PL-900 Practice Question: Manage the Microsoft Power Platform environment
A Power Platform administrator needs to ensure that all Power Automate cloud flows in a specific environment can only use connectors approved by the security team, and that flows combining a blocked connector with any other connector are prevented from running. Which mechanism should the administrator use?
⚠ Common exam trap
The trap here is assuming that connector consent settings or managed environment sharing restrictions can block connector combinations, when only Data Loss Prevention policies define Business, Non-Business, and Blocked connector groups.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A Data Loss Prevention policy that classifies connectors as Business, Non-Business, or Blocked
Data Loss Prevention policies are the designated mechanism for connector governance in Power Platform. By grouping connectors into Business, Non-Business, and Blocked categories, the admin can block a specific connector entirely and prevent flows from combining Business and Non-Business connectors. Security roles, connector consent, and managed environment solution checker settings address permissions, consent, and quality respectively, not connector combination rules.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Managed environment settings that enforce the solution checker before flows can be shared
Why it's wrong here
Managed environments can enforce solution checker rules on solutions, which validate app and flow quality, but solution checker does not govern connector usage or block connector combinations. Sharing restrictions in managed environments limit who resources are shared with, not which connectors flows may call. This setting therefore does not satisfy the connector governance requirement.
- ✗
Connector consent settings in the Power Platform admin center that require admin approval for new connectors
Why it's wrong here
Connector consent settings control whether makers can use a connector that has not yet been approved for the tenant, prompting an admin approval workflow. While useful, this governs first-time consent rather than preventing disallowed connector combinations inside flows. It does not block a flow that mixes a restricted connector with others after consent is granted, so it does not meet the requirement.
- ✗
Environment security roles that deny the Flow creation privilege to all makers
Why it's wrong here
Denying the Flow creation privilege blocks users from creating any flows at all, which is broader than the requirement. The security team wants to allow flows that use approved connectors while blocking combinations involving a specific connector. Security roles control who can perform actions, not which connectors flows may use, so this approach fails the scenario.
- ✓
A Data Loss Prevention policy that classifies connectors as Business, Non-Business, or Blocked
Why this is correct
Data Loss Prevention policies in the Power Platform admin center classify connectors into Business, Non-Business, and Blocked groups. A connector placed in the Blocked group cannot be used in any flow, and mixing Business and Non-Business connectors in a single flow is prevented. This precisely enforces the requirement of restricting flows to approved connectors and stopping disallowed combinations.
Go deeper
Related to this question
About these practice questions
One of 701 original PL-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.