Accepted Answer

Add a SharePoint knowledge source in Copilot Studio and configure authentication to use the company's Microsoft Entra ID. Option D is correct because Microsoft Copilot Studio allows administrators to add SharePoint as a knowledge source directly, enabling the chatbot to retrieve answers from internal documents without custom development. Configuring authentication with Microsoft Entra ID ensures that only authorized users can access the company policies, maintaining security and compliance.

Answer

Enable the 'Use generative AI' feature in the Power Platform admin center

Answer

Deploy a custom connector to SharePoint

Answer

Create a Power Automate flow to fetch data from SharePoint and pass it to the chatbot

Question 7

A company uses Power BI to create reports from Dataverse data. The administrator needs to ensure that report creators can only see data from tables they have access to in Dataverse. Which security feature should the administrator configure?

Accepted Answer

Define row-level security (RLS) roles in Power BI and map them to Dataverse roles. Option D is correct because row-level security (RLS) in Power BI restricts data access based on user roles. Option A is wrong because it applies to the environment, not specific tables. Option B is wrong because it affects who can create reports, not data visibility. Option C is wrong because table permissions do not translate to Power BI.

Answer

Set environment security group to include only report creators

Answer

Configure table-level permissions in Dataverse

Answer

Assign the 'Environment Maker' role to report creators

Question 8

An administrator needs to prevent users from creating Power Apps outside of the approved environment (Production). The company has a Development and a Production environment. Users should only be able to create apps in Development. Which configuration should the administrator use?

Accepted Answer

Assign the Environment Maker role to users only in the Development environment. The Environment Maker role grants permission to create apps within a specific environment. By assigning this role only to the Development environment, users can create apps there but are blocked from creating them in Production, where they lack the role. This directly enforces the requirement without affecting other permissions.

Answer

Assign the Environment Maker role to users in both environments

Answer

Create a DLP policy that blocks app creation in Production

Answer

Remove the Environment Maker role from all users in all environments

Question 9

A company has a Power Platform environment that contains several unmanaged solutions. The administrator wants to promote a solution to production. Which action should the administrator take to ensure the solution can be deployed to other environments?

Accepted Answer

Export the solution as a managed solution. Exporting a solution as a managed solution is the correct action because managed solutions are designed for deployment to production and other non-development environments. They prevent direct customization of components, enforce solution layering, and allow for proper lifecycle management, including upgrades and patching. Unmanaged solutions, by contrast, are intended for development and cannot be reliably deployed to production without breaking the component ownership model.

Answer

Use the 'Backup' feature in the admin center

Answer

Apply a solution patch and export it

Answer

Clone the solution and export as unmanaged

Question 10

A Power Platform administrator needs to monitor usage and performance of environments. Which TWO actions should the administrator take? (Choose two.)

Accepted Answer

Enable audit logging in Microsoft Purview compliance portal. Option B is correct because enabling audit logging in the Microsoft Purview compliance portal captures user and admin activities across Power Platform environments, which is essential for monitoring usage and performance. Audit logs provide a detailed record of events such as environment creation, solution imports, and data access, enabling administrators to track changes and diagnose performance issues. This aligns with the requirement to monitor usage and performance, as audit data can be analyzed to identify patterns and anomalies.

Answer

Enable capacity alerts for storage

Answer

Set up Microsoft Defender XDR for Power Platform

Answer

Configure DLP policies to block high-risk connectors

Question 11

An administrator is managing a Power Platform environment that uses Microsoft Entra ID for authentication. The company wants to enforce multi-factor authentication (MFA) for all users accessing Power Apps. Which THREE configurations should the administrator implement? (Choose three.)

Accepted Answer

Configure the environment's 'User authentication' setting to 'Require MFA' in Power Platform admin center. Option A is correct because the Power Platform admin center provides a direct 'Require MFA' setting under environment 'User authentication' that enforces MFA for all users accessing Power Apps within that environment. This setting works in conjunction with Microsoft Entra ID to require a second factor during authentication, ensuring that all users must pass MFA before accessing the environment's resources.

Answer

Disable security group membership for the environment

Answer

Assign the 'System Administrator' role to all users

Question 12

A company wants to use Microsoft Copilot Studio to build a chatbot that helps employees reset their passwords. Which TWO components are required? (Choose two.)

Accepted Answer

Power Automate to connect to the password reset system. Option A is correct because Power Automate is required to create a flow that connects the chatbot to the password reset system, enabling automated execution of the reset process. Without this integration, the chatbot cannot perform the backend action of resetting the password.

Answer

Power Virtual Agents (classic)

Answer

Power Apps to create the user interface

Answer

AI Builder to process natural language

Question 13

An administrator reviews the JSON output from a Power Platform environment. What should the administrator be concerned about based on the data?

Accepted Answer

The API rate limit is approaching its maximum. Option C is correct because the JSON output shows the 'RateLimitRemaining' field approaching zero, indicating that the API rate limit is nearly exhausted. Power Platform enforces per-tenant and per-user API limits to ensure fair resource usage, and hitting the limit will throttle or block further API calls, disrupting integrations and automated workflows.

Answer

The Dataverse URL is incorrect

Answer

The admin email is not configured

Answer

The environment is out of storage

Question 14

An administrator runs a PowerShell command to check a DLP policy. Based on the output, which connector is allowed to be used in Power Automate flows?

Accepted Answer

Microsoft Teams. Option B is correct because the allowedConnectors list includes Microsoft.Teams. Options A, C, and D are in the blocked list.

Answer

Dropbox

Answer

Google Drive

Answer

Microsoft OneDrive

Question 15

An administrator is reviewing an ARM template for deploying a Power Platform environment. Based on the exhibit, what type of environment will be created?

Accepted Answer

Developer environment. Option B is correct because 'environmentSku' is set to 'Developer', indicating a Developer environment. Option A is wrong because Production is not specified. Option C is wrong because Sandbox is not specified. Option D is wrong because Trial is not specified.

Answer

Trial environment

Answer

Production environment

Answer

Sandbox environment