PL-900 Manage the Microsoft Power Platform environment Practice Test 8 — 15 Questions

Question 1

A Power Platform administrator needs to ensure that when a maker creates a canvas app in a specific environment, the app can only connect to Microsoft Dataverse and cannot use any other data sources. The administrator has created a DLP policy and assigned it to the environment. Which action should the administrator take?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Add the Dataverse connector to the Business group and add all other connectors to the Blocked group.. To allow only Dataverse, the administrator should place the Dataverse connector in the Business group and add all other connectors to the Blocked group. This ensures that any app attempting to use a non-Dataverse connector will be blocked. However, this approach requires ongoing maintenance because newly introduced connectors are not automatically blocked; the administrator must update the policy as new connectors become available.

Answer

Add the Dataverse connector to the Non-Business group and leave all other connectors unassigned.

Answer

Create a custom connector that wraps Dataverse and add it to the Business group, then block all other connectors.

Answer

Add the Dataverse connector to the Business group and leave all other connectors unassigned.

Question 2

A Power Platform administrator is preparing a new production environment for a department that will use model-driven apps backed by Dataverse. The administrator must configure the environment so that only licensed department members can access it and so that data storage consumption is monitored. Which two actions should the administrator perform? (Choose two.)

Accepted Answer

Assign the department's users to the environment with appropriate security roles, such as Environment Maker for builders and Basic User for consumers. Controlling access requires assigning department users to the environment with suitable security roles, which limits entry to licensed members and applies least privilege. Monitoring Dataverse storage consumption is achieved by enabling the environment as a managed environment, which surfaces usage insights and capacity reporting. DLP policies, environment type changes, and AI Builder credits address connector governance, lifecycle, and AI capacity respectively, not the stated access and monitoring needs.

Answer

Convert the environment to a Sandbox environment after users begin working in it

Answer

Create a Data Loss Prevention policy that blocks all connectors except the Dataverse connector

Answer

Purchase additional AI Builder credits and assign them to the environment

Question 3

A Power Platform administrator needs to ensure that when a maker creates a canvas app in a specific environment, the app can only connect to Microsoft Dataverse and cannot use any other data sources. The administrator has created a DLP policy and assigned it to the environment. Which action should the administrator take?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Delegated Admin. The Delegated Admin role is designed for scenarios where an administrator wants to delegate environment creation and management without granting full tenant-level control. It allows the user to create environments and assign Environment Admin roles to others. Power Platform Administrator is too broad, while Environment Admin and Environment Creator are too narrow to satisfy both creation and management delegation.

Answer

Power Platform Administrator

Answer

Environment Creator

Answer

Environment Admin

Question 4

A company has a Power Platform environment that is used for testing. The environment was created with a trial expiration date. The administrator wants to convert this trial environment to a production environment to prevent it from being deleted. What should the administrator do?

Accepted Answer

In the Power Platform admin center, select the environment, and then select 'Convert to production' from the environment's actions menu.. Trial environments can be converted to production directly from the Power Platform admin center. The environment's actions menu includes a 'Convert to production' option, which changes the type and removes the expiration. This is the correct and supported method to retain the environment and its data without recreation.

Answer

Create a new production environment and then use the Power Platform admin center to restore the trial environment's data into the new environment.

Answer

Purchase at least one Power Apps per user license and assign it to the environment, which automatically converts the trial to production.

Answer

In the Power Platform admin center, select the environment, and change the environment type from Trial to Production.

Question 5

A Power Platform administrator at Adventure Works needs to ensure that whenever a new environment is created in the tenant, it is automatically assigned to a specific Microsoft Entra security group and inherits a baseline set of data policies. Which capability should the administrator use?

Accepted Answer

Environment groups in the Power Platform admin center.. Environment groups are the native Power Platform feature that associates environments with a security group and applies shared rules, including data policy inheritance, so new environments can be automatically governed. Administrative units, tenant isolation, and custom flows address different problems or serve as manual workarounds. Using the built-in grouping mechanism reduces per-environment administrative effort and enforces the baseline consistently.

Answer

Microsoft Entra administrative units for Power Platform.

Answer

Tenant isolation settings in the Power Platform admin center.

Answer

A Power Automate cloud flow that triggers on environment creation and calls the admin connector.

