PL-900 Manage the Microsoft Power Platform environment Practice Test 9 — 15 Questions

Question 1

A user reports that a Power Automate flow stopped working after a co-owner modified the flow. The user is the original owner. What is the most likely reason for the failure?

Accepted Answer

The co-owner changed the connection references used by the flow. If the co-owner changed the connection references, the flow may lose access to required data sources or services, causing failure. Option A is wrong because flow runs do not require manual approval unless specifically configured. Option B is wrong because the user remains the owner and retains ownership; co-owner modifications do not transfer ownership. Option D is wrong because a co-owner cannot delete the original owner's permissions; the original owner retains full control.

Answer

The flow requires manual approval to run

Answer

The user lost ownership of the flow

Answer

The co-owner deleted the user's permissions

Question 2

A company uses Power Virtual Agents (now Copilot Studio) to build a customer service chatbot. The bot needs to securely escalate to a live agent when it cannot resolve the issue. The escalation must pass the conversation context to the agent. What should the bot use?

Accepted Answer

Transfer conversation action. The 'Transfer conversation' action in Copilot Studio is designed to escalate the conversation to a live agent while passing the full conversation context, making it the correct choice for secure escalation with context.

Answer

HTTP request to a webhook

Answer

Power Automate flow trigger

Answer

Custom connector for the live agent system

Question 3

A non-profit organization uses Power Platform to manage donor information. The organization wants to ensure that only users in the ‘Donor Managers’ security group can edit records in the ‘Donations’ table. What is the best way to achieve this?

Accepted Answer

Assign a custom security role that grants edit permissions on the Donations table to the security group. The most direct and secure method to control record-level permissions in Dataverse is to assign a custom security role with specific edit privileges on the Donations table to the 'Donor Managers' security group. This leverages Dataverse role-based security, which governs CRUD operations at the table level, ensuring that only members of that group can edit records without affecting other tables or users.

Answer

Create a DLP policy to restrict edit connectors

Answer

Use a business process flow to require approval

Answer

Share the canvas app only with the security group

Question 4

A company uses Power BI dashboards to monitor real-time production metrics. The dashboards use DirectQuery to a SQL Server database. Users report that the dashboards are slow during peak hours. What is the most effective first step to improve performance?

Accepted Answer

Optimize the SQL queries used in the dataset. Optimizing the SQL queries used in the dataset directly addresses the root cause of slow DirectQuery performance: inefficient queries sent to the SQL Server. DirectQuery translates Power BI visuals into SQL queries executed in real time on the source database, so poorly written or unindexed queries create bottlenecks during peak loads. Improving query efficiency (e.g., adding indexes, reducing joins, filtering early) reduces server load and response time without requiring architectural changes.

Answer

Create aggregations in the dataset

Answer

Increase the Power BI Premium capacity

Answer

Switch the dataset to Import mode

Question 5

A financial services company uses Power Automate to process loan applications. The flow uses the ‘When a new email arrives’ trigger from a shared mailbox. The flow recently stopped working after an admin changed the mailbox permissions. What is the most likely cause?

Accepted Answer

The mailbox connection lost permissions to access the mailbox. The flow uses the 'When a new email arrives' trigger, which relies on a connection to the shared mailbox. When an admin changes mailbox permissions, the existing connection loses its authorization to access the mailbox, causing the trigger to fail. This is the most direct cause because the connection object in Power Automate must have valid permissions to read emails from the specified mailbox.

Answer

The mailbox exceeded its storage limit

Answer

The flow owner's Power Automate license was deleted

Answer

The flow was transferred to another owner

Question 6

Which TWO actions are necessary to enable AI Builder in a Power Apps environment? (Select 2)

Accepted Answer

Purchase AI Builder credits. AI Builder requires purchasing credits or an add-on license. Option D is correct because AI Builder must be explicitly enabled in the Power Platform environment. Option A is incorrect because AI Builder uses standard Power Platform connectors; no special connector installation is needed. Option C is incorrect because data loss prevention (DLP) policies are not a prerequisite for enabling AI Builder; they are configured separately. Option E is incorrect because a Power Automate license is not required; AI Builder is a standalone add-on.

