PL-900 Manage the Microsoft Power Platform environment Practice Test 2 — 15 Questions

Question 1

You are the Power Platform administrator for a retail company. The company has a single default environment that all employees use to build and run Power Apps and Power Automate flows. Recently, the IT department noticed that some users are accidentally deleting shared flows that are critical to business operations. To prevent this, you need to implement a solution that allows users to create and edit their own flows, but prevents them from deleting flows owned by others. Additionally, you want to ensure that only approved connectors are used to protect sensitive data. You have been granted permissions to manage environments and security roles. What should you do?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Create a new environment, assign users the Environment Maker role, and implement a DLP policy. Creating a new environment and assigning users the Environment Maker role allows them to create and edit their own flows but prevents them from deleting flows owned by others. Implementing a Data Loss Prevention (DLP) policy restricts the use of connectors to approved ones, protecting sensitive data. Option A is incorrect because removing the delete permission for all flows would prevent even legitimate cleanup. Option C is incorrect because audit logging only detects deletions after they occur, it does not prevent them. Option D is incorrect because sharing flows with read-only access prevents users from editing their own flows as required.

Answer

Remove the delete permission for all flows from all users

Answer

Enable audit logging and rely on manual review of deletions

Answer

Share all critical flows with read-only access to all users

Question 2

You are the Power Platform administrator for your organization. A user reports that they cannot create a new environment. What is the most likely cause?

Accepted Answer

The user does not have the appropriate license or role to create environments.. Creating environments in the Power Platform requires either a Power Apps, Power Automate, or Dynamics 365 license, and the user must be assigned the Environment Admin or Global Admin role. Without the appropriate license or role, the 'New environment' button is disabled, and the user cannot proceed with environment creation.

Answer

The environment creation feature is disabled in the tenant settings.

Answer

The user is trying to create a production environment without a valid default environment.

Answer

The tenant has reached its maximum number of environments.

Question 3

Your organization has a Power Platform environment that contains several canvas apps and flows. You need to ensure that only users from your Microsoft Entra ID tenant can access the environment. What should you configure?

Accepted Answer

Assign a security group to the environment in the Power Platform admin center.. Assigning a security group to the environment in the Power Platform admin center restricts access to only members of that group, who must be from your Microsoft Entra ID tenant. This ensures that only authenticated users within your tenant can access the environment, effectively blocking external users.

Answer

Change the environment URL to include the tenant name.

Answer

Modify the tenant-level environment creation settings.

Answer

Configure a data loss prevention (DLP) policy for the environment.

Question 4

Your organization uses Power Platform environments for development, test, and production. A developer accidentally deleted a managed solution from the production environment. You need to restore the solution without affecting other components. What should you do?

Accepted Answer

Restore the environment from a backup taken before the deletion.. Restoring the production environment from a backup taken before the deletion is the only supported method in Power Platform to recover a deleted managed solution without affecting other components. Managed solutions are sealed and cannot be partially restored; environment backup restore returns the entire environment to a previous point in time, ensuring the solution is recovered along with its dependencies and without impacting unrelated customizations.

Answer

Reimport the solution from the source-controlled repository using Azure DevOps.

Answer

Use the Power Platform admin center to recover the solution from the recycle bin.

Answer

Reimport the managed solution from a backup file.

Question 5

You are a Power Platform administrator. A user reports that they are unable to share a canvas app with external users. What is the most likely cause?

Accepted Answer

The environment is not enabled for external sharing.. External sharing of canvas apps is controlled at the environment level in the Power Platform admin center. By default, external sharing is disabled for environments, and an administrator must explicitly enable it under the environment's settings. Without this setting enabled, users cannot share canvas apps with external users, even if they have the appropriate permissions.

Answer

The environment is a sandbox environment, which does not support external sharing.

Answer

The environment has a data loss prevention (DLP) policy that blocks sharing.

Answer

External users must have a Power Apps license to access the app.

Question 6

Your organization uses Power Automate to automate business processes. A flow that runs daily fails intermittently with 'HTTP 429 - Too Many Requests' errors. What should you do to resolve this issue?

Accepted Answer

Configure retry policies with exponential backoff in the flow actions.. HTTP 429 errors indicate throttling. Configuring retry policies with exponential backoff allows the flow to automatically retry failed actions after a delay, reducing the request rate and respecting service limits. Option A is incorrect because increasing the frequency would increase the number of requests, worsening the issue. Option B is incorrect because changing the trigger type does not address throttling. Option C is incorrect because setting up an on-premises data gateway does not affect throttling limits; it is used for accessing on-premises data sources.

Answer

Increase the frequency of the flow to run more often.

Answer

Change the flow trigger from a schedule to an instant trigger.

Answer

Set up an on-premises data gateway to bypass the throttling limits.

Question 7

Your organization has a Power Apps portal that allows external users to submit support tickets. You need to ensure that only authenticated external users from specific domains can access the portal. What should you configure?

Accepted Answer

Configure the portal to use Microsoft Entra ID authentication and set up domain restrictions.. Power Apps portals can be configured to use Microsoft Entra ID (formerly Azure AD) as the identity provider, and within the portal settings you can restrict sign-in to users from specific domains. This ensures that only authenticated external users whose email domain matches the allowed list can access the portal, meeting the requirement without relying on IP filtering or obscurity.

