Knowledge + Practice

Microsoft Power Platform Fundamentals PL-900 (PL-900) — Questions 526–600

904 questions total · 13pages · All types, answers revealed

Take a mock exam Exam hub

Page 8 of 13

526

Multi-Selectmedium

Which TWO benefits does Power Platform offer to organizations? (Choose two.)

Select 2 answers

A.Provides seamless integration with Microsoft 365 and Azure

B.Enables citizen developers to build apps with minimal coding

C.Is free for all users with an Office 365 license

D.Eliminates the need for any custom development

AnswersA, B

Power Platform connectors allow integration with many Microsoft services.

Why this answer

Power Platform is designed to integrate deeply with Microsoft 365 and Azure, allowing organizations to extend their existing investments. For example, Power Apps can use Microsoft 365 data (like SharePoint lists or Outlook contacts) and Azure services (such as Azure Functions or Logic Apps) as connectors, enabling seamless workflows and data sharing without custom middleware.

Exam trap

The trap here is that candidates assume Power Platform is entirely free with Office 365 or that it completely replaces custom development, but Microsoft explicitly requires additional licensing for premium features and encourages hybrid solutions where custom code handles edge cases.

Full explanation →

527

MCQeasy

A company wants to create a dashboard that shows real-time sales data from their ERP system and allows managers to drill down into individual transactions. Which Power Platform component should they use?

A.Power BI

B.Power Apps

C.Power Automate

D.AI Builder

AnswerA

Power BI provides interactive dashboards with drill-down features.

Why this answer

Power BI is the correct choice because it is designed for data visualization and business intelligence, enabling real-time dashboards with drill-through capabilities. It can connect directly to an ERP system via connectors or DirectQuery to display live sales data, and managers can use the drill-down feature to navigate from summary metrics to individual transaction details.

Exam trap

Microsoft often tests the misconception that Power Apps can build dashboards because it includes canvas apps with charts, but Power Apps lacks native drill-through and real-time data aggregation capabilities required for enterprise dashboards.

How to eliminate wrong answers

Option B (Power Apps) is wrong because Power Apps is a low-code platform for building custom applications, not for creating dashboards with real-time data visualization and drill-down analytics. Option C (Power Automate) is wrong because Power Automate focuses on workflow automation and process orchestration, not on interactive data visualization or dashboard creation. Option D (AI Builder) is wrong because AI Builder provides prebuilt AI models for tasks like form processing or prediction, not for building dashboards or drilling into transactional data.

Full explanation →

528

MCQmedium

A company is deploying Power Virtual Agents (now Copilot Studio) chatbots across multiple departments. Each department needs its own environment to manage chatbots independently. However, the company wants to share a common set of entities and workflows across all environments. Which approach should the administrator take?

A.Create a single environment for all departments and use security roles to isolate chatbots

B.Use Power Apps component library to share components across environments

C.Create a shared environment for common components and link each department environment to it

D.Create a separate environment per department and deploy managed solutions containing the common components

AnswerD

Managed solutions enable standardized deployment across environments.

Why this answer

Managed solutions allow you to package common components (entities, workflows) and deploy them to multiple environments, ensuring consistency while maintaining departmental isolation. Each department gets its own environment for independent chatbot management, and the shared components are installed via managed solutions that cannot be modified, preserving the common baseline.

Exam trap

The trap here is that candidates confuse environment-level isolation with component sharing, assuming a single environment with security roles or a linked environment is sufficient, when the correct pattern requires deploying managed solutions to each environment.

How to eliminate wrong answers

Option A is wrong because using a single environment with security roles does not provide true isolation for chatbot management; security roles control data access but not component-level separation, and all chatbots would share the same entities and workflows, leading to potential conflicts. Option B is wrong because Power Apps component libraries are designed for sharing UI components (e.g., controls, screens) across canvas apps, not for deploying backend entities or workflows across environments. Option C is wrong because Power Platform does not support linking environments to a shared environment for common components; the correct mechanism is to use managed solutions to deploy components into each environment, not a runtime link.

Full explanation →

529

MCQmedium

A company wants to build a custom app that allows field technicians to view and update work orders on their mobile devices, with data stored in Dataverse. Which approach minimizes development effort?

A.Create a canvas app in Power Apps

B.Use Power Automate to generate a mobile app

C.Build a custom iOS app using Swift and Xcode

D.Create a model-driven app in Power Apps

AnswerA

Canvas apps allow custom UI optimized for mobile and connect easily to Dataverse.

Why this answer

Using Power Apps to create a canvas app provides a low-code solution that can connect to Dataverse and be deployed on mobile devices quickly.

Full explanation →

530

MCQhard

A Power BI report uses a calculated column that shows [Sales Amount] * 1.1. Users notice the column shows incorrect values after a data refresh. What is the most likely cause?

A.The DAX formula was edited to multiply by 1.2 instead of 1.1

B.The dataset was refreshed in Import mode instead of DirectQuery

C.The data type of 'Sales Amount' changed from decimal to integer

D.The source column name changed from 'Sales Amount' to 'SalesAmt'

AnswerA

Changing the multiplier would produce different results.

