PL-900 Manage the Microsoft Power Platform environment Practice Test 7 — 15 Questions

Question 1

A company uses Microsoft Power Platform and wants to enforce data loss prevention (DLP) policies for all environments. The admin needs to block the use of SharePoint connector in all default environments. Which action should the admin take?

Accepted Answer

Create a DLP policy that applies to all environments and block the SharePoint connector.. Option C is correct because DLP policies in Microsoft Power Platform are designed to control connector usage across environments. By creating a DLP policy that applies to all environments and blocking the SharePoint connector, the admin ensures that the connector is prohibited in every environment, including all default environments. This action directly enforces the data loss prevention requirement at the tenant level.

Answer

Create a DLP policy and assign it to the default environment only.

Answer

Use Microsoft Entra ID conditional access to block the SharePoint connector.

Answer

Configure connector sharing settings in Power Apps to block SharePoint.

Question 2

A Power Platform admin receives a request to allow a group of developers to create and manage environments within a tenant. What is the minimum role assignment required?

Accepted Answer

Assign the Environment Admin role in the Power Platform admin center.. The Environment Admin role in the Power Platform admin center is the minimum role required to create and manage environments within a tenant. This role grants the necessary permissions to provision, modify, and delete environments without needing broader tenant-wide administrative privileges.

Answer

Assign the System Administrator role in each environment.

Answer

Assign the Global Administrator role in Microsoft Entra ID.

Answer

Assign the Dynamics 365 Administrator role.

Question 3

An organization has multiple Power Platform environments including production, development, and test. They want to ensure that changes made in development are promoted to test and then to production, with approval gates. Which feature should they use?

Accepted Answer

Use managed solutions with environment variables and configure deployment pipelines.. Option D is correct because managed solutions with environment variables and ALM (Application Lifecycle Management) using pipelines or Azure DevOps provide structured promotion with approvals. Option A is wrong because simply using unmanaged solutions does not enforce approval gates. Option B is wrong because Power Apps check-in is not part of ALM. Option C is wrong because exporting to a SharePoint library lacks approval controls.

Answer

Use Power Apps check-in feature and version history.

Answer

Use unmanaged solutions and export/import manually between environments.

Answer

Export solutions to a SharePoint document library and import from there.

Question 4

A company wants to restrict the ability to create Power Apps and Power Automate flows in the default environment to only a specific security group. What is the recommended approach?

Accepted Answer

Assign the security group to the Environment Maker role for the default environment.. Option A is correct because default environment can be restricted by assigning the security group to the Environment Maker role. Option B is wrong because DLP does not control creation. Option C is wrong because disabling the default environment is not possible. Option D is wrong because the maker role applies to all environments unless scoped.

Answer

Create a DLP policy that blocks creation of apps and flows.

Answer

Disable the default environment and create a new one with restricted access.

Answer

Remove the Environment Maker role from all users and add the security group as co-admins.

Question 5

An admin needs to view the capacity add-ons purchased for a tenant, including AI Builder credits. Where should the admin go?

Accepted Answer

Power Platform admin center > Resources > Capacity. The Power Platform admin center is the dedicated management interface for Power Platform resources, including capacity add-ons and AI Builder credits. Under Resources > Capacity, admins can view detailed breakdowns of capacity entitlements, such as database, file, log, and add-on credits like AI Builder service credits. This is the correct location because it provides tenant-level capacity monitoring specific to Power Platform, not general licensing or Azure billing.

Answer

Power Platform admin center > Billing > Licenses

Answer

Microsoft 365 admin center > Billing > Licenses

Answer

Azure portal > Cost Management + Billing

Question 6

A company uses Microsoft Copilot Studio to create a custom copilot. The copilot needs to access customer data stored in a Dataverse table that contains sensitive information. The compliance team requires that data accessed by the copilot must be audited. What should the admin configure?

Accepted Answer

Enable auditing in Microsoft Purview and log copilot interactions.. Option C is correct because Microsoft Purview auditing captures detailed logs of user and admin activities, including interactions with custom copilots built in Copilot Studio. By enabling auditing in Purview and logging copilot interactions, the admin can meet the compliance requirement to audit all data accessed by the copilot, ensuring a traceable record of sensitive customer data access.

Answer

Deploy Microsoft Sentinel to monitor copilot behavior.

Answer

Configure a DLP policy to block non-compliant data access.

Answer

Use Copilot Studio analytics to track usage.

Question 7

A Power Platform admin needs to ensure that all environments have a backup policy that automatically creates backups every 24 hours. What is the default backup frequency for Dataverse environments?

Accepted Answer

Every 24 hours. Option A is correct because Dataverse environments are backed up every 24 hours by default. Option B is wrong because 12 hours is not default. Option C is wrong because 48 hours is not default. Option D is wrong because only paid environments have backups, but the frequency is still every 24 hours.

