PL-900 Manage the Microsoft Power Platform environment Practice Test 7 — 15 Questions

Question 1

An organization has several Power Platform environments used for development and testing. They want to prevent accidental deletion of important data. What strategy should they implement?

Accepted Answer

Use the Power Platform admin center to configure environment backups and enable solution checker.. The Power Platform admin center provides automated daily backups (with a 28-day retention for production environments) and allows manual backups, which directly protects against accidental data loss. Enabling solution checker is a separate best practice for quality assurance, but the core strategy for preventing accidental deletion is leveraging the built-in backup and restore capabilities.

Answer

Regularly export all data to Excel files and store them in OneDrive.

Answer

Set environment capacity limits to prevent storage of excessive data.

Answer

Enable versioning on all SharePoint lists used by Power Apps.

Question 2

A global company uses Power Platform and wants to ensure that data residency requirements are met for users in different regions. What should they configure?

Accepted Answer

In the Power Platform admin center, create environments in the appropriate geographic regions (e.g., Europe, United States).. Power Platform environments are the boundary for data storage and compute. By creating environments in specific geographic regions (e.g., Europe, United States) via the Power Platform admin center, the company ensures that all data for that environment resides in the chosen region, meeting data residency requirements. This is the primary mechanism for controlling data location in Power Platform.

Answer

Create data loss prevention (DLP) policies to block data movement between regions.

Answer

Configure Microsoft Entra ID Conditional Access policies to restrict access based on geographic location.

Answer

Use Microsoft Purview to tag environments with data residency labels.

Question 3

A company uses Power Automate flows that access Microsoft SharePoint and Microsoft Dataverse. They want to prevent data from leaving the organization. What should they configure?

Accepted Answer

Create a data loss prevention (DLP) policy in the Power Platform admin center that blocks sharing data with external connectors.. Data Loss Prevention (DLP) policies in the Power Platform admin center are specifically designed to prevent data from leaving the organization by controlling which connectors can share data. By blocking external connectors, the policy ensures that SharePoint and Dataverse data cannot be sent to unauthorized external services, directly addressing the requirement.

Answer

Configure Microsoft Purview to automatically classify and protect data in Power Automate.

Answer

Enable Microsoft Defender XDR to monitor for suspicious data transfers.

Answer

Apply Microsoft Entra ID Conditional Access policies to require managed devices.

Question 4

An organization wants to manage all Power Platform environments from a single pane of glass, including capacity monitoring and assignment of user roles. Which tool should they use?

Accepted Answer

Power Platform admin center. The Power Platform admin center (admin.powerplatform.microsoft.com) is the dedicated management portal for all Power Platform environments, providing a single pane of glass for tasks such as capacity monitoring (storage usage per environment), environment lifecycle management, and assignment of user roles via Data Loss Prevention (DLP) policies and environment security roles. It centralizes administration across Power Apps, Power Automate, Power Virtual Agents, and Dataverse, which aligns directly with the organization's requirement.

Answer

Microsoft 365 admin center

Answer

Microsoft Intune

Answer

Azure portal

Question 5

A company uses a Power Platform environment that contains several production apps. They need to ensure that changes to these apps are reviewed and approved before deployment to the production environment. What should they implement?

Accepted Answer

Use managed solutions and Azure DevOps for application lifecycle management (ALM) with deployment gates.. Managed solutions and Azure DevOps with deployment gates provide a structured Application Lifecycle Management (ALM) process. This allows changes to be reviewed, tested, and approved before deployment to a production environment, ensuring governance and control over modifications.

Answer

Create data loss prevention (DLP) policies for the production environment.

Answer

Assign the System Administrator role to all developers.

Answer

Configure Microsoft Purview to audit changes and require approval.

Question 6

A user reports they cannot create a new Power Apps app in the default environment. They have a Power Apps license. What is the most likely cause?

Accepted Answer

The user has not been assigned the Environment Maker security role for the default environment.. The most likely cause is that the user has not been assigned the Environment Maker security role for the default environment. Even with a Power Apps license, a user must be explicitly granted the Environment Maker role in a specific environment (including the default environment) to create apps. Without this role, the user can only run apps, not create or edit them.

Answer

A data loss prevention (DLP) policy is blocking app creation.

Answer

The environment has reached its maximum number of apps.

Answer

The user does not have a Power Apps license.

Question 7

An organization wants to allow external partners to access specific Power Apps and data without granting them full access to the tenant. What should they configure?

Accepted Answer

Invite partners as guest users in Microsoft Entra ID and assign them appropriate security roles in the Power Platform environment.. Inviting external partners as guest users in Microsoft Entra ID (formerly Azure AD) and assigning them appropriate security roles in the Power Platform environment is the standard method for providing controlled, least-privilege access to specific Power Apps and their underlying data sources. This approach leverages Microsoft Entra B2B collaboration to create guest identities, which can then be granted access to specific environments and resources without giving them full tenant-level permissions.

Answer

Use Microsoft Intune to manage partner devices.

Answer

Create a data loss prevention (DLP) policy that allows external sharing.

Answer

Share the app URL with the partners and ask them to sign in with their own accounts.