Question 6

An organization uses a single production environment for all business units. The administrator needs to give a new team of makers the ability to build canvas apps and cloud flows in that environment while preventing them from accessing data in other business units' tables. Which approach best meets this requirement?

Accepted Answer

Assign the Environment Maker role to the team and configure table-level security roles that grant access only to the relevant tables. Building canvas apps and flows requires the Environment Maker role, while data access in Dataverse is governed separately by security roles that grant privileges on specific tables and records. Assigning Environment Maker plus narrowly scoped table-level security roles lets the team create solutions without exposing other business units' data, all within the single production environment.

Answer

Create a separate environment for the team and move all business unit data into it

Answer

Assign the Environment Maker role and set the environment's security group to include the team

Answer

Assign the System Administrator role to the team so they can build anything they need

Question 7

A Power Platform administrator is setting up a new environment for a development team. The team requires that all makers in the environment can create and share apps, but the administrator wants to limit the ability to create new environments. Which two actions should the administrator take? (Choose two.)

Accepted Answer

Assign the development team users the Environment Maker security role in the new environment.. To allow makers to create and share apps, they need the Environment Maker role in the environment. To limit environment creation, the tenant-level setting 'Who can create environments' should be set to 'Only specific admins'. This combination grants the necessary permissions for app development while restricting the creation of new environments to administrators only. Other options either grant excessive privileges or do not address environment creation.

Answer

Create a data loss prevention (DLP) policy that blocks the 'Power Platform for Admins' connector for the development team.

Answer

In the Power Platform admin center, set the 'Environment creation' setting to 'Disabled' for all users.

Answer

Assign the development team users the System Administrator security role in the new environment.

Question 8

A Power Platform administrator is configuring a new environment for a department. The administrator needs to ensure that the environment is available only to members of a specific Microsoft Entra ID security group and that the environment is created in the Europe region. Which two actions should the administrator perform? (Choose two.)

Accepted Answer

Create the environment in the Europe region by selecting it during environment creation.. To restrict environment access to a specific security group and host data in Europe, the administrator must assign the security group to the environment and select the Europe region during environment creation. These actions ensure that only authorized users can access the environment and that data resides in the desired geography. Other options either grant excessive permissions or describe non-existent features.

Answer

Configure the environment to use a custom domain name.

Answer

Assign the Environment Admin role to the security group.

Answer

Enable the 'Restrict access to security group' setting in the environment's security settings.

Question 9

A Power Platform administrator for Tailwind Traders is preparing a release process for solutions. The administrator must ensure that changes made to a solution in the production environment cannot be edited in place, and that the solution can be cleanly removed if the release is rolled back. Which two actions should the administrator take? (Choose two.)

Accepted Answer

Use a deployment pipeline to promote the managed solution from development to production.. Managed solutions are the mechanism that prevents in-place editing in the target environment and supports clean uninstall for rollback, and deployment pipelines provide the automated, controlled promotion path from development to production. Unmanaged imports, connector-blocking policies, and environment backups do not enforce immutability or clean removal, so the managed packaging plus pipeline promotion is the correct pair.

Answer

Create a backup of the production environment before importing the solution.

Answer

Configure a data loss prevention policy that blocks all connectors in production.

Answer

Export the solution as an unmanaged solution and import it into production.

Question 10

A Power Platform administrator needs to ensure that when a maker creates a canvas app in a specific environment, the app can only connect to Microsoft Dataverse and cannot use any other data sources. The administrator has created a DLP policy and assigned it to the environment. Which action should the administrator take?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use the Power Platform admin center to create a new environment from a template that includes Dataverse, sample apps, and connectors, then assign the team as Environment Makers.. Creating an environment from a template in the Power Platform admin center automatically provisions Dataverse, sample apps, and connectors. This gives the team a ready-to-use environment. Assigning them as Environment Makers ensures they have the permissions to build apps and flows without needing further admin intervention. This is the most efficient and centralized approach.

Answer

Instruct each team member to create their own personal environment using Power Apps Maker Portal and share their apps with the team.

Answer

Provision a new environment using the 'Sandbox' environment type and then manually add the Dataverse database and sample apps.

Answer

Create a new environment using the 'Developer' environment type and assign the team as Environment Makers.

Question 11

A Power Platform administrator for Contoso needs to ensure that all new Power Automate cloud flows created in a specific environment can only use connectors that are approved by the security team. The organization has a strict policy that prohibits the use of any unapproved connectors. What should the administrator configure?