Answer

Create a data loss prevention (DLP) policy that blocks external users.

Answer

Restrict access to the portal by IP address using a web application firewall.

Answer

Share the portal URL only with users from the allowed domains.

Question 8

You need to grant a user the ability to manage environments in the Power Platform admin center, but not to manage other aspects of the tenant. Which role should you assign?

Accepted Answer

Power Platform administrator. The Power Platform administrator role grants full administrative access to Power Platform environments, including the ability to manage environments in the admin center, without granting broader tenant-level permissions like user management or directory settings. This role is scoped specifically to Power Platform resources, making it the correct choice for the described requirement.

Answer

Environment administrator

Answer

Global administrator

Answer

Dynamics 365 administrator

Question 9

Your organization has multiple Power Platform environments. You need to ensure that a specific connector (e.g., SQL Server) is blocked in the production environment but allowed in the development environment. What should you configure?

Accepted Answer

Create a data loss prevention (DLP) policy and assign it to the production environment.. Data loss prevention (DLP) policies in Power Platform allow administrators to classify connectors as Blocked, Business Data Only, or No Business Data Allowed. By creating a DLP policy and assigning it to the production environment, you can specifically block the SQL Server connector in that environment while leaving it available in the development environment, which is not assigned the same policy.

Answer

Set the connector's API rate limits to zero in the production environment.

Answer

Modify the connector's sharing settings in the environment.

Answer

Configure environment-level security roles to restrict connector usage.

Question 10

Your organization uses Power Virtual Agents (now Copilot Studio) for customer service. You need to ensure that the bot can access customer data from a Dataverse table that contains sensitive information. What is the best approach to secure the data?

Accepted Answer

Assign appropriate security roles and field-level security to the bot's service principal.. Power Virtual Agents (Copilot Studio) uses a service principal to authenticate with Dataverse. By assigning appropriate security roles and field-level security to that service principal, you can grant the bot granular, least-privilege access to only the necessary customer data, ensuring sensitive information is protected while still enabling the bot to function.

Answer

Configure a data loss prevention (DLP) policy to block the bot from accessing the table.

Answer

Use the bot's authentication settings to require multi-factor authentication.

Answer

Restrict access to the environment to only the bot's service account.

Question 11

Which TWO settings can you configure in a Power Platform environment to control data loss prevention?

Accepted Answer

Default action for connectors. The 'Default action for connectors' setting in a Power Platform environment allows administrators to define the default behavior (e.g., Block, Allow, or Audit) for connectors that are not explicitly covered by a DLP policy. This setting directly controls data loss prevention by preventing data from being shared with unmanaged or risky connectors. Option E is correct because environment-specific DLP policies enable granular control over which connectors can be used together, preventing data from flowing between business and non-business connectors within that environment.

Answer

Connector sharing settings

Answer

Environment security roles

Answer

Audit logging configuration

Question 12

Which THREE actions can a Power Platform administrator perform in the Power Platform admin center to manage environments?

Accepted Answer

Create a new environment. The Power Platform admin center provides administrators with the ability to create new environments, which are containers for managing apps, flows, and data. This action is a core administrative task for organizing and isolating resources within a tenant.

Answer

Create a new Microsoft Entra ID security group

Answer

Install a managed solution from AppSource

Question 13

Which TWO of the following are valid environment types in Power Platform?

Accepted Answer

Production. Production and Sandbox are both valid environment types in Power Platform. Production environments are intended for live, end-user applications and data, while Sandbox environments are isolated, non-production environments used for development, testing, and training. Both support the full set of Power Platform capabilities, including Dataverse, Power Apps, Power Automate, and Power Virtual Agents.

Answer

Development

Answer

Trial

Answer

Preview

Question 14

Refer to the exhibit. The JSON policy shown fails to apply to the production environment. What is the most likely reason?

Accepted Answer

The JSON uses 'environment' as a key instead of 'environments'.. The JSON policy uses 'environment' as a key, but the correct key in Microsoft Power Platform DLP (Data Loss Prevention) policy JSON schema is 'environments' (plural). This mismatch causes the policy to fail validation and not apply to the production environment, as the platform expects an array of environment IDs under the 'environments' key.

Answer

The connector IDs should include the full path with 'shared_twitter' and 'shared_facebook', which they do.

Answer

The action value should be 'Block' with a capital B, but the JSON uses 'Block' which is correct.

Answer

The policy name is missing a required prefix.

Question 15

Refer to the exhibit. The environment 'Contoso Production' was created on January 15, 2023. You need to restore this environment to a state from January 20, 2023. What is the first step you must take?

Accepted Answer

Check if a backup from January 20, 2023, exists in the environment's backup list.. The first step in restoring a Power Platform environment to a specific past date is to verify that a backup exists for that date. Microsoft Power Platform automatically creates daily backups for production environments, but you must check the backup list to confirm that a backup from January 20, 2023, is available before proceeding with the restore operation.

Answer

Enable point-in-time restore in the environment settings.

Answer

Convert the environment to a sandbox environment.

Answer

Copy the environment to a new environment using the date parameter.