PL-900 Manage the Microsoft Power Platform environment Practice Test 6 — 15 Questions

Question 1

A manufacturing company is deploying Microsoft Power Platform for its sales team. The environment must be segregated from production to allow experimentation without affecting live data. The solution must also support automated deployment pipelines. What should the administrator create?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

A developer environment. A developer environment in Power Platform is a special environment type intended for individual makers to build, test, and experiment without affecting production data. It supports Dataverse and can be integrated with ALM tools like Azure DevOps or GitHub Actions for automated deployment pipelines. Because it is segregated from production, it satisfies the requirement to experiment safely while supporting CI/CD.

Answer

A production environment with Dataverse

Answer

A Dataverse for Teams environment

Answer

A trial environment

Question 2

A company wants to allow users to build Power Apps and Power Automate flows using prebuilt templates and connectors, but without the ability to create custom connectors or access the Dataverse. Which environment type should be assigned to these users?

Accepted Answer

Dataverse for Teams environment. A Dataverse for Teams environment provides basic capabilities with prebuilt templates and standard connectors, but restricts custom connectors and direct access to Dataverse. This matches the requirement. Option A (Developer environment) is wrong because it is intended for individual development and includes full Dataverse access. Option C (Production environment with Dataverse) is wrong because it allows custom connectors and full Dataverse customization. Option D (Default environment) is wrong because it is a production-type environment with unrestricted capabilities.

Answer

Developer environment

Answer

Production environment with Dataverse

Answer

Default environment

Question 3

A global company with offices in multiple regions wants to ensure that Power Automate flows processing sensitive customer data are only executed in specific geographic regions to comply with data residency requirements. What should the administrator configure?

Accepted Answer

Data loss prevention (DLP) policies. Data loss prevention (DLP) policies in Power Platform allow administrators to define which connectors can be used together and restrict connector usage to specific environments. By creating DLP policies that block or limit connectors that process sensitive customer data, and by scoping these policies to environments in specific geographic regions, the administrator can enforce that flows handling such data only run in those regions. This directly addresses data residency requirements by preventing cross-region data flow through unauthorized connectors.

Answer

Audit log settings

Answer

Solution checker

Answer

Environment routing rules

Question 4

An administrator needs to manage multiple Power Platform environments across several tenants. The administrator wants to use a single tool to view environment details, apply updates, and configure settings for all environments. Which tool should the administrator use?

Accepted Answer

Power Platform Admin Center. The Power Platform Admin Center is the central web-based interface for managing environments across tenants. Option B (PowerShell cmdlets) is a scripting tool that can be used for automation but is not a single graphical tool for all tasks. Option C (Power Apps Maker Portal) is designed for creating and editing apps, not for environment management. Option D (Microsoft 365 admin center) does not provide full management of Power Platform environments.

Answer

PowerShell cmdlets

Answer

Power Apps Maker Portal

Answer

Microsoft 365 admin center

Question 5

A company has multiple Power Platform environments. The administrator notices that a production environment is running low on storage. The administrator needs to free up space without disrupting active users. What should the administrator do FIRST?

Accepted Answer

Identify large or unused solutions and remove them. Identifying large or unused solutions and removing them directly frees up storage and is the first logical step to free space without disrupting users. Option A is wrong because deleting old audit logs may not free significant space compared to solutions. Option B is wrong because disabling unused plugins may not free storage and could break functionality. Option D is wrong because adding storage is a cost-increasing measure, not a cleanup action.

Answer

Delete old audit logs

Answer

Disable unused plugins

Answer

Add more storage to the environment

Question 6

A user reports that they cannot create a new Power App in the default environment. The administrator checks that the user has a Power Apps license, but the user still cannot create apps. What is the most likely cause?

Accepted Answer

The environment is not enabled for app creation. By default, the 'Create apps in canvas' and 'Create apps in model-driven' capabilities are disabled in the default environment. Even if a user has a Power Apps license, they cannot create apps unless an administrator explicitly enables app creation for that environment. This is a common environment-level setting that overrides individual licensing.

