PL-900 Practice Question: Manage the Microsoft Power Platform environment
A company is deploying Microsoft Power Platform to multiple departments. The security team requires that all environment creation be restricted to a specific group of administrators. Which action should the Power Platform administrator take?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a security group in Microsoft Entra ID that includes the allowed administrators.
To restrict environment creation to a specific group of administrators, the first step is to create a security group in Microsoft Entra ID that includes the allowed administrators (option A). The full solution also requires configuring the environment creation restriction in the Power Platform admin center tenant settings to allow only that security group, but among the provided options, only option A is correct. Option B is incorrect because disabling environment creation for all users is too restrictive and does not allow granular control. Option C is incorrect because the CoE Starter Kit is used for governance and monitoring, not for restricting environment creation. Option D is incorrect because the Environment Admin role grants administrative permissions within an environment but does not control who can create new environments.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Create a security group in Microsoft Entra ID that includes the allowed administrators.
Why this is correct
This is correct because creating a security group and restricting environment creation to that group allows granular control.
- ✗
Disable environment creation for all users in the Power Platform admin center.
Why it's wrong here
This is incorrect because disabling environment creation for all users is too restrictive and does not allow granular control.
- ✗
Install the CoE Starter Kit and configure environment creation policies.
Why it's wrong here
This is incorrect because the CoE Starter Kit is used for governance and monitoring, not for restricting environment creation.
- ✗
Assign the Environment Admin role to the security group in the Power Platform admin center.
Why it's wrong here
This is incorrect because assigning the Environment Admin role does not control who can create new environments.
Go deeper
Related to this question
About these practice questions
One of 904 original PL-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.