Why this answer

If the DAX formula was edited to multiply by 1.2 instead of 1.1, the calculated column would produce values 9.09% higher than expected after the refresh. This directly explains the discrepancy users observe, as calculated columns are recomputed during data refresh based on the current formula definition.

Exam trap

The trap here is that candidates may assume a data type change or refresh mode is the cause, but the question specifically describes a consistent scaling error, which points directly to a formula change rather than structural or data source issues.

How to eliminate wrong answers

Option B is wrong because Import mode vs. DirectQuery affects how data is retrieved and queried, not the logic of a calculated column; both modes would still apply the same DAX formula. Option C is wrong because changing the data type from decimal to integer would cause truncation or rounding errors, not a consistent 10% increase discrepancy.

Option D is wrong because if the source column name changed from 'Sales Amount' to 'SalesAmt', the calculated column would break entirely with a column-not-found error, not produce incorrect values.

Full explanation →

531

Multi-Selectmedium

Which Power Platform component can be used to create and deploy a chatbot?

Select 1 answer

A.Power Automate

B.Power BI

C.Power Apps

D.Copilot Studio

E.AI Builder

AnswersD

Correct: Copilot Studio is specifically designed for creating and deploying chatbots with a no-code interface.

Why this answer

Copilot Studio (formerly Power Virtual Agents) is the dedicated Power Platform component for creating and deploying chatbots using a no-code graphical interface. It allows you to design conversational topics, trigger flows, and publish the bot to channels like Microsoft Teams or websites without writing code. AI Builder provides AI models that can be integrated into a chatbot solution but cannot create or deploy a standalone chatbot.

Exam trap

The trap is that candidates may mistake AI Builder for a chatbot builder because it offers AI capabilities that can enhance chatbots, but it is not a standalone chatbot creation tool.

Full explanation →

532

MCQhard

Refer to the exhibit. You have a Power Automate flow that sends an approval email and then checks if the email was sent successfully. If successful, it updates a SharePoint item status to 'Approved'. Otherwise, it sends a rejection email. However, the flow always updates the SharePoint item to 'Approved' even when the approval email fails. What is the likely issue?

A.The 'email/To' parameter is missing the recipient's email.

B.The condition expression is incorrectly formatted.

C.The flow uses 'Send an email' instead of a proper approval action.

D.The 'body' function should be 'outputs' instead.

AnswerC

The 'Send an email' action only sends an email; it does not capture the recipient's response. An approval action like 'Start and wait for an approval' is required.

Why this answer

The flow uses the 'Send an email' action, which only sends an email message; it does not implement an approval process. The 'Succeeded' status indicates the email was sent, not that the recipient approved. To create an approval, you must use the 'Start and wait for an approval' action, which pauses the flow until the recipient responds.

Options A, B, and D are incorrect because they do not address the core issue: the lack of a proper approval action.

Full explanation →

533

MCQmedium

A company has a model-driven app for project management. Project managers need to add a custom button to the ribbon that runs a Power Automate flow to send a status report. Which tool should you use to customize the ribbon? A) Power Apps Solution Explorer B) Command bar designer in the app designer C) PCF (Power Apps Component Framework) D) Ribbon Workbench tool

A.Command bar designer in the app designer

B.PCF (Power Apps Component Framework)

C.Power Apps Solution Explorer

D.Ribbon Workbench tool

AnswerA

Correct: The command bar designer in the app designer allows adding custom buttons that trigger Power Automate flows.

Why this answer

The command bar designer in the app designer allows adding custom buttons that invoke flows, offering a modern and supported method for customizing the ribbon in model-driven apps. Option B: PCF is used for building custom components, not simple button actions. Option C: Solution Explorer is for classic customizations but is not recommended for modern apps.

Option D: Ribbon Workbench is a third-party tool, not an official Microsoft tool.

Full explanation →

534

MCQeasy

Refer to the exhibit. The JSON snippet shows a Power Automate action definition. Which action is this?

A.Post a message in Microsoft Teams

B.Create a calendar event

C.Send an HTTP request

D.Send an email (Office 365 Outlook)

AnswerD

operationId 'SendEmail' and connection 'shared_office365' match.

Why this answer

The operationId 'SendEmail' and the host connection 'shared_office365' correspond to the Office 365 Outlook Send an email action. Option A is incorrect because 'Post a message in Microsoft Teams' would use a different operationId (e.g., 'PostMessage') and connection type. Option B is incorrect because 'Create a calendar event' would have operationId like 'CreateEvent' and different parameters.

Option C is incorrect because 'Send an HTTP request' would use the 'Http' connection type, not 'shared_office365'.

Full explanation →

535

MCQmedium

A company wants to create a custom app that allows field technicians to view and update work orders from their mobile devices. The app must work offline and sync data when connectivity is restored. Which Power Platform component should be used?

A.Power Apps

B.Power Automate

C.Power BI

D.Power Virtual Agents

AnswerA

Power Apps enables custom mobile apps with offline sync.