Answer

Only for paid environments, there is no default schedule.

Answer

Every 12 hours

Answer

Every 48 hours

Question 8

A user reports they cannot create a new environment in the Power Platform admin center. What is the most likely reason?

Accepted Answer

The user lacks the Environment Admin or Global Admin role.. Creating a new environment in the Power Platform admin center requires the user to have either the Environment Admin or Global Admin role in Microsoft Entra ID (formerly Azure AD). These roles grant the necessary permissions to provision environments, manage settings, and assign security roles. Without one of these roles, the 'New environment' button will be grayed out or the operation will fail with an access denied error.

Answer

The tenant has insufficient trial capacity.

Answer

The user does not have a Power Apps license.

Answer

The user's network blocks the Power Platform admin center.

Question 9

An organization uses Power Automate flows that connect to Microsoft Teams and SharePoint. They want to ensure that if a flow is accidentally deleted, it can be recovered within 30 days. What should they do?

Accepted Answer

No action needed; deleted flows are automatically retained in the recycle bin for 30 days.. Option A is correct because deleted flows are retained in the recycle bin for 30 days. Option B is wrong because backup policy is for Dataverse, not flows. Option C is wrong because solutions do not protect against deletion. Option D is wrong because version history is for changes, not deletion recovery.

Answer

Store the flow in a solution and export it regularly.

Answer

Enable version history for the flow.

Answer

Configure a backup policy in the Power Platform admin center.

Question 10

Which TWO actions can a Power Platform admin perform in the Power Platform admin center to manage environments? (Choose two.)

Accepted Answer

Create and delete environments.. Options A and D are correct. Admin can create and delete environments, and manage environment security roles. Option B is wrong because assigning licenses is done in Microsoft 365 admin center. Option C is wrong because creating Microsoft Entra ID groups is done in Entra admin center. Option E is wrong because modifying Dataverse schema is done in Power Apps maker portal.

Answer

Modify Dataverse table schemas.

Answer

Assign Power Apps licenses to users.

Answer

Create Microsoft Entra ID security groups.

Question 11

Which THREE factors determine the capacity limits (database, file, log) of a Power Platform environment? (Choose three.)

Accepted Answer

Environment type (production vs. sandbox). Option A is correct because environment type (production vs. sandbox) directly determines the default capacity limits for database, file, and log storage. Production environments receive higher default entitlements, while sandbox environments are capped at 1 GB of database capacity, ensuring that testing does not consume production resources.

Answer

Number of licensed users in the tenant

Answer

Environment geographic region

Question 12

Which TWO are valid ways to access the Power Platform admin center? (Choose two.)

Accepted Answer

Through the Microsoft 365 admin center under 'All admin centers'. Option C is correct because the Microsoft 365 admin center includes a link to 'All admin centers,' which provides direct access to the Power Platform admin center. Option D is correct because the Power Platform admin center can be accessed directly via its dedicated URL, https://admin.powerplatform.com, which is the primary entry point for managing environments, data policies, and settings.

Answer

Through the Power Apps maker portal under 'Admin'

Answer

Through the Microsoft Entra admin center under 'Power Platform'

Answer

Through the Azure portal under 'Power Platform'

Question 13

Refer to the exhibit. A Power Platform admin creates a DLP policy with this JSON configuration. What is the effect?

Accepted Answer

The SharePoint connector is blocked in all production environments.. Option D is correct because the JSON shows a DLP policy that blocks the SharePoint connector in all environments of type Production. Option A is wrong because the policy does not specify a specific environment. Option B is wrong because the policy blocks SharePoint, not restricts it. Option C is wrong because the policy does not mention SharePoint Online vs on-premises.

Answer

The policy blocks all SharePoint Online and SharePoint on-premises connectors.

Answer

The SharePoint connector is restricted to the business data group.

Answer

The SharePoint connector is blocked only in the default environment.

Question 14

Refer to the exhibit. An admin runs the PowerShell command and gets the output shown. How many environments are in the tenant?

Accepted Answer

3. Option B is correct because the output lists three environments: Contoso Sales, Contoso Dev, Contoso Test. Option A is wrong because there are three, not one. Option C is wrong because there are not four. Option D is wrong because there are not six.

Answer

1

Answer

4

Answer

6

Question 15

Refer to the exhibit. A Power Platform admin views the capacity of a sandbox environment. Based on the exhibit, which statement is true?

Accepted Answer

The environment is a sandbox and thus has reduced capacity limits.. Option C is correct because sandbox environments have reduced capacity compared to production. Option A is wrong because the exhibit does not compare to production; sandbox has lower limits by default. Option B is wrong because capacity values shown are not unusually low; they are typical for sandbox. Option D is wrong because capacity add-ons can increase sandbox capacity.

Answer

The capacity values are unusually low and may indicate a problem.

Answer

The environment has production-level capacity.

Answer

The capacity cannot be increased with add-ons.