PL-900 Manage the Microsoft Power Platform environment Practice Test 6 — 15 Questions

Question 1

A company is deploying Microsoft Power Platform across multiple departments. They want to ensure that only licensed users can create environments. What should they configure?

Accepted Answer

In the Power Platform admin center, assign the Environment Maker security role to specific users.. Option A is correct because the Environment Maker security role in the Power Platform admin center is the specific permission that allows users to create environments. By assigning this role to licensed users, administrators can control who has the ability to create new environments, ensuring only authorized individuals can do so. This is the standard method for managing environment creation permissions within Power Platform.

Answer

Disable environment creation for all users in the Microsoft 365 admin center.

Answer

Use Microsoft Entra ID roles to control environment creation permissions.

Answer

Configure the Dynamics 365 admin center to restrict environment creation to administrators only.

Question 2

An organization has several Power Platform environments used for development and testing. They want to prevent accidental deletion of important data. What strategy should they implement?

Accepted Answer

Use the Power Platform admin center to configure environment backups and enable solution checker.. Option D is correct because the Power Platform admin center provides automated daily backups (with a 28-day retention for production environments) and allows manual backups, which directly protects against accidental data loss. Enabling solution checker is a separate best practice for quality assurance, but the core strategy for preventing accidental deletion is leveraging the built-in backup and restore capabilities.

Answer

Regularly export all data to Excel files and store them in OneDrive.

Answer

Set environment capacity limits to prevent storage of excessive data.

Answer

Enable versioning on all SharePoint lists used by Power Apps.

Question 3

A global company uses Power Platform and wants to ensure that data residency requirements are met for users in different regions. What should they configure?

Accepted Answer

In the Power Platform admin center, create environments in the appropriate geographic regions (e.g., Europe, United States).. Option A is correct because Power Platform environments are the boundary for data storage and compute. By creating environments in specific geographic regions (e.g., Europe, United States) via the Power Platform admin center, the company ensures that all data for that environment resides in the chosen region, meeting data residency requirements. This is the primary mechanism for controlling data location in Power Platform.

Answer

Create data loss prevention (DLP) policies to block data movement between regions.

Answer

Configure Microsoft Entra ID Conditional Access policies to restrict access based on geographic location.

Answer

Use Microsoft Purview to tag environments with data residency labels.

Question 4

A company uses Power Automate flows that access Microsoft SharePoint and Microsoft Dataverse. They want to prevent data from leaving the organization. What should they configure?

Accepted Answer

Create a data loss prevention (DLP) policy in the Power Platform admin center that blocks sharing data with external connectors.. Option C is correct because Data Loss Prevention (DLP) policies in the Power Platform admin center are specifically designed to prevent data from leaving the organization by controlling which connectors can share data. By blocking external connectors, the policy ensures that SharePoint and Dataverse data cannot be sent to unauthorized external services, directly addressing the requirement.

Answer

Configure Microsoft Purview to automatically classify and protect data in Power Automate.

Answer

Enable Microsoft Defender XDR to monitor for suspicious data transfers.

Answer

Apply Microsoft Entra ID Conditional Access policies to require managed devices.

Question 5

An organization wants to manage all Power Platform environments from a single pane of glass, including capacity monitoring and assignment of user roles. Which tool should they use?

Accepted Answer

Power Platform admin center. The Power Platform admin center (admin.powerplatform.microsoft.com) is the dedicated management portal for all Power Platform environments, providing a single pane of glass for tasks such as capacity monitoring (storage usage per environment), environment lifecycle management, and assignment of user roles via Data Loss Prevention (DLP) policies and environment security roles. It centralizes administration across Power Apps, Power Automate, Power Virtual Agents, and Dataverse, which aligns directly with the organization's requirement.

Answer

Microsoft 365 admin center

Answer

Microsoft Intune

Answer

Azure portal

Question 6

A company uses a Power Platform environment that contains several production apps. They need to ensure that changes to these apps are reviewed and approved before deployment to the production environment. What should they implement?

Accepted Answer

Use managed solutions and Azure DevOps for application lifecycle management (ALM) with deployment gates.. Option B is correct because managed solutions and Azure DevOps with deployment gates provide a structured Application Lifecycle Management (ALM) process. This allows changes to be reviewed, tested, and approved before deployment to a production environment, ensuring governance and control over modifications.

Answer

Create data loss prevention (DLP) policies for the production environment.

Answer

Assign the System Administrator role to all developers.

Answer

Configure Microsoft Purview to audit changes and require approval.

Question 7

A user reports they cannot create a new Power Apps app in the default environment. They have a Power Apps license. What is the most likely cause?

Accepted Answer

The user has not been assigned the Environment Maker security role for the default environment.. The most likely cause is that the user has not been assigned the Environment Maker security role for the default environment. Even with a Power Apps license, a user must be explicitly granted the Environment Maker role in a specific environment (including the default environment) to create apps. Without this role, the user can only run apps, not create or edit them.

Answer

A data loss prevention (DLP) policy is blocking app creation.

Answer

The environment has reached its maximum number of apps.

Answer

The user does not have a Power Apps license.

Question 8

An organization wants to allow external partners to access specific Power Apps and data without granting them full access to the tenant. What should they configure?