Question 8

A company has multiple Power Platform environments. They want to automatically apply consistent settings (e.g., DLP policies, audit settings) to all new environments. What should they do?

Accepted Answer

Create an environment group in the Power Platform admin center and assign policies to the group.. Environment groups in the Power Platform admin center allow administrators to define a set of policies (such as DLP policies and audit settings) that are automatically applied to all environments within the group, including newly created ones. This provides a centralized, no-code method to enforce consistent governance across multiple environments without manual intervention.

Answer

Use PowerShell scripts to configure each environment after creation.

Answer

Use Azure Blueprints to define and apply a set of Azure resources.

Answer

Use Microsoft Intune to enforce settings on Power Platform environments.

Question 9

Which TWO actions can an administrator perform in the Power Platform admin center to manage environments?

Accepted Answer

Assign security roles to users within an environment.. The Power Platform admin center allows administrators to assign security roles to users within an environment, controlling their access to resources like apps, flows, and data. This is a core administrative task for managing environment-level permissions. Option C is correct because creating and deleting environments is a fundamental capability of the Power Platform admin center, enabling administrators to provision and remove isolated workspaces for development, testing, or production.

Answer

Configure SharePoint site permissions.

Answer

Manage Power BI Premium capacity.

Answer

Configure Microsoft Entra ID Conditional Access policies.

Question 10

Which THREE components are part of the Power Platform environment lifecycle management?

Accepted Answer

Environment creation. Environment creation is a core component of Power Platform environment lifecycle management because it establishes the isolated container where apps, flows, and data reside. The lifecycle begins when an administrator provisions a new environment, which sets up a dedicated Dataverse database, security boundaries, and resource limits. Without creation, no subsequent lifecycle operations (backup, restore, deletion) can occur.

Answer

Creating users in Microsoft Entra ID

Answer

Publishing Power BI reports

Question 11

Which TWO of the following are valid reasons to create multiple Power Platform environments?

Accepted Answer

To isolate data for different business units or projects.. Power Platform environments act as security and data boundaries, allowing organizations to isolate data for different business units or projects. Each environment has its own Dataverse database, which prevents data leakage and enables role-based access control tailored to specific teams or initiatives.

Answer

To increase the total storage capacity available.

Answer

To improve performance of Power Automate flows.

Answer

To reduce the cost of Power Apps licenses.

Question 12

Refer to the exhibit. The JSON shows a snippet of a DLP policy. Which effect will this policy have on a Power Automate flow that uses Google Sheets and Dropbox connectors?

Accepted Answer

The flow will be blocked because it uses blocked connectors.. The DLP policy in the exhibit defines a 'Blocked' connector group that includes both Google Sheets and Dropbox. In Power Automate, when a flow uses any connector listed in a blocked group, the flow is prevented from running. Since the flow uses both blocked connectors, it will be blocked entirely, regardless of whether they are used together or separately.

Answer

The flow will run but the connection references will be deleted.

Answer

The flow will be blocked only if it uses both connectors together.

Answer

The flow will run normally but will be restricted to the production environment only.

Question 13

Refer to the exhibit. The JSON shows a Power Platform environment's properties in an ARM template. Based on the exhibit, which statement about this environment is true?

Accepted Answer

This environment is a Production environment linked to a Sandbox environment.. The exhibit shows an ARM template with properties including 'environmentType': 'Production' and 'linkedEnvironmentId' referencing a Sandbox environment. This indicates the Production environment is linked to a Sandbox environment for data synchronization or development purposes, which is a common configuration in Power Platform for lifecycle management. The presence of a linked environment ID confirms it is not standalone, and the environment type is Production, not Sandbox.

Answer

This environment is a Standalone environment without any linked environments.

Answer

This environment is a Sandbox environment linked to a Dynamics 365 instance.

Answer

This environment is a Production environment with no data storage.

Question 14

A company uses Microsoft Power Platform and wants to enforce data loss prevention (DLP) policies for all environments. The admin needs to block the use of SharePoint connector in all default environments. Which action should the admin take?

Accepted Answer

Create a DLP policy that applies to all environments and block the SharePoint connector.. DLP policies in Microsoft Power Platform are designed to control connector usage across environments. By creating a DLP policy that applies to all environments and blocking the SharePoint connector, the admin ensures that the connector is prohibited in every environment, including all default environments. This action directly enforces the data loss prevention requirement at the tenant level.

Answer

Create a DLP policy and assign it to the default environment only.

Answer

Use Microsoft Entra ID conditional access to block the SharePoint connector.

Answer

Configure connector sharing settings in Power Apps to block SharePoint.

Question 15

An organization has multiple Power Platform environments including production, development, and test. They want to ensure that changes made in development are promoted to test and then to production, with approval gates. Which feature should they use?

Accepted Answer

Use managed solutions with environment variables and configure deployment pipelines.. Managed solutions with environment variables and deployment pipelines provide a structured, automated way to promote solutions across environments with approval gates. This approach ensures that only managed solutions (which are locked and not directly editable) are deployed to production, while environment variables allow configuration values to change per environment without modifying the solution itself.

Answer

Use Power Apps check-in feature and version history.

Answer

Use unmanaged solutions and export/import manually between environments.

Answer

Export solutions to a SharePoint document library and import from there.