hardMultiple ChoiceObjective-mapped
PL-900 Practice Question: A healthcare organization uses Power Pages to…
A healthcare organization uses Power Pages to provide a patient portal where patients can view their medical records, schedule appointments, and communicate with their care team. The portal uses Dataverse with Microsoft Entra ID (formerly Azure AD) as the identity provider. Due to regulatory requirements, the portal must ensure that session timeouts occur after 15 minutes of inactivity, and any unsaved data in forms should be preserved for up to 24 hours. Additionally, the solution must log all user activity for auditing. You need to configure these requirements in Power Pages. What should you do?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
In the Power Pages admin center, configure 'Session Timeout' to 15 minutes, enable 'Save Progress' on forms with 24-hour retention, and enable 'Audit logging' to capture user activity.
Power Pages provides built-in settings to meet all three requirements directly from the Power Pages admin center. 'Session Timeout' can be set to 15 minutes to enforce inactivity logout. 'Save Progress' on forms with a 24-hour retention period preserves unsaved data. 'Audit logging' captures user activity and logs it to Dataverse. Option A is incorrect because Azure Monitor is not integrated into Power Pages natively and modifying IIS settings is not applicable in the Power Pages managed environment. Option C is incorrect because Azure AD Conditional Access policies control authentication but do not manage form data preservation or session timeout within the portal. Option D is incorrect because developing custom JavaScript and Power Automate flows is overly complex and not necessary when built-in settings are available.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use Azure Monitor to track user activity and configure the web application session timeout in the IIS settings via the portal's hosting environment.
Why it's wrong here
Azure Monitor is not directly integrated with Power Pages for user activity logging; the portal's admin center provides audit logging.
- ✓
In the Power Pages admin center, configure 'Session Timeout' to 15 minutes, enable 'Save Progress' on forms with 24-hour retention, and enable 'Audit logging' to capture user activity.
Why this is correct
These are native Power Pages features that meet all requirements.
- ✗
Configure session timeout using Azure AD Conditional Access policies and use Power Automate to save form data periodically to Dataverse.
Why it's wrong here
Azure AD Conditional Access can enforce session timeouts but does not preserve form data natively.
- ✗
Develop custom JavaScript to track inactivity and trigger a Power Automate flow that saves form data to a Dataverse table.
Why it's wrong here
This is complex and not the recommended approach; built-in features exist.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PL-900 question from scratch — 904 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.