PL-900 Manage the Microsoft Power Platform environment Practice Test 4 — 15 Questions

Question 1

A company is implementing Microsoft Power Platform and needs to ensure that only licensed users can create environments. Which setting should be enabled?

Accepted Answer

Enable 'Create environments' in the Power Platform admin center tenant settings. The 'Create environments' setting in the Power Platform admin center tenant settings is the specific control that restricts environment creation to licensed users only. By default, this setting is enabled for all users, but administrators can disable it to limit creation to users with a Power Platform license (e.g., Power Apps per user plan, Power Automate per user plan, or Dynamics 365 licenses). This ensures compliance with licensing requirements and prevents unlicensed users from consuming capacity.

Answer

Enable 'Create database' in the tenant settings

Answer

Enable 'Create solutions' in the Power Platform admin center

Answer

Enable 'Create apps' in the Power Platform admin center

Question 2

A Power Platform administrator needs to restrict data loss prevention (DLP) policies to prevent sensitive data from being shared with non-approved connectors. Which scope should the administrator apply?

Accepted Answer

Environment-level. Environment-level DLP policies allow administrators to apply data loss prevention rules to specific environments, ensuring that sensitive data is not shared with non-approved connectors within that environment. This granular control is necessary when different environments have different compliance requirements, such as separating development from production data flows.

Answer

Group-level

Answer

Tenant-level

Answer

User-level

Question 3

A large enterprise uses Power Platform with multiple environments. They need to enforce a policy that blocks all Canvas apps from using the 'Twitter' connector, but only in the 'Production' environment. What should the administrator do?

Accepted Answer

Create an environment-level DLP policy for the Production environment and set 'Twitter' to 'Blocked'. Environment-level DLP policies allow administrators to apply connector restrictions to specific environments, such as blocking the 'Twitter' connector only in 'Production' while leaving it available in other environments. This granular control is essential for enforcing governance without affecting development or testing environments.

Answer

Create a DLP policy at the tenant level and set the 'Twitter' connector to 'Blocked'

Answer

Disable the 'Twitter' connector in the Power Platform admin center for the Production environment

Answer

Use the 'Set Connector' API to disable the connector for the Production environment

Question 4

A company wants to grant a user the ability to manage environments in Power Platform, including creating and deleting environments, but without full tenant admin access. Which role should be assigned?

Accepted Answer

Power Platform Administrator. The Power Platform Administrator role can manage all aspects of Power Platform, including creating and deleting environments, without granting full tenant admin access. Option B is incorrect because the Environment Admin role only allows managing settings within an existing environment, not creating or deleting environments. Option A is incorrect because Global Administrator has full access to all services, which exceeds the requirement. Option D is incorrect because System Administrator is a Dataverse role with no environment management capabilities.

Answer

Global Administrator

Answer

Environment Admin

Answer

System Administrator

Question 5

An organization uses Power Automate flows that connect to Microsoft Dataverse. The flows need to run under a service account with specific permissions. What is the best practice to manage the connection?

Accepted Answer

Create a connection reference that uses the service account's connection. Connection references decouple the connection details from the flow definition, allowing you to configure a service account's connection once and reuse it across multiple flows. When you create a connection reference and set it to use a service account's connection (e.g., a pre-created Dataverse connection authenticated with the service account), the flow runs under that account's permissions without exposing credentials or requiring the flow owner to share their identity. This is the recommended pattern for service principal or application user scenarios in Power Automate.

Answer

Use the flow owner's credentials and share the flow with the service account

Answer

Create a service account connection type in the Power Platform admin center

Answer

Hardcode the service account credentials in the flow

Question 6

A Power Platform administrator wants to see the capacity usage of all environments in the tenant. Where should they look?

Accepted Answer

Power Platform admin center > Capacity. The Capacity page in the Power Platform admin center provides a tenant-level view of all capacity entitlements (database, file, log) and their consumption across environments. This is the dedicated location for monitoring capacity usage, including add-ons and storage overages, as documented in Microsoft's capacity management guidance.

Answer

Power Platform admin center > Environments

Answer

Power Platform admin center > Analytics

Answer

Power Platform admin center > Billing

Question 7

A company needs to ensure that all Power Apps and Power Automate flows in the 'Development' environment are automatically backed up daily. What should the administrator configure?

Accepted Answer

Enable Dataverse backups for the Development environment. Dataverse backups are automatically enabled for environments with a Dataverse database, including the Development environment. These backups occur daily and capture the entire environment state, which includes all data, apps (canvas and model-driven), and Power Automate flows stored within Dataverse. No additional configuration is required, making it the simplest way to ensure automatic daily backups of Power Apps and Power Automate flows.

Answer

Enable the 'Backup Policy' in the Power Platform admin center for the Development environment

Answer

Schedule a daily export of all solutions using the Power Platform admin center

Answer

Use the 'Solution Backup' feature in the Power Platform admin center

Question 8

A Power Platform administrator needs to ensure that only certain users can create Power Apps in the 'Production' environment. What is the recommended approach?