Answer

The user does not have a Power Apps license

Answer

The user does not have a mobile device

Answer

The user is using an unsupported browser

Question 7

An administrator needs to assign user roles in a Power Platform environment. Which TWO roles can be assigned to allow users to create and edit Power Apps and flows, but not manage environments?

Accepted Answer

System Customizer. Environment Maker (E) is correct because it grants users the ability to create new apps, connections, custom connectors, and flows within an environment without giving them administrative control over the environment itself. System Customizer (A) is also correct because it allows users to customize the environment, including creating and editing apps and flows, while still lacking the privileges to manage the environment's settings or other users. Basic User (B) is not correct because it only provides read access and the ability to run apps, not create or edit them. System Administrator (C) is not correct because it grants full environment management permissions, which the scenario explicitly excludes. Global Administrator (D) is not correct because it is a Microsoft 365 tenant-level role, not a Power Platform environment role, and it does not directly grant app creation rights within an environment.

Answer

Basic User

Answer

System Administrator

Answer

Global Administrator

Question 8

You are the Power Platform administrator for a large financial services organization. The organization has three environments: Dev, Test, and Prod. The Dev environment is used by a team of 10 developers who frequently create and test solutions. The Test environment is for quality assurance, and Prod is for live applications. Recently, the compliance team has mandated that all environments must have audit logging enabled to track changes and user activities. Additionally, the organization wants to implement a policy that prevents the use of connectors that transmit data outside the organization's Azure region. The compliance team also requires that any new environment created in the future automatically inherits these audit and DLP policies. You need to configure the environment settings to meet these requirements. What should you do?

Accepted Answer

Enable audit logging and create a tenant-level DLP policy that applies to all environments. Enabling audit logging and creating a tenant-level DLP policy ensures all environments, including new ones, inherit these settings. Option B is wrong because configuring each environment individually is inefficient and does not automatically apply to new environments. Option C is wrong because a tenant-level DLP policy with a warning does not block data transmission as required; it only warns, which does not meet the compliance requirement to prevent transmission. Option D is wrong because enabling audit only in Prod does not meet the mandate for all environments, and creating a DLP policy only for Dev and Test leaves Prod unprotected.

Answer

Configure audit logging and DLP policies individually for each environment

Answer

Create a tenant-level DLP policy that warns users about data transmission

Answer

Enable audit logging in the Prod environment and create a DLP policy for Dev and Test only

Question 9

You are the Power Platform administrator for a retail company. The company has a single default environment that all employees use to build and run Power Apps and Power Automate flows. Recently, the IT department noticed that some users are accidentally deleting shared flows that are critical to business operations. To prevent this, you need to implement a solution that allows users to create and edit their own flows, but prevents them from deleting flows owned by others. Additionally, you want to ensure that only approved connectors are used to protect sensitive data. You have been granted permissions to manage environments and security roles. What should you do?

Accepted Answer

Create a new environment, assign users the Environment Maker role, and implement a DLP policy. Creating a new environment and assigning users the Environment Maker role allows them to create and edit their own flows but prevents them from deleting flows owned by others. Implementing a Data Loss Prevention (DLP) policy restricts the use of connectors to approved ones, protecting sensitive data. Option A is incorrect because removing the delete permission for all flows would prevent even legitimate cleanup. Option C is incorrect because audit logging only detects deletions after they occur, it does not prevent them. Option D is incorrect because sharing flows with read-only access prevents users from editing their own flows as required.

Answer

Remove the delete permission for all flows from all users

Answer

Enable audit logging and rely on manual review of deletions

Answer

Share all critical flows with read-only access to all users

Question 10

A manufacturing company is planning to implement Microsoft Power Platform. The environment strategy must support data isolation for sensitive production data while allowing developers to experiment with new features without affecting the production environment. Which two environment types should the company use?

Accepted Answer

Sandbox environment. A sandbox environment provides a non-production area for development and testing. A production environment hosts the live apps and data. Together they allow development without affecting production.

Answer

Default environment

Answer

Developer environment

Answer

Trial environment

Question 11

A global consulting firm uses Power Platform with environments in multiple regions. They need to enforce data loss prevention (DLP) policies that are consistent across all environments, but allow exceptions for specific connectors in a single environment used for a high-security client project. Which three components should they configure?

