PL-900 Manage the Microsoft Power Platform environment Practice Test 6 — 15 Questions

Question 1

An organization uses Power Automate flows that connect to Microsoft Dataverse and SharePoint. The administrator needs to ensure that only specific connectors can be used together. What should they configure?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Configure a Data Loss Prevention (DLP) policy. Data Loss Prevention (DLP) policies allow administrators to define which connectors can be used together in the same Power Automate flow, preventing data leakage. Option A is wrong because solution component isolation refers to separating solution components across environments, not connector restrictions. Option C is wrong because environment security groups control user access, not connector combinations. Option D is wrong because auditing tracks changes but does not restrict connector usage.

Answer

Enable solution component isolation

Answer

Create an environment security group

Answer

Turn on auditing for the environment

Question 2

A company has a Power Platform environment used for development. The development team needs to deploy a solution to a test environment. What is the recommended approach?

Accepted Answer

Export a managed solution from the development environment and import it into the test environment. Managed solutions are the recommended approach for deploying to non-development environments (e.g., test, UAT, production). A managed solution locks components to prevent direct editing in the target environment, supports lifecycle management (upgrades, patches, and removal), and ensures that only the intended customizations are deployed. Exporting an unmanaged solution (Option A) would leave components editable in the test environment, breaking the managed lifecycle pattern.

Answer

Export an unmanaged solution from the development environment and import it into the test environment

Answer

Manually recreate all components in the test environment

Answer

Copy the entire development environment to the test environment

Question 3

An administrator needs to ensure that only users from a specific Microsoft Entra ID group can access a Power Platform environment. What should the administrator configure?

Accepted Answer

Assign a security group to the environment in the Power Platform admin center. Assigning a security group to an environment in the Power Platform admin center restricts access to only members of that Microsoft Entra ID group. This is the standard method for controlling user access to a Power Platform environment, ensuring that only authorized users can interact with its resources.

Answer

Disable the 'Create personal productivity environments' setting

Answer

Set environment capacity limits

Answer

Configure a data loss prevention (DLP) policy

Question 4

A company uses Power Platform with Microsoft Dataverse. The administrator notices that a user can create a new environment without approval. The company wants to enforce a process where all environment creation requires administrator approval. What should the administrator configure?

Accepted Answer

Disable the 'Create personal productivity environments' setting in the Power Platform admin center. The 'Create personal productivity environments' setting in the Power Platform admin center controls whether users can create their own environments without requiring administrator approval. Disabling this setting enforces a process where all environment creation must go through an administrator, aligning with the company's requirement for approval-based environment provisioning.

Answer

Configure a Data Loss Prevention (DLP) policy

Answer

Set a conditional access policy in Microsoft Entra ID

Answer

Reduce the tenant-level environment capacity limits

Question 5

An organization has multiple Power Platform environments. The administrator needs to move a solution from a development environment to a production environment. The solution includes custom connectors and environment variables. What is the correct process?

Accepted Answer

Export a managed solution from development and import it into production. Managed solutions are the standard mechanism for deploying customizations (including custom connectors and environment variables) from a development environment to a production environment. Exporting a managed solution from development and importing it into production ensures that components are packaged as a single, deployable unit, and it prevents accidental modifications in production by making the solution layers read-only after import.

Answer

Copy the entire development environment to production

Answer

Export an unmanaged solution from development and import it into production

Answer

Manually re-create all components in production

Question 6

A Power Platform administrator needs to review which users have accessed a specific environment in the last 30 days. What should they use?

Accepted Answer

Power Platform admin center auditing. The Power Platform admin center provides built-in auditing capabilities that allow administrators to view user access logs for specific environments. By navigating to the 'Auditing' section within the admin center, an admin can filter by environment and date range (e.g., last 30 days) to see which users have accessed the environment. This is the correct tool because it is purpose-built for Power Platform governance and does not require additional scripting or external tools.

Answer

Power Platform PowerShell cmdlets

Answer

Power Apps maker portal

Answer

Microsoft 365 admin center

Question 7

An organization wants to ensure that all Power Platform solutions in production environments are tracked and changes are approved. What should the administrator implement?

Accepted Answer

Managed solutions with application lifecycle management (ALM). Managed solutions with application lifecycle management (ALM) ensure that all Power Platform solutions in production environments are tracked and changes are approved by enforcing version control, solution layering, and controlled deployment through environments. This approach uses solution components and environment segmentation to prevent unapproved modifications and maintain an audit trail.

Answer

Data Loss Prevention (DLP) policies

Answer

Environment security groups

Answer

Disable the 'Create personal productivity environments' setting

Question 8

A company has a Power Platform environment that is running low on storage. The administrator needs to free up storage without deleting important data. What should they do first?

Accepted Answer

Review storage analytics in the Power Platform admin center to identify large entities. The first step in freeing up storage without deleting important data is to identify which entities consume the most space. The Power Platform admin center provides storage analytics that break down storage usage by entity, allowing administrators to make informed decisions about data cleanup or archiving. This approach ensures that only non-essential data is targeted, preserving critical business data.