Answer

Install AI Builder connectors

Answer

Create a DLP policy that allows AI Builder

Answer

Assign a Power Automate license to users

Question 7

Which THREE features are available in Power Platform managed environments? (Select 3)

Accepted Answer

Weekly analytics digests. The three features available in Power Platform managed environments are weekly analytics digests (Option B), solution checker integration (Option C), and sharing limits for canvas apps (Option D). Data loss prevention (DLP) policies (Option A) and data policies enforcement (Option E) are not exclusive to managed environments; DLP policies are available in all environments, and data policies enforcement is not a specific feature of managed environments.

Answer

Data loss prevention (DLP) policies

Answer

Data policies enforcement

Question 8

Which TWO are valid ways to distribute a Power App to end users? (Select 2)

Accepted Answer

Add the app to Microsoft Teams. Power Apps can be added directly to Microsoft Teams as a tab or personal app, allowing end users to access the app within the Teams interface without leaving the collaboration environment. This leverages the Teams integration capabilities of Power Apps, which uses the Teams manifest and the Power Apps app for Teams to provide seamless access.

Answer

Email the app as an attachment

Answer

Export the app and send it as a .msapp file

Answer

Publish the app to Microsoft AppSource

Question 9

Refer to the exhibit.

{
  "name": "Environment Usage Report",
  "type": "Power BI report",
  "dataset": {
    "name": "Power Platform Admin View",
    "tables": [
      {
        "name": "Environments",
        "columns": [
          { "name": "EnvironmentName", "dataType": "string" },
          { "name": "TotalActiveUsers", "dataType": "int" },
          { "name": "TotalAppUsage", "dataType": "int" },
          { "name": "TotalFlowRuns", "dataType": "int" }
        ]
      }
    ]
  }
}

An admin runs a report to see total active users per environment. The report shows zero active users for a production environment that is actively used. What is the most likely reason?

Accepted Answer

The environment is not included in the Power Platform Admin View dataset. The Power Platform Admin View dataset may not include all environments, especially if the production environment is not designated as an admin-managed environment or if it is a default environment not added to the Admin View. This can result in zero active users reported. Option B is incorrect because the report uses a Power BI report with a dataset, not a canvas app connector. Option C is incorrect because the TotalActiveUsers column is present in the dataset as shown in the exhibit. Option D is incorrect because the admin would typically have permission to view the dataset if they can run the report, and the issue is about data inclusion, not permissions.

Answer

The report uses a canvas app connector that is blocked

Answer

The TotalActiveUsers column is missing from the dataset

Answer

The admin does not have permission to view the dataset

Question 10

Refer to the exhibit.

Get-MgDirectoryRole | Where-Object {$_.DisplayName -eq "Power Platform Administrator"} | Select-Object Id

An admin runs this Microsoft Graph PowerShell command and gets no output. What does this indicate?

Accepted Answer

The Power Platform Administrator role is not activated in the tenant. The command filters for a role with DisplayName exactly 'Power Platform Administrator', but the actual role name is 'Power Platform Administrator' (case-sensitive). If the command returns no output, the role may not be activated in the tenant. Option A is wrong because no output means no matching role found, not that the admin lacks permissions. Option C is wrong because no output does not indicate no roles exist; it indicates no matching role. Option D is wrong because the command is valid PowerShell.

Answer

The admin does not have permission to run the command

Answer

There are no directory roles in the tenant

Answer

The command syntax is incorrect

Question 11

Refer to the exhibit.

{
  "$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
  "contentVersion": "1.0.0.0",
  "resources": [
    {
      "type": "Microsoft.PowerPlatform/enterprisePolicies",
      "apiVersion": "2021-01-01",
      "name": "myDlpPolicy",
      "location": "eastus",
      "properties": {
        "definition": {
          "$schema": "https://schema.management.azure.com/providers/Microsoft.PowerPlatform/policyDefinitions/2021-01-01/schema.json#",
          "rules": [
            {
              "name": "Block SharePoint",
              "action": "Block",
              "connectors": [
                "shared_sharepointonline"
              ]
            }
          ]
        }
      }
    }
  ]
}

An admin deploys this ARM template to create a DLP policy. After deployment, users report they can still use the SharePoint connector in Power Automate. What is the most likely reason?