Accepted Answer

Environment-level DLP policy. Environment-level DLP policies can be created to override tenant-level policies for specific environments. The tenant-level DLP policy provides a baseline. Connector classification (e.g., Blocked, Business, Non-business) is part of DLP policy configuration.

Answer

Power Apps component library

Answer

Power Automate Cloud Flow

Question 12

A small business wants to adopt Power Apps to create a custom inventory management app. They have a single Microsoft 365 Business Basic subscription which includes Power Apps and Power Automate capabilities. The IT manager, who is not a dedicated administrator, needs to set up the environment. They want to ensure that the app's data is stored securely and that only authorized employees can access it. The IT manager plans to create a new environment for the app. What should the IT manager do first to ensure proper governance and security?

Accepted Answer

Use the default environment and configure data loss prevention (DLP) policies to restrict data sharing.. Because the organization has a single Microsoft 365 Business Basic subscription, the default environment already exists. Creating a new environment is not necessary and could complicate management. The best course is to use the default environment with appropriate data policies and sharing settings.

Answer

Purchase additional Power Apps licenses for each user before creating the environment.

Answer

Create a trial environment to test the app before deploying to production.

Answer

Create a new production environment in the Power Platform Admin Center.

Question 13

A large enterprise uses Microsoft Power Platform with a centralized Center of Excellence (CoE). They have over 200 environments, each assigned to different business units. The security team requires that all environments enforce multi-factor authentication (MFA) for makers and admins. Additionally, they want to ensure that environment creation is limited to a specific security group. The current setup uses Microsoft Entra ID for identity. The admin needs to implement these requirements with minimal impact on existing users. What should the admin do?

Accepted Answer

Configure a Conditional Access policy in Microsoft Entra ID requiring MFA for the Power Platform app registration.. A Conditional Access policy in Microsoft Entra ID scoped to the Power Platform app registration enforces MFA for all makers and admins across every environment in one place, since Power Platform relies on Entra ID for authentication. This satisfies the MFA requirement tenant-wide with minimal disruption, and environment creation restriction is handled separately via the Power Platform admin center's environment creation settings (limited to a security group).

Answer

Use the Power Platform admin center to assign the 'Environment Maker' role to the security group.

Answer

Create a Power Automate flow to monitor environment creation and send alerts.

Answer

Enable MFA within each Power Platform environment's settings.

Question 14

A non-profit organization uses Power Platform to manage donor records. They have a single environment (default). A volunteer accidentally deleted a critical Power App component. The IT coordinator needs to restore the component from a previous version. The environment does not have any backup solution in place. What should the IT coordinator do?

Accepted Answer

Open the app in Power Apps Studio and use the version history feature to restore the previous version.. Power Platform includes version history for Power Apps, allowing restoration of previous versions. The coordinator can access the app's version history and restore the component.

Answer

Contact Microsoft Support to recover the deleted component.

Answer

Restore the environment from a backup using the Power Platform Admin Center.

Answer

Recreate the component manually.

Question 15

A software company uses Power Platform to build customer-facing portals. They have a dedicated production environment and a sandbox environment for development. The developer needs to copy the entire production environment (including all apps, flows, and data) to the sandbox environment for performance testing. The developer wants to ensure that the sandbox environment is an exact copy, including all data. What should the developer do?

Accepted Answer

Use the 'Copy environment' feature in the Power Platform Admin Center, selecting 'Full copy' including data.. The 'Copy environment' feature in the Power Platform Admin Center is specifically designed to create a complete replica of a source environment, including all apps, flows, customizations, and optionally the data. Selecting 'Full copy' ensures that both the metadata (solutions, configurations) and the business data are copied to the target sandbox environment. This is the only option that fulfills the requirement of an exact copy with data in a single, supported operation.

Answer

Export the solutions from the production environment and import them into the sandbox environment.

Answer

Manually recreate the apps and flows in the sandbox and use the same data source.

Answer

Use Power Automate to copy all data from production to sandbox.