PL-900 Manage the Microsoft Power Platform environment Practice Test 4 — 15 Questions

Question 1

A company uses Microsoft Power Platform and requires that all environment creation requests go through an approval process. The security team wants to prevent non-admins from creating trial environments. What should the administrator configure?

Accepted Answer

In Power Platform Admin Center, set 'Disable trial environments created by non-admins' to Yes. Option A is correct because the Power Platform Admin Center provides a dedicated tenant-level setting called 'Disable trial environments created by non-admins' that, when set to 'Yes', prevents users without administrative privileges from creating trial environments. This directly addresses the security team's requirement to block non-admins from creating trial environments, as it enforces an approval-based control at the environment creation level.

Answer

Assign users to an environment group with restricted permissions

Answer

In Power Apps settings, disable 'Allow users to create environments'

Answer

Create a Data Loss Prevention (DLP) policy that blocks trial environments

Question 2

A Power Platform administrator needs to ensure that only users from specific Microsoft Entra ID security groups can access a production environment. The solution must automatically update membership when the Entra ID group is modified. Which approach should the administrator use?

Accepted Answer

In Power Platform Admin Center, add the Entra ID group as a security group for the environment. Option C is correct because the Power Platform Admin Center allows an administrator to link a Microsoft Entra ID security group directly to a production environment. When the group is added as a security group for the environment, membership is automatically synchronized with the Entra ID group, so any changes to the group (additions or removals) are reflected in the environment without manual intervention.

Answer

Use PowerShell cmdlets to assign the Entra ID group as an environment user

Answer

Add users individually to the environment's role assignments

Answer

Share the environment with the Entra ID group using the 'Share' button

Question 3

A company has a Power Apps app that uses Microsoft Dataverse. They need to ensure that only users with a specific security role can access the app. Where should the administrator configure this?

Accepted Answer

App-level permissions in the Power Apps app settings. Option B is correct because app-level permissions in Power Apps are managed via security roles in the app's settings. Option A is incorrect because environment-level permissions control access to environments, not specific apps. Option C is incorrect because the Power App share dialog is for sharing with individuals, not roles. Option D is incorrect because Dataverse roles are broader; the app itself should have role-based access.

Answer

Environment-level security roles in Power Platform Admin Center

Answer

Dataverse security roles in the 'Roles' area of the environment

Answer

Share the app with users directly from the Power Apps maker portal

Question 4

An organization uses Microsoft Power Platform and wants to enforce data loss prevention (DLP) policies across all environments. They need to block the use of a specific third-party connector in all environments. What should the administrator do?

Accepted Answer

Create a tenant-level DLP policy that blocks the connector. Option D is correct because DLP policies in Microsoft Power Platform can be configured at the tenant level to apply across all environments. By creating a tenant-level DLP policy and blocking the specific third-party connector, the administrator ensures consistent enforcement without needing to manage individual environment policies. This approach centralizes control and prevents the connector from being used in any environment.

Answer

Create a DLP policy for each environment and block the connector

Answer

Create a custom connector with the same name and block it

Answer

Remove the connector from the default solution

Question 5

A Power Platform administrator needs to move a canvas app and its associated Dataverse data from a development environment to a test environment. The solution must preserve data and configuration. Which approach should the administrator use?

Accepted Answer

Create a managed solution containing the app and Dataverse data using configuration data export. Option C is correct because managed solutions allow exporting and importing with data via configuration data. Option A is incorrect because copy environment copies the entire environment, which may not be desired. Option B is incorrect because exporting as a package without data loses data. Option D is incorrect because manual recreation is error-prone and not recommended.

Answer

Export the canvas app as a managed solution and import it into test

Answer

Recreate the app in test and manually re-enter data

Answer

Use the 'Copy environment' feature in Power Platform Admin Center

Question 6

A company uses Power Automate flows that connect to SharePoint and Microsoft Entra ID. The administrator needs to ensure that the flows can access data only from approved data sources. What should the administrator configure?

Accepted Answer

Create a Data Loss Prevention (DLP) policy that restricts connectors to approved data sources. Data Loss Prevention (DLP) policies in the Power Platform allow administrators to control which connectors can be used together in flows and apps, effectively restricting flows to approved data sources like SharePoint and Microsoft Entra ID. By classifying connectors as Business or Non-Business, DLP policies prevent unauthorized data sharing between environments, which directly addresses the requirement to limit data access to approved sources.

Answer

Define SharePoint site permissions for the flows

Answer

Configure data policies in Power Apps settings

Answer

Set connector sharing permissions to limit access

Question 7

An administrator notices that a Power Apps environment has exceeded its Dataverse storage capacity. The company wants to free up storage without losing data. Which action should the administrator take first?

Accepted Answer

Run the storage capacity analysis in Power Platform Admin Center. Option D is correct because the first step when addressing Dataverse storage capacity issues is to run the storage capacity analysis in the Power Platform Admin Center. This analysis provides a detailed breakdown of storage usage by entity, environment, and solution, enabling the administrator to identify the largest consumers and take targeted actions to free up space without data loss. Deleting apps or flows (Option A) does not reclaim Dataverse storage, as these items consume minimal storage compared to data tables.