Accepted Answer

Invite partners as guest users in Microsoft Entra ID and assign them appropriate security roles in the Power Platform environment.. Option C is correct because inviting external partners as guest users in Microsoft Entra ID (formerly Azure AD) and assigning them appropriate security roles in the Power Platform environment is the standard method for providing controlled, least-privilege access to specific Power Apps and their underlying data sources. This approach leverages Microsoft Entra B2B collaboration to create guest identities, which can then be granted access to specific environments and resources without giving them full tenant-level permissions.

Answer

Use Microsoft Intune to manage partner devices.

Answer

Create a data loss prevention (DLP) policy that allows external sharing.

Answer

Share the app URL with the partners and ask them to sign in with their own accounts.

Question 9

A company has multiple Power Platform environments. They want to automatically apply consistent settings (e.g., DLP policies, audit settings) to all new environments. What should they do?

Accepted Answer

Create an environment group in the Power Platform admin center and assign policies to the group.. Option C is correct because environment groups allow applying policies to multiple environments. Option A is wrong because PowerShell can configure environments individually but not automatically for new ones. Option B is wrong because Microsoft Intune does not manage Power Platform settings. Option D is wrong because Azure Blueprints are for Azure resources.

Answer

Use PowerShell scripts to configure each environment after creation.

Answer

Use Azure Blueprints to define and apply a set of Azure resources.

Answer

Use Microsoft Intune to enforce settings on Power Platform environments.

Question 10

Which TWO actions can an administrator perform in the Power Platform admin center to manage environments?

Accepted Answer

Assign security roles to users within an environment.. Option A is correct because the Power Platform admin center allows administrators to assign security roles to users within an environment, controlling their access to resources like apps, flows, and data. This is a core administrative task for managing environment-level permissions. Option C is correct because creating and deleting environments is a fundamental capability of the Power Platform admin center, enabling administrators to provision and remove isolated workspaces for development, testing, or production.

Answer

Configure SharePoint site permissions.

Answer

Manage Power BI Premium capacity.

Answer

Configure Microsoft Entra ID Conditional Access policies.

Question 11

Which THREE components are part of the Power Platform environment lifecycle management?

Accepted Answer

Environment creation. Environment creation is a core component of Power Platform environment lifecycle management because it establishes the isolated container where apps, flows, and data reside. The lifecycle begins when an administrator provisions a new environment, which sets up a dedicated Dataverse database, security boundaries, and resource limits. Without creation, no subsequent lifecycle operations (backup, restore, deletion) can occur.

Answer

Creating users in Microsoft Entra ID

Answer

Publishing Power BI reports

Question 12

Which TWO of the following are valid reasons to create multiple Power Platform environments?

Accepted Answer

To isolate data for different business units or projects.. Option B is correct because Power Platform environments act as security and data boundaries, allowing organizations to isolate data for different business units or projects. Each environment has its own Dataverse database, which prevents data leakage and enables role-based access control tailored to specific teams or initiatives.

Answer

To increase the total storage capacity available.

Answer

To improve performance of Power Automate flows.

Answer

To reduce the cost of Power Apps licenses.

Question 13

Refer to the exhibit. The JSON shows a snippet of a DLP policy. Which effect will this policy have on a Power Automate flow that uses Google Sheets and Dropbox connectors?

Accepted Answer

The flow will be blocked because it uses blocked connectors.. The DLP policy in the exhibit defines a 'Blocked' connector group that includes both Google Sheets and Dropbox. In Power Automate, when a flow uses any connector listed in a blocked group, the flow is prevented from running. Since the flow uses both blocked connectors, it will be blocked entirely, regardless of whether they are used together or separately.

Answer

The flow will run but the connection references will be deleted.

Answer

The flow will be blocked only if it uses both connectors together.

Answer

The flow will run normally but will be restricted to the production environment only.

Question 14

Refer to the exhibit. The JSON shows Power Platform tenant settings. A user tries to create a new environment with a capacity of 8 GB. What will happen?

Accepted Answer

The environment will be created successfully with 8 GB capacity.. The JSON shows that the tenant settings have 'DisableEnvironmentCreationByNonAdminUsers' set to false, meaning non-admin users can create environments, and 'EnvironmentCapacityAllocationMode' is set to 'UserAllocation', which allows users to allocate capacity from their own user license. Since the user is trying to create an environment with 8 GB, and the default per-user capacity for a Power Apps license is 10 GB (not 5 GB), the creation succeeds because 8 GB is within that limit.

Answer

The environment creation will fail because 8 GB exceeds the default environment capacity of 5 GB.

Answer

The environment will be created but the user must have a Power Apps license assigned.

Answer

The environment creation will fail because UserAllocation mode requires at least 15 GB.

Question 15

Refer to the exhibit. The JSON shows a Power Platform environment's properties in an ARM template. Based on the exhibit, which statement about this environment is true?

Accepted Answer

This environment is a Production environment linked to a Sandbox environment.. The exhibit shows an ARM template with properties including 'environmentType': 'Production' and 'linkedEnvironmentId' referencing a Sandbox environment. This indicates the Production environment is linked to a Sandbox environment for data synchronization or development purposes, which is a common configuration in Power Platform for lifecycle management. The presence of a linked environment ID confirms it is not standalone, and the environment type is Production, not Sandbox.

Answer

This environment is a Standalone environment without any linked environments.

Answer

This environment is a Sandbox environment linked to a Dynamics 365 instance.

Answer

This environment is a Production environment with no data storage.