PL-900 Manage the Microsoft Power Platform environment Practice Test 5 — 15 Questions

Question 1

A Power Platform administrator needs to ensure that only users from specific Microsoft Entra ID security groups can access a production environment. The solution must automatically update membership when the Entra ID group is modified. Which approach should the administrator use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

In Power Platform Admin Center, add the Entra ID group as a security group for the environment. The Power Platform Admin Center allows an administrator to link a Microsoft Entra ID security group directly to a production environment. When the group is added as a security group for the environment, membership is automatically synchronized with the Entra ID group, so any changes to the group (additions or removals) are reflected in the environment without manual intervention.

Answer

Use PowerShell cmdlets to assign the Entra ID group as an environment user

Answer

Add users individually to the environment's role assignments

Answer

Share the environment with the Entra ID group using the 'Share' button

Question 2

A company has a Power Apps app that uses Microsoft Dataverse. They need to ensure that only users with a specific security role can access the app. Where should the administrator configure this?

Accepted Answer

App-level permissions in the Power Apps app settings. To control access to a specific Power Apps app based on security roles, the administrator should configure app-level permissions in the Power Apps app settings. This allows the app owner to assign which security roles (from Dataverse) can use the app. Option B (Environment-level security roles) controls access to the entire environment, not individual apps. Option C (Dataverse security roles in the 'Roles' area) manages data permissions, not app access directly. Option D (Sharing directly from maker portal) shares with individuals or groups, but not role-based access.

Answer

Environment-level security roles in Power Platform Admin Center

Answer

Dataverse security roles in the 'Roles' area of the environment

Answer

Share the app with users directly from the Power Apps maker portal

Question 3

An organization uses Microsoft Power Platform and wants to enforce data loss prevention (DLP) policies across all environments. They need to block the use of a specific third-party connector in all environments. What should the administrator do?

Accepted Answer

Create a tenant-level DLP policy that blocks the connector. DLP policies in Microsoft Power Platform can be configured at the tenant level to apply across all environments. By creating a tenant-level DLP policy and blocking the specific third-party connector, the administrator ensures consistent enforcement without needing to manage individual environment policies. This approach centralizes control and prevents the connector from being used in any environment.

Answer

Create a DLP policy for each environment and block the connector

Answer

Create a custom connector with the same name and block it

Answer

Remove the connector from the default solution

Question 4

A Power Platform administrator needs to ensure that only users from specific Microsoft Entra ID security groups can access a production environment. The solution must automatically update membership when the Entra ID group is modified. Which approach should the administrator use?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Create a managed solution containing the app and Dataverse data using configuration data export. Creating a managed solution with configuration data export allows the administrator to package both the canvas app and its associated Dataverse data, preserving data and configuration during the move from development to test. This approach uses the Solution Packager and Configuration Migration tools to export data schemas and records, ensuring a consistent environment transfer.

Answer

Export the canvas app as a managed solution and import it into test

Answer

Recreate the app in test and manually re-enter data

Answer

Use the 'Copy environment' feature in Power Platform Admin Center

Question 5

A company uses Power Automate flows that connect to SharePoint and Microsoft Entra ID. The administrator needs to ensure that the flows can access data only from approved data sources. What should the administrator configure?

Accepted Answer

Create a Data Loss Prevention (DLP) policy that restricts connectors to approved data sources. Data Loss Prevention (DLP) policies in the Power Platform allow administrators to control which connectors can be used together in flows and apps, effectively restricting flows to approved data sources like SharePoint and Microsoft Entra ID. By classifying connectors as Business or Non-Business, DLP policies prevent unauthorized data sharing between environments, which directly addresses the requirement to limit data access to approved sources.

Answer

Define SharePoint site permissions for the flows

Answer

Configure data policies in Power Apps settings

Answer

Set connector sharing permissions to limit access

Question 6

An administrator notices that a Power Apps environment has exceeded its Dataverse storage capacity. The company wants to free up storage without losing data. Which action should the administrator take first?

Accepted Answer

Run the storage capacity analysis in Power Platform Admin Center. The first step when addressing Dataverse storage capacity issues is to run the storage capacity analysis in the Power Platform Admin Center. This analysis provides a detailed breakdown of storage usage by entity, environment, and solution, enabling the administrator to identify the largest consumers and take targeted actions to free up space without data loss. Deleting apps or flows (Option A) does not reclaim Dataverse storage, as these items consume minimal storage compared to data tables.

Answer

Delete unused apps and flows from the environment

Answer

Purchase additional Dataverse storage capacity

Answer

Archive old flows to reduce storage usage

Question 7

A company wants to allow external partners to access a Power Apps portal without requiring a Microsoft Entra ID account. What should the administrator configure?

Accepted Answer

Configure the portal to use local authentication with username and password. Power Apps portals support local authentication, which allows external users to sign up and sign in using a username and password without requiring a Microsoft Entra ID account. This is the appropriate method when the goal is to grant access to partners who do not have or need Microsoft Entra ID credentials.