Accepted Answer

Use the Power Platform admin center to set the environment's connector policy to 'Allow only approved connectors' and select the approved connectors.. The requirement is to enforce that only approved connectors are used in a specific environment. The Power Platform admin center provides a connector policy setting that can restrict connectors to an approved list. This is the only option that provides technical enforcement at the environment level, ensuring that unapproved connectors cannot be used in new flows.

Answer

Create a data loss prevention (DLP) policy that classifies all connectors as either Business or Non-Business, and block the Non-Business group.

Answer

Create a custom connector that wraps all approved connectors and instruct users to use only that custom connector.

Answer

Assign the Environment Maker role to users and instruct them to only use approved connectors.

Question 12

A Power Platform administrator is configuring a new environment for a department that will use Microsoft Dataverse. The administrator needs to ensure that when the environment is created, it is linked to a security group to control access, and that the environment is created in a specific region to meet data residency requirements. Which two actions should the administrator perform? (Choose two.)

Accepted Answer

In the Power Platform admin center, when creating the environment, select the appropriate region under 'Region' and assign a security group under 'Security group'.. When creating an environment, the Power Platform admin center allows selecting a region and assigning a security group. These settings can also be specified using PowerShell cmdlets such as New-AdminPowerAppEnvironment with -Region and -SecurityGroup parameters. Both methods enable the administrator to meet data residency and access control requirements. Changing the region later is not possible, so it must be set at creation.

Answer

After creating the environment, use the Microsoft 365 admin center to assign a security group to the environment.

Answer

Use the Power Platform admin center to create the environment, and then use the 'Edit' option to change the region and add a security group.

Answer

Create the environment without a security group, then later edit the environment properties to add a security group and change the region.

Question 13

A Power Platform administrator is setting up a new environment for a department. The department requires that all data stored in the environment be hosted in the European Union to comply with GDPR. The administrator creates the environment in the Europe region. However, a developer later reports that some data is being stored in the United States. What is the most likely cause?

Accepted Answer

The developer is using a connector that routes data through a global service endpoint located in the United States.. The environment region controls where data is stored for Power Platform services, but some connectors may process data in other regions. The most likely cause is that the developer used a connector that routes data through a global endpoint, such as the Office 365 Outlook connector, which may process data in the US. This is a known consideration for data residency compliance.

Answer

The environment was created in the Europe region, but the default language was set to English (United States), which forces data to be stored in the US.

Answer

The administrator did not purchase a data residency add-on, so data is automatically stored in the nearest Microsoft datacenter, which is in the US.

Answer

The environment's region setting only applies to the default Power Apps and Power Automate endpoints, but not to Microsoft Dataverse.

Question 14

A Power Platform administrator needs to ensure that when a maker creates a canvas app in a specific environment, the app can only connect to Microsoft Dataverse and cannot use any other data sources. The administrator has created a DLP policy and assigned it to the environment. Which action should the administrator take?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Use the Power Platform admin center to download the AI Builder credit usage report, then create a Power Automate flow that triggers when the report shows usage above 80%.. AI Builder credit usage can be monitored through reports available in the Power Platform admin center. By downloading the report and using Power Automate to periodically check the data, administrators can create custom alerts when usage exceeds a threshold. This approach leverages existing reporting and automation capabilities. Native alerting is not available, so a custom solution is necessary.

Answer

In the Power Platform admin center, go to the Capacity page, select the AI Builder tab, and configure alerts for credit consumption.

Answer

In the Microsoft 365 admin center, set up a service health alert for AI Builder credit usage.

Answer

Configure a data loss prevention policy that blocks AI Builder when credits reach 80% of capacity.

Question 15

A Power Platform administrator needs to ensure that when a maker creates a canvas app in a specific environment, the app can only connect to Microsoft Dataverse and cannot use any other data sources. The administrator has created a DLP policy and assigned it to the environment. Which action should the administrator take?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Delegated Admin. The Delegated Admin role is intended for users who need to manage environments but not the entire tenant. It provides the necessary permissions to create and manage environments while limiting broader administrative access. The other roles either grant too much access or do not include environment creation capabilities.

Answer

Power Platform Administrator

Answer

Environment Admin

Answer

Environment Maker