Courseiva
Manage the Microsoft Power Platform environmenthardMultiple ChoiceObjective-mapped

PL-900 Practice Question: Manage the Microsoft Power Platform environment

A Power Platform administrator is configuring data loss prevention (DLP) policies. The company uses Power Automate flows that connect to Microsoft SharePoint and Microsoft Teams. The security team wants to block any flow from sending data from SharePoint to unsanctioned third-party services. Which DLP policy configuration should the administrator apply?

⚠ Common exam trap

Candidates often confuse 'Non-Business' with 'Blocked', not realizing that Non-Business connectors can still be used in flows alongside Business connectors, whereas only the Blocked category prevents data from being sent to those services entirely.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Classify SharePoint as Business and all third-party services as Blocked

DLP policies in Power Platform allow administrators to classify connectors into Business, Non-Business, and Blocked categories. By classifying SharePoint as Business and all third-party services as Blocked, the administrator ensures that no flow can send data from SharePoint to unsanctioned third-party connectors, as blocked connectors cannot be used in any flow that also uses a Business connector. This directly enforces the security team's requirement to prevent data exfiltration to unsanctioned services.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Create a policy that only applies to non-production environments

    Why it's wrong here

    This does not enforce the restriction in production.

  • Classify SharePoint as Business and all third-party services as Blocked

    Why this is correct

    Blocked group prevents any connection to those services.

  • Classify SharePoint as Business and all third-party services as Non-Business

    Why it's wrong here

    Non-Business group does not prevent data flow.

  • Classify all connectors as Blocked

    Why it's wrong here

    This would block all connectors, including allowed ones.

About these practice questions

This PL-900 question is part of Courseiva's 904-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.