Why this answer

Power Apps is the correct component because it enables the creation of custom canvas or model-driven apps that can run on mobile devices. Power Apps supports offline capability through the use of the offline profile feature, which allows users to view and update work orders without connectivity and sync changes to the underlying Microsoft Dataverse when the connection is restored.

Exam trap

The trap here is that candidates may confuse Power Automate's ability to trigger offline workflows with the need for a full mobile app interface, overlooking that Power Apps is the only component that provides both a custom UI and built-in offline sync for Dataverse data.

How to eliminate wrong answers

Option B is wrong because Power Automate is a workflow automation tool that triggers actions based on events, but it does not provide a user interface for field technicians to view or update work orders directly. Option C is wrong because Power BI is a data visualization and analytics tool, not an app-building platform, and it lacks offline data entry and sync capabilities for work order management. Option D is wrong because Power Virtual Agents is a chatbot service for creating conversational AI, not a custom app for mobile data entry and offline sync.

Full explanation →

536

MCQmedium

A global company with offices in multiple regions wants to ensure that Power Automate flows processing sensitive customer data are only executed in specific geographic regions to comply with data residency requirements. What should the administrator configure?

A.Data loss prevention (DLP) policies

B.Audit log settings

C.Solution checker

D.Environment routing rules

AnswerA

DLP policies control data movement and connector usage.

Why this answer

Data loss prevention (DLP) policies can be applied to environments in specific geographic regions to restrict connectors and data flow, ensuring that sensitive data is processed only in allowed regions. Environment routing rules do not exist as a feature in Power Platform. Audit logs only record events, not enforce residency.

Solution checker analyzes solutions for code issues, not data residency.

Full explanation →

537

Multi-Selectmedium

A university uses Power BI to visualize student performance data. They want to allow department heads to create their own reports using the same dataset but without seeing other departments' data. Which TWO features should they implement?

Select 2 answers

A.Power BI workspace

B.Data gateway

C.Row-level security (RLS)

D.Power Automate flow

E.Power BI app

AnswersA, C

Workspaces allow department heads to create their own reports on the shared dataset.

Why this answer

Row-level security (RLS) restricts data access by user. Power BI workspaces allow organizing content. Power BI apps can distribute reports, but RLS is key for data security.

Power Automate is not needed.

Full explanation →

538

MCQmedium

An administrator configures a Data Loss Prevention (DLP) policy with the scope set to 'All environments' and places selected connectors in the 'Blocked' group. What will be the result of this policy?

A.The connectors are allowed but audited

B.The connectors are blocked only in production environments

C.The connectors are blocked in all environments

D.The connectors are blocked except for the default environment

AnswerC

Correct. The policy scope is 'All environments' and the connectors are blocked, meaning they cannot be used in any environment.

Why this answer

The DLP policy is configured with the scope set to 'All environments' and the selected connectors are in the 'Blocked' group. Therefore, these connectors are blocked in every environment, including production and non-production. Option A is incorrect because audit mode is not enabled; the connectors are blocked, not audited.

Option B is incorrect because the policy applies to all environments, not just production. Option D is incorrect because there is no exception for the default environment—the policy applies universally.

Exam trap

Candidates often confuse the scope of DLP policies. A policy applied to 'All environments' affects every environment, including the default environment. The configuration clearly sets the scope to 'All environments' and the connectors are in the 'Blocked' group.

Full explanation →

539

MCQmedium

A retail company uses Power Apps to build a mobile app for store managers to approve discount requests. The app must work offline and sync when connected. Which type of app should the developer choose?

A.Portal

B.Model-driven app

C.Canvas app

D.Power Automate

AnswerC

Canvas apps can be built to work offline with the Power Apps mobile player.

Why this answer

Canvas apps are the correct choice because they support offline capability by leveraging the Power Apps offline sync feature, which allows data to be cached locally on the device and synchronized with the data source (e.g., Dataverse or SharePoint) when connectivity is restored. This makes them ideal for mobile scenarios like store managers approving discount requests in areas with intermittent connectivity.

Exam trap

The trap here is that candidates often confuse Model-driven apps with offline capability because they see 'mobile' in the question, but Model-driven apps require a constant connection to Dataverse and do not offer built-in offline sync like Canvas apps do.

How to eliminate wrong answers

Option A is wrong because Power Apps Portals are designed for external user access via a web browser and do not natively support offline operation or mobile app deployment. Option B is wrong because Model-driven apps are primarily web-based and rely on continuous connectivity to Dataverse; while they can be used on mobile devices, they lack native offline data caching and sync capabilities without additional custom development. Option D is wrong because Power Automate is a workflow automation tool, not an app-building platform, and cannot be used to create a standalone mobile app with offline functionality.

Full explanation →

540

MCQmedium

Fabrikam, Inc. uses Power Apps to create a canvas app for expense reporting. The app is connected to a SharePoint list named Expenses. The app allows users to submit expenses, attach receipts, and view their history. The manager wants to add a feature where users can scan a receipt using the mobile app camera and automatically extract the amount and date using AI Builder. The extracted data should be populated into the form fields. The development team needs to implement this feature. Which steps should they take?

A.Use AI Builder's receipt processing model in Power Apps

B.Create