Accepted Answer

The resource type should be 'Microsoft.PowerPlatform/dlpPolicies'. The resource type 'Microsoft.PowerPlatform/enterprisePolicies' is used for creating policies, but the API version and properties may not be correct for DLP policies. The correct resource type for DLP policies is 'Microsoft.PowerPlatform/dlpPolicies'. Option B is wrong because the environment might not have the policy applied, but the template attempts to create a policy. Option C is wrong because the policy is created at the tenant level, not per environment. Option D is wrong because the policy name is set correctly.

Answer

The policy was not applied to the environment where users are working

Answer

The policy name does not match the connector name

Answer

The policy is applied at the tenant level and does not affect individual environments

Question 12

A company is deploying Microsoft Power Platform to multiple departments. The security team requires that all environment creation be restricted to a specific group of administrators. Which action should the Power Platform administrator take?

Accepted Answer

Create a security group in Microsoft Entra ID that includes the allowed administrators.. To restrict environment creation to a specific group of administrators, the first step is to create a security group in Microsoft Entra ID that includes the allowed administrators (option A). The full solution also requires configuring the environment creation restriction in the Power Platform admin center tenant settings to allow only that security group, but among the provided options, only option A is correct. Option B is incorrect because disabling environment creation for all users is too restrictive and does not allow granular control. Option C is incorrect because the CoE Starter Kit is used for governance and monitoring, not for restricting environment creation. Option D is incorrect because the Environment Admin role grants administrative permissions within an environment but does not control who can create new environments.

Answer

Disable environment creation for all users in the Power Platform admin center.

Answer

Install the CoE Starter Kit and configure environment creation policies.

Answer

Assign the Environment Admin role to the security group in the Power Platform admin center.

Question 13

A global organization has multiple geographic regions and needs to comply with data residency requirements. Each region must have its own Power Platform environment with data stored locally. What is the recommended approach to manage these environments?

Accepted Answer

Create separate environments for each region within the same tenant.. Power Platform environments are the recommended isolation boundary for data residency. Each environment can be created in a specific geographic region (e.g., Australia, Europe) within the same tenant, ensuring data is stored locally per region while maintaining a single tenant for centralized administration and licensing.

Answer

Use Microsoft Entra ID conditional access policies to enforce data location.

Answer

Create separate tenants for each region.

Answer

Create a single environment and use data policies to restrict data access by region.

Question 14

A company uses Microsoft Power Platform and wants to allow external users (guests) to access a canvas app. The app connects to a Dataverse database that contains sensitive customer information. The security team is concerned about data leakage. What should the administrator do to minimize risk?

Accepted Answer

Create a new environment specifically for external users with only the required data.. Creating a separate environment for external users allows the administrator to control exactly which Dataverse tables and data are exposed, minimizing the risk of sensitive customer information being leaked. This approach follows the principle of least privilege by isolating guest access to a sandboxed environment with only the required data, rather than granting access to the existing production environment.

Answer

Disable sharing of the app with external users.

Answer

Add external users as guests in Microsoft Entra ID and grant them access to the existing environment.

Answer

Use DLP policies to block all connectors except the canvas app.

Question 15

A Power Platform administrator receives a report that a user is unable to create a new environment. The user has a Power Apps per user license and is a member of the global admin group. What is the most likely cause?

Accepted Answer

The user does not have a Power Apps Plan 2 license or Environment Creation add-on.. Environment creation requires a Power Apps Plan 2 license or an Environment Creation add-on. Having only a Power Apps per user license is insufficient. Option A is incorrect because global admin privileges override the need for the Environment Admin role for creation. Option C is incorrect because DLP policies control data loss prevention rules, not environment creation. Option D is incorrect because capacity limits are not the most likely cause; the issue is licensing.

Answer

The user does not have the Environment Admin role.

Answer

A DLP policy is blocking environment creation.

Answer

The tenant has reached its environment capacity limit.