PL-900 Demonstrate the capabilities of Power Apps Practice Question
A company wants to give external partners a secure, branded website where they can view and update order information stored in Dataverse. Partners should sign in with their own credentials, and the company wants to control which records each partner can see. Which Power Platform capability should the company use?
⚠ Common exam trap
The trap here is assuming that sharing an internal app with guest accounts creates a proper partner portal, when external-facing sites with record-level permissions are the domain of Power Pages.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Power Pages
Power Pages provides the external-facing website capability with authentication, branding, and Dataverse table permissions needed to give partners controlled access to order data. It is the Power Platform component purpose-built for external users, unlike canvas or model-driven apps, which target internal audiences, or automation flows, which do not present a web interface.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A model-driven app with a custom site map
Why it's wrong here
Model-driven apps are built for internal users who have Dataverse security roles and licenses. They are not designed to expose data to external partners through a branded website with external authentication. While they offer strong data modeling, they do not provide the external portal capabilities required for partners to sign in and view only their own records.
- ✗
A Power Automate approval flow
Why it's wrong here
Power Automate flows automate processes and approvals but do not provide a website interface for external users to browse and update records. Partners cannot sign in to a flow or view order information through it. The requirement is for an interactive external portal, which is outside the scope of workflow automation.
- ✗
A canvas app shared with guest users
Why it's wrong here
Canvas apps are primarily intended for internal users and are shared through the Power Apps environment; granting external partners access typically requires guest accounts in the tenant. This does not provide the branded, public-facing website experience or the granular record-level access model that a partner portal needs, making it a poor fit for external collaboration.
- ✓
Power Pages
Why this is correct
Power Pages is designed to create external-facing websites that surface Dataverse data to users outside the organization. It supports authentication with external identities, branding, and table permissions that control which records each partner can access. This directly matches the requirement for a secure, branded partner portal backed by Dataverse.
Go deeper
Related to this question
About these practice questions
One of 701 original PL-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.