PL-900 Manage the Microsoft Power Platform environment Practice Test 5 — 15 Questions

Question 1

A company is implementing Microsoft Power Platform. The administrator needs to prevent users from creating personal productivity environments. What should they configure?

Accepted Answer

Disable the 'Create personal productivity environments' setting in the Power Platform admin center. Option C is correct because the Power Platform admin center includes a tenant-wide setting specifically named 'Create personal productivity environments' that, when disabled, prevents users from creating their own personal environments. This setting directly controls the ability to create environments for personal productivity, which is distinct from other environment creation permissions.

Answer

Configure a Data Loss Prevention (DLP) policy

Answer

Set a conditional access policy in Microsoft Entra ID

Answer

Reduce the tenant-level environment capacity limits

Question 2

An organization uses Power Automate flows that connect to Microsoft Dataverse and SharePoint. The administrator needs to ensure that only specific connectors can be used together. What should they configure?

Accepted Answer

Configure a Data Loss Prevention (DLP) policy. Option D is correct because Data Loss Prevention (DLP) policies define which connectors can be used together in the same flow. Option A is wrong because environment security groups control user access, not connector combinations. Option B is wrong because solution component isolation is about solution layers, not connectors. Option C is wrong because auditing is for tracking changes, not restricting connectors.

Answer

Enable solution component isolation

Answer

Create an environment security group

Answer

Turn on auditing for the environment

Question 3

A company has a Power Platform environment used for development. The development team needs to deploy a solution to a test environment. What is the recommended approach?

Accepted Answer

Export a managed solution from the development environment and import it into the test environment. Option D is correct because managed solutions are the recommended approach for deploying to non-development environments (e.g., test, UAT, production). A managed solution locks components to prevent direct editing in the target environment, supports lifecycle management (upgrades, patches, and removal), and ensures that only the intended customizations are deployed. Exporting an unmanaged solution (Option A) would leave components editable in the test environment, breaking the managed lifecycle pattern.

Answer

Export an unmanaged solution from the development environment and import it into the test environment

Answer

Manually recreate all components in the test environment

Answer

Copy the entire development environment to the test environment

Question 4

An administrator needs to ensure that only users from a specific Microsoft Entra ID group can access a Power Platform environment. What should the administrator configure?

Accepted Answer

Assign a security group to the environment in the Power Platform admin center. Option B is correct because assigning a security group to an environment in the Power Platform admin center restricts access to only members of that Microsoft Entra ID group. This is the standard method for controlling user access to a Power Platform environment, ensuring that only authorized users can interact with its resources.

Answer

Disable the 'Create personal productivity environments' setting

Answer

Set environment capacity limits

Answer

Configure a data loss prevention (DLP) policy

Question 5

A company uses Power Platform with Microsoft Dataverse. The administrator notices that a user can create a new environment without approval. The company wants to enforce a process where all environment creation requires administrator approval. What should the administrator configure?

Accepted Answer

Disable the 'Create personal productivity environments' setting in the Power Platform admin center. Option D is correct because disabling the 'Create personal productivity environments' setting in the Power Platform admin center prevents users from creating environments, requiring them to request administrator creation. Option A is wrong because environment capacity limits do not require approval for creation. Option B is wrong because DLP policies do not control environment creation. Option C is wrong because Microsoft Entra ID conditional access policies control authentication, not environment creation.

Answer

Configure a Data Loss Prevention (DLP) policy

Answer

Set a conditional access policy in Microsoft Entra ID

Answer

Reduce the tenant-level environment capacity limits

Question 6

An organization has multiple Power Platform environments. The administrator needs to move a solution from a development environment to a production environment. The solution includes custom connectors and environment variables. What is the correct process?

Accepted Answer

Export a managed solution from development and import it into production. Option D is correct because managed solutions are the standard mechanism for deploying customizations (including custom connectors and environment variables) from a development environment to a production environment. Exporting a managed solution from development and importing it into production ensures that components are packaged as a single, deployable unit, and it prevents accidental modifications in production by making the solution layers read-only after import.

Answer

Copy the entire development environment to production

Answer

Export an unmanaged solution from development and import it into production

Answer

Manually re-create all components in production

Question 7

A Power Platform administrator needs to review which users have accessed a specific environment in the last 30 days. What should they use?

Accepted Answer

Power Platform admin center auditing. The Power Platform admin center provides built-in auditing capabilities that allow administrators to view user access logs for specific environments. By navigating to the 'Auditing' section within the admin center, an admin can filter by environment and date range (e.g., last 30 days) to see which users have accessed the environment. This is the correct tool because it is purpose-built for Power Platform governance and does not require additional scripting or external tools.

Answer

Power Platform PowerShell cmdlets

Answer

Power Apps maker portal

Answer

Microsoft 365 admin center

Question 8

An organization wants to ensure that all Power Platform solutions in production environments are tracked and changes are approved. What should the administrator implement?