Answer

Delete unused apps and flows from the environment

Answer

Purchase additional Dataverse storage capacity

Answer

Archive old flows to reduce storage usage

Question 8

A company wants to allow external partners to access a Power Apps portal without requiring a Microsoft Entra ID account. What should the administrator configure?

Accepted Answer

Configure the portal to use local authentication with username and password. Option B is correct because Power Apps portals support local authentication, which allows external users to sign up and sign in using a username and password without requiring a Microsoft Entra ID account. This is the appropriate method when the goal is to grant access to partners who do not have or need Microsoft Entra ID credentials.

Answer

Create Microsoft Entra ID guest accounts for each partner

Answer

Share the Power Apps app directly with the partners

Answer

Enable Microsoft Entra ID B2B collaboration and invite partners

Question 9

An organization has multiple Power Platform environments. They need to ensure that all environments have consistent DLP policies and that any changes are tracked. What should the administrator implement?

Accepted Answer

Use the Power Platform Center of Excellence (CoE) Starter Kit to manage and monitor policies. Option A is correct because Power Platform Center of Excellence (CoE) Starter Kit provides governance and monitoring capabilities. Option B is incorrect because environment groups do not enforce DLP consistency. Option C is incorrect because audit logs only track changes, not enforce consistency. Option D is incorrect because solution export/import does not apply DLP policies.

Answer

Export DLP policies as solutions and import them into each environment

Answer

Enable audit logging in each environment

Answer

Create environment groups and assign DLP policies to the group

Question 10

Which TWO actions can a Power Platform administrator perform in the Power Platform Admin Center to manage environments?

Accepted Answer

Backup an environment. Option D is correct because the Power Platform Admin Center provides a built-in backup feature that allows administrators to create manual backups of environments. This is essential for disaster recovery and data preservation before making significant changes. Backups can be triggered on-demand and are stored for a limited retention period.

Answer

Increase the storage limit of an environment

Answer

Change an environment from production to sandbox

Answer

Add a custom connector to an environment

Question 11

Which THREE are valid components of a Microsoft Power Platform environment?

Accepted Answer

Custom connector. A custom connector is a valid component of a Microsoft Power Platform environment because it allows you to extend the platform by creating your own API connectors to external services. Custom connectors are stored and managed within an environment, enabling makers to build apps and flows that interact with systems not covered by out-of-the-box connectors.

Answer

Power BI workspace

Answer

Microsoft 365 Group

Question 12

Which TWO are best practices for managing Power Platform environments in a large enterprise?

Accepted Answer

Use separate environments for development, test, and production. Options B and C are correct because using separate environments for development, test, and production (B) and implementing DLP policies (C) are best practices. Option A is incorrect because giving all users environment creation rights can lead to sprawl. Option D is incorrect because assigning System Administrator role to all users is a security risk. Option E is incorrect because using a single environment is not recommended for enterprise governance.

Answer

Give all users the ability to create environments

Answer

Assign the System Administrator role to all users

Answer

Use a single environment for all apps

Question 13

Refer to the exhibit. A Power Platform administrator is reviewing a JSON export of an environment configuration. Which statement is true based on the exhibit?

Accepted Answer

Security groups are assigned to the environment. Option C is correct because the JSON export includes a 'securityGroups' property with an array of group IDs, indicating that one or more Microsoft Entra ID (formerly Azure AD) security groups are explicitly linked to the environment. This configuration restricts environment access to members of those security groups, which is a common practice for controlling access in production or shared environments.

Answer

The environment was created from a trial

Answer

The environment uses French language

Answer

The environment is a sandbox environment

Question 14

Refer to the exhibit. A Power Platform administrator runs a PowerShell command to check the status of an environment. What does the output indicate?

Accepted Answer

The environment is active and usable. The PowerShell command output shows the environment's state as 'Ready' and its provisioning status as 'Succeeded', which together indicate the environment is fully provisioned and operational. In Power Platform, a 'Ready' state means the environment is active and available for use, confirming option D is correct.

Answer

The environment is a sandbox

Answer

The environment has been deleted

Answer

The environment is disabled

Question 15

Refer to the exhibit. A Power Platform administrator creates a DLP policy as shown. What is the effect of this policy?

Accepted Answer

Facebook, Twitter, and LinkedIn connectors are blocked tenant-wide. The exhibit shows a Data Loss Prevention (DLP) policy configured with the 'Social media' category set to 'Blocked' for all environments. This means the Facebook, Twitter, and LinkedIn connectors are explicitly blocked tenant-wide, preventing their use in any environment (production, sandbox, or default). Option C correctly identifies this outcome.

Answer

Facebook, Twitter, and LinkedIn connectors are allowed in all environments

Answer

All social media connectors are blocked in all environments

Answer

The policy only applies to production environments