PL-900 Practice Question: Manage the Microsoft Power Platform environment
A Power Platform administrator is configuring a new environment for a team that will use both Power Apps and Power Automate. The administrator needs to ensure that the team can only use a specific set of connectors and that data cannot be shared between certain connectors. Which two actions should the administrator take? (Choose two.)
⚠ Common exam trap
The trap here is thinking that assigning security roles or setting region can control connector usage, when only DLP policies applied to the environment govern which connectors can be used together.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Apply the DLP policy to the environment so that it enforces the connector restrictions for all apps and flows within it.
To restrict connector usage and prevent data sharing between certain connectors, the administrator must create a DLP policy that defines connector groups and blocks cross-group usage, and then apply that policy to the environment. These two actions together enforce the desired governance. Other actions, such as assigning roles or setting region, do not address connector-level restrictions or data flow control.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure the environment's security group to include only the team members who need access.
Why it's wrong here
Restricting environment access to a security group controls who can use the environment, but it does not limit which connectors are available or prevent data sharing between them. This action is about user access, not connector governance, so it does not fulfill the requirement to restrict connectors and block data sharing.
- ✗
Use the Power Platform admin center to set the environment's region to a specific geography.
Why it's wrong here
Setting the environment's region determines where data is stored for residency purposes, but it has no effect on which connectors are allowed or how data can flow between them. This action is unrelated to connector restrictions and data loss prevention, so it does not meet the stated requirements.
- ✓
Apply the DLP policy to the environment so that it enforces the connector restrictions for all apps and flows within it.
Why this is correct
After creating a DLP policy, you must apply it to the specific environment to enforce the connector groupings and restrictions. Applying the policy ensures that the rules are active for all apps and flows in that environment, thereby preventing data sharing between the defined connector groups as required.
- ✓
Create a data loss prevention (DLP) policy that defines connector groups and blocks connectors from different groups from being used together.
Why this is correct
A DLP policy allows administrators to classify connectors into groups such as Business and Non-Business, and to prevent connectors from different groups from being used in the same app or flow. This directly addresses the requirement to restrict data sharing between certain connectors, ensuring that data cannot flow between them.
- ✗
Assign the Environment Maker security role to all team members.
Why it's wrong here
The Environment Maker role allows users to create resources within the environment, but it does not restrict which connectors they can use or prevent data sharing between connectors. Assigning this role would grant creation privileges without addressing the connector restriction requirement, and it could increase the risk of unauthorized connector use.
Go deeper
Related to this question
About these practice questions
This PL-900 question is part of Courseiva's 701-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.