Answer

Create Microsoft Entra ID guest accounts for each partner

Answer

Share the Power Apps app directly with the partners

Answer

Enable Microsoft Entra ID B2B collaboration and invite partners

Question 8

An organization has multiple Power Platform environments. They need to ensure that all environments have consistent DLP policies and that any changes are tracked. What should the administrator implement?

Accepted Answer

Use the Power Platform Center of Excellence (CoE) Starter Kit to manage and monitor policies. The Power Platform Center of Excellence (CoE) Starter Kit provides governance and monitoring capabilities, including consistent DLP policy management and change tracking across environments. Option A is incorrect because exporting DLP policies as solutions does not maintain live consistency or track changes. Option C is incorrect because audit logging only records changes but does not enforce consistency. Option D is incorrect because environment groups allow grouping but do not directly enforce DLP policies consistently across environments.

Answer

Export DLP policies as solutions and import them into each environment

Answer

Enable audit logging in each environment

Answer

Create environment groups and assign DLP policies to the group

Question 9

Which TWO actions can a Power Platform administrator perform in the Power Platform Admin Center to manage environments?

Accepted Answer

Backup an environment. The Power Platform Admin Center provides a built-in backup feature that allows administrators to create manual backups of environments. This is essential for disaster recovery and data preservation before making significant changes. Backups can be triggered on-demand and are stored for a limited retention period.

Answer

Increase the storage limit of an environment

Answer

Change an environment from production to sandbox

Answer

Add a custom connector to an environment

Question 10

Which THREE are valid components of a Microsoft Power Platform environment?

Accepted Answer

Custom connector. A custom connector is a valid component of a Microsoft Power Platform environment because it allows you to extend the platform by creating your own API connectors to external services. Custom connectors are stored and managed within an environment, enabling makers to build apps and flows that interact with systems not covered by out-of-the-box connectors.

Answer

Power BI workspace

Answer

Microsoft 365 Group

Question 11

Which TWO are best practices for managing Power Platform environments in a large enterprise?

Accepted Answer

Use separate environments for development, test, and production. Using separate environments for development, test, and production (Option D) is a best practice to ensure proper application lifecycle management and governance. Additionally, applying Data Loss Prevention (DLP) policies (Option E) helps control data flow between connectors and prevent data leaks. Option A is incorrect because giving all users environment creation rights can lead to environment sprawl. Option B is incorrect because assigning the System Administrator role to all users is a security risk and violates the principle of least privilege. Option C is incorrect because using a single environment for all apps does not allow for isolation and testing, increasing the risk of unintended changes impacting production.

Answer

Give all users the ability to create environments

Answer

Assign the System Administrator role to all users

Answer

Use a single environment for all apps

Question 12

Refer to the exhibit. A Power Platform administrator is reviewing a JSON export of an environment configuration. Which statement is true based on the exhibit?

Accepted Answer

Security groups are assigned to the environment. The JSON export includes a 'securityGroups' property with an array of group IDs, indicating that one or more Microsoft Entra ID (formerly Azure AD) security groups are explicitly linked to the environment. This configuration restricts environment access to members of those security groups, which is a common practice for controlling access in production or shared environments.

Answer

The environment was created from a trial

Answer

The environment uses French language

Answer

The environment is a sandbox environment

Question 13

Refer to the exhibit. A Power Platform administrator runs a PowerShell command to check the status of an environment. What does the output indicate?

Accepted Answer

The environment is active and usable. The PowerShell command output shows the environment's state as 'Ready' and its provisioning status as 'Succeeded', which together indicate the environment is fully provisioned and operational. In Power Platform, a 'Ready' state means the environment is active and available for use, confirming option D is correct.

Answer

The environment is a sandbox

Answer

The environment has been deleted

Answer

The environment is disabled

Question 14

Refer to the exhibit. A Power Platform administrator creates a DLP policy as shown. What is the effect of this policy?

Accepted Answer

Facebook, Twitter, and LinkedIn connectors are blocked tenant-wide. The exhibit shows a Data Loss Prevention (DLP) policy configured with the 'Social media' category set to 'Blocked' for all environments. This means the Facebook, Twitter, and LinkedIn connectors are explicitly blocked tenant-wide, preventing their use in any environment (production, sandbox, or default). Option C correctly identifies this outcome.

Answer

Facebook, Twitter, and LinkedIn connectors are allowed in all environments

Answer

All social media connectors are blocked in all environments

Answer

The policy only applies to production environments

Question 15

A company is implementing Microsoft Power Platform. The administrator needs to prevent users from creating personal productivity environments. What should they configure?

Accepted Answer

Disable the 'Create personal productivity environments' setting in the Power Platform admin center. The Power Platform admin center includes a tenant-wide setting specifically named 'Create personal productivity environments' that, when disabled, prevents users from creating their own personal environments. This setting directly controls the ability to create environments for personal productivity, which is distinct from other environment creation permissions.

Answer

Configure a Data Loss Prevention (DLP) policy

Answer

Set a conditional access policy in Microsoft Entra ID

Answer

Reduce the tenant-level environment capacity limits