PL-900 Practice Question: Manage the Microsoft Power Platform environment
A Power Platform administrator is configuring data loss prevention (DLP) policies. The company uses Power Automate flows that connect to Microsoft SharePoint and Microsoft Teams. The security team wants to block any flow from sending data from SharePoint to unsanctioned third-party services. Which DLP policy configuration should the administrator apply?
⚠ Common exam trap
Candidates often confuse 'Non-Business' with 'Blocked', not realizing that Non-Business connectors can still be used in flows alongside Business connectors, whereas only the Blocked category prevents data from being sent to those services entirely.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Classify SharePoint as Business and all third-party services as Blocked
DLP policies in Power Platform allow administrators to classify connectors into Business, Non-Business, and Blocked categories. By classifying SharePoint as Business and all third-party services as Blocked, the administrator ensures that no flow can send data from SharePoint to unsanctioned third-party connectors, as blocked connectors cannot be used in any flow that also uses a Business connector. This directly enforces the security team's requirement to prevent data exfiltration to unsanctioned services.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create a policy that only applies to non-production environments
Why it's wrong here
A non-production scope leaves production flows unrestricted, so SharePoint data could still reach unsanctioned third-party connectors. Environment-scoped policies suit staged rollouts or sandbox governance, where you deliberately want different rules per environment. Blocking SharePoint-to-third-party flows requires connector classification within a policy covering every environment running those flows.
- ✓
Classify SharePoint as Business and all third-party services as Blocked
Why this is correct
Classifying SharePoint as Business and third-party services as Blocked satisfies the stem's constraint: DLP connector classification prevents cross-group data movement. Power Automate blocks any flow combining a Business connector with a Blocked connector, so SharePoint data cannot reach unsanctioned services. Blocked connectors are excluded entirely, enforcing the security team's requirement.
- ✗
Classify SharePoint as Business and all third-party services as Non-Business
Why it's wrong here
Classifying SharePoint as Business and third-party services as Non-Business does block cross-group flow connections, but the stem requires only blocking outbound SharePoint-to-third-party transfers, not all connectors. This configuration is the right choice when the organisation wants a strict boundary preventing any data movement between business and non-business groups in either direction.
- ✗
Classify all connectors as Blocked
Why it's wrong here
Blocking every connector also blocks SharePoint and Teams, halting the sanctioned flows the company relies on. DLP policies work by classifying connectors into Business, Non-Business and Blocked groups, then restricting combinations across groups. Blocking all connectors would suit an environment with no approved cloud services at all.
Go deeper
Related to this question
About these practice questions
This PL-900 question is part of Courseiva's 701-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.