Answer

Disable auditing for all environments

Answer

Delete all audit logs

Answer

Purchase additional storage capacity

Question 9

A Power Platform administrator needs to delegate environment administration to a team member without granting full tenant-level admin rights. Which TWO roles can the administrator assign?

Accepted Answer

Power Platform Service Admin. Options A (Power Platform Service Admin) and B (Environment Admin) are correct. The Power Platform Service Admin role provides global admin-like capabilities within the Power Platform, such as managing environments, without granting full tenant-level admin rights across all Microsoft 365 services. The Environment Admin role grants full administrative control over a specific environment, including managing permissions and settings, but is scoped to that environment only. Option C (Microsoft Entra ID Admin) is incorrect because it only manages identity and access in Azure Active Directory, not Power Platform environments. Option D (Dynamics 365 Admin) is incorrect because while it does include some Power Platform administration, it is broader and not specifically for delegating environment-level administration without additional privileges; also, it is not one of the two roles recommended for scoped delegation. Option E (Global Admin) is incorrect because it has unrestricted access to all tenant-level settings and services.

Answer

Microsoft Entra ID Admin

Answer

Dynamics 365 Admin

Answer

Global Admin

Question 10

An administrator is planning to deploy a solution across multiple environments. Which THREE practices should they follow?

Accepted Answer

Create separate environments for development, test, and production. Microsoft best practices recommend using separate environments for development, test, and production to isolate changes, prevent accidental data loss, and support a structured application lifecycle management (ALM) process. Each environment can have its own data, security settings, and solution versions, ensuring that modifications are validated before reaching production.

Answer

Use unmanaged solutions in production for easier modifications

Answer

Copy the entire development environment to test and production

Question 11

A company wants to enforce data loss prevention (DLP) policies for Power Automate flows. Which TWO actions can the administrator perform?

Accepted Answer

Block specific connectors from being used in flows. Administrators can block specific connectors from being used in Power Automate flows as part of a DLP policy, preventing data from being shared with unauthorized services. Option C is correct because DLP policies can be scoped to a specific environment, allowing granular control over connector usage within that environment. This enables the administrator to enforce data protection rules tailored to different business contexts.

Answer

Allow users to bypass DLP policies with administrator approval

Answer

Assign DLP policies to specific users

Answer

Inherit the tenant-level DLP policy for all environments

Question 12

Refer to the exhibit. A Power Platform administrator applies this DLP policy to the default environment. What is the result?

Accepted Answer

Microsoft Teams and Twitter connectors are blocked in the default environment. The exhibit shows a Data Loss Prevention (DLP) policy configured with Microsoft Teams and Twitter connectors in the 'Blocked' group. Since this policy is applied to the default environment, only those two connectors are blocked in that environment. All other connectors remain in the 'Allowed' group by default, so they are permitted. Therefore, the correct result is that Microsoft Teams and Twitter connectors are blocked in the default environment.

Answer

All connectors are allowed

Answer

All connectors are blocked

Answer

The policy applies to all environments

Question 13

Refer to the exhibit. An administrator runs this PowerShell command against a Power Platform environment. What can the administrator conclude?

Accepted Answer

The environment is accessible only to members of the ContosoUsers security group. The PowerShell command `Get-AdminPowerAppEnvironment` returns the environment details, including the `SecurityGroupId` property. If this property is populated with a GUID, it indicates a security group is assigned to the environment, restricting access to its members. Since the exhibit shows a non-null `SecurityGroupId` for the ContosoUsers group, the environment is accessible only to members of that security group.

Answer

The environment creation failed

Answer

The environment has no security group assigned

Answer

The environment is a personal productivity environment

Question 14

Refer to the exhibit. An administrator deploys this ARM/Bicep template to create a new Power Platform environment. What type of environment will be created?

Accepted Answer

Sandbox environment. The ARM/Bicep template sets the 'environmentSku' property to 'Sandbox', which directly specifies the environment type as a Sandbox environment. Sandbox environments are non-production instances used for development, testing, and training, isolated from production data and workloads.

Answer

Developer environment

Answer

Trial environment

Answer

Production environment

Question 15

A company is deploying Microsoft Power Platform across multiple departments. They want to ensure that only licensed users can create environments. What should they configure?

Accepted Answer

Configure the Dynamics 365 admin center to restrict environment creation to administrators only.. The Dynamics 365 admin center (now largely replaced by the Power Platform admin center) can be configured to restrict environment creation to administrators only. By enabling this setting, only licensed users with administrative roles can create new environments, meeting the requirement. Option A is incorrect because the Environment Maker role allows users to create resources within an environment (such as apps and flows), not to create the environments themselves. Options B and C are incorrect because environment creation permissions are managed within the Power Platform admin center, not through the Microsoft 365 admin center or Microsoft Entra ID roles.

Answer

In the Power Platform admin center, assign the Environment Maker security role to specific users.

Answer

Disable environment creation for all users in the Microsoft 365 admin center.

Answer

Use Microsoft Entra ID roles to control environment creation permissions.