Accepted Answer

Managed solutions with application lifecycle management (ALM). Managed solutions with application lifecycle management (ALM) ensure that all Power Platform solutions in production environments are tracked and changes are approved by enforcing version control, solution layering, and controlled deployment through environments. This approach uses solution components and environment segmentation to prevent unapproved modifications and maintain an audit trail.

Answer

Data Loss Prevention (DLP) policies

Answer

Environment security groups

Answer

Disable the 'Create personal productivity environments' setting

Question 9

A company has a Power Platform environment that is running low on storage. The administrator needs to free up storage without deleting important data. What should they do first?

Accepted Answer

Review storage analytics in the Power Platform admin center to identify large entities. Option B is correct because the first step in freeing up storage without deleting important data is to identify which entities consume the most space. The Power Platform admin center provides storage analytics that break down storage usage by entity, allowing administrators to make informed decisions about data cleanup or archiving. This approach ensures that only non-essential data is targeted, preserving critical business data.

Answer

Disable auditing for all environments

Answer

Delete all audit logs

Answer

Purchase additional storage capacity

Question 10

A Power Platform administrator needs to delegate environment administration to a team member without granting full tenant-level admin rights. Which TWO roles can the administrator assign?

Accepted Answer

Power Platform Service Admin. Option A and Option C are correct. Environment Admin has full control over a specific environment. Service Admin (Power Platform) can manage environments but not tenant-level settings. Option B (Global Admin) has full tenant-level rights. Option D (Microsoft Entra ID Admin) does not have Power Platform environment management. Option E (Dynamics 365 Admin) is similar to Service Admin but specific to Dynamics 365.

Answer

Microsoft Entra ID Admin

Answer

Dynamics 365 Admin

Answer

Global Admin

Question 11

An administrator is planning to deploy a solution across multiple environments. Which THREE practices should they follow?

Accepted Answer

Create separate environments for development, test, and production. Options A, C, and D are correct. Using managed solutions in test/production is a best practice. Exporting solutions as managed is standard for deployment. Creating separate development environments ensures isolation. Option B is wrong because unmanaged solutions should not be used in production. Option E is wrong because copying the entire environment is not a targeted deployment.

Answer

Use unmanaged solutions in production for easier modifications

Answer

Copy the entire development environment to test and production

Question 12

A company wants to enforce data loss prevention (DLP) policies for Power Automate flows. Which TWO actions can the administrator perform?

Accepted Answer

Block specific connectors from being used in flows. Option B is correct because administrators can block specific connectors from being used in Power Automate flows as part of a DLP policy, preventing data from being shared with unauthorized services. Option C is correct because DLP policies can be scoped to a specific environment, allowing granular control over connector usage within that environment. This enables the administrator to enforce data protection rules tailored to different business contexts.

Answer

Allow users to bypass DLP policies with administrator approval

Answer

Assign DLP policies to specific users

Answer

Inherit the tenant-level DLP policy for all environments

Question 13

Refer to the exhibit. A Power Platform administrator applies this DLP policy to the default environment. What is the result?

Accepted Answer

Microsoft Teams and Twitter connectors are blocked in the default environment. The exhibit shows a Data Loss Prevention (DLP) policy configured with Microsoft Teams and Twitter connectors in the 'Blocked' group. Since this policy is applied to the default environment, only those two connectors are blocked in that environment. All other connectors remain in the 'Allowed' group by default, so they are permitted. Therefore, the correct result is that Microsoft Teams and Twitter connectors are blocked in the default environment.

Answer

All connectors are allowed

Answer

All connectors are blocked

Answer

The policy applies to all environments

Question 14

Refer to the exhibit. An administrator runs this PowerShell command against a Power Platform environment. What can the administrator conclude?

Accepted Answer

The environment is accessible only to members of the ContosoUsers security group. The PowerShell command `Get-AdminPowerAppEnvironment` returns the environment details, including the `SecurityGroupId` property. If this property is populated with a GUID, it indicates a security group is assigned to the environment, restricting access to its members. Since the exhibit shows a non-null `SecurityGroupId` for the ContosoUsers group, the environment is accessible only to members of that security group.

Answer

The environment creation failed

Answer

The environment has no security group assigned

Answer

The environment is a personal productivity environment

Question 15

Refer to the exhibit. An administrator deploys this ARM/Bicep template to create a new Power Platform environment. What type of environment will be created?

Accepted Answer

Sandbox environment. The ARM/Bicep template sets the 'environmentSku' property to 'Sandbox', which directly specifies the environment type as a Sandbox environment. Sandbox environments are non-production instances used for development, testing, and training, isolated from production data and workloads.

Answer

Developer environment

Answer

Trial environment

Answer

Production environment