Accepted Answer

Assign a custom security role in Dataverse that excludes 'Create App' privilege for the Production environment. The recommended approach to restrict app creation to specific users in a specific environment is to assign a custom security role in Dataverse that excludes the 'Create App' privilege for that environment. This leverages Dataverse's role-based security model, which allows granular control over actions like app creation at the environment level, without affecting other environments or tenant-wide settings.

Answer

Create a DLP policy that blocks app creation for unauthorized users

Answer

Disable 'Create apps' in the Power Platform admin center for the tenant

Answer

Use Microsoft Entra ID to create a role that blocks 'Create Apps'

Question 9

Which TWO actions can a Power Platform administrator perform in the Power Platform admin center?

Accepted Answer

Create and delete environments. The Power Platform admin center provides administrators with the ability to create and delete environments, which are isolated containers for managing apps, flows, and data. This is a core administrative function that directly controls the lifecycle of Power Platform resources.

Answer

Manage SharePoint Online site collections

Answer

Manage Exchange Online mailboxes

Answer

Manage Microsoft Entra ID roles

Question 10

Which THREE components are included in a Power Platform environment?

Accepted Answer

Dataverse database. A Dataverse database (Option B) is a core component of a Power Platform environment because it provides the underlying data storage and management layer for apps, flows, and bots. Without a Dataverse database, many environment features like custom tables, relationships, and security roles are unavailable. This makes it a fundamental building block for any environment that needs structured data persistence.

Answer

Power BI workspaces

Answer

Microsoft 365 groups

Question 11

Which TWO roles can manage Power Platform environments at the tenant level?

Accepted Answer

Power Platform Administrator. The correct answers are Power Platform Administrator and Dynamics 365 Administrator because both roles have tenant-level administrative privileges over Power Platform environments. Power Platform Administrator can manage all settings and environments across the tenant, while Dynamics 365 Administrator has similar capabilities but also includes Dynamics 365-specific management. Environment Admin (A) can only manage specific environments assigned to them, not at the tenant level. System Administrator (D) is a Dataverse role that operates within a specific environment, not tenant-wide. Global Administrator (E) has full access across all services but is not a dedicated Power Platform role and would be overkill for Power Platform management alone.

Answer

Environment Admin

Answer

System Administrator

Answer

Global Administrator

Question 12

The exhibit shows a JSON snippet from a Power Platform environment configuration. What can be inferred from this snippet?

Accepted Answer

The environment has blocked connectors for Twitter and Facebook. The JSON snippet includes a 'blockedConnectors' array containing 'Twitter' and 'Facebook', which explicitly indicates that these connectors are prohibited in the environment. This is a tenant-level or environment-level policy setting used to restrict data movement to or from these services, directly supporting option A as correct.

Answer

The environment has used 1024 MB of storage

Answer

The environment is named 'Production'

Answer

The environment has a storage limit of 512 MB

Question 13

The exhibit shows a DLP policy configuration for a Power Platform environment. Which connector is allowed for business use?

Accepted Answer

SharePoint. SharePoint is classified as 'Business' in the DLP policy because it is a Microsoft-owned enterprise service that supports data loss prevention (DLP) actions like blocking, monitoring, or restricting data flow. The exhibit shows SharePoint under the 'Business' data group, meaning it is allowed for business use without triggering policy violations. In contrast, Outlook, Twitter, and Facebook are placed in the 'Non-Business' group, which blocks their connectors from being used in apps and flows within this environment.

Answer

Outlook

Answer

Twitter

Answer

Facebook

Question 14

The exhibit shows a PowerShell command and its output. What does the EnvironmentState value indicate?

Accepted Answer

The environment is active and can be used. The EnvironmentState value displayed in the PowerShell output indicates that the environment is active and can be used. This status confirms that the environment is fully provisioned and available for hosting apps, flows, and other resources in the Microsoft Power Platform.

Answer

The environment is pending creation

Answer

The environment is disabled

Answer

The environment has a provisioning error

Question 15

A company uses Microsoft Power Platform and requires that all environment creation requests go through an approval process. The security team wants to prevent non-admins from creating trial environments. What should the administrator configure?

Accepted Answer

In Power Platform Admin Center, set 'Disable trial environments created by non-admins' to Yes. The Power Platform Admin Center provides a dedicated tenant-level setting called 'Disable trial environments created by non-admins' that, when set to 'Yes', prevents users without administrative privileges from creating trial environments. This directly addresses the security team's requirement to block non-admins from creating trial environments, as it enforces an approval-based control at the environment creation level.

Answer

Assign users to an environment group with restricted permissions

Answer

In Power Apps settings, disable 'Allow users to create environments'

Answer

Create a Data Loss Prevention (DLP) policy that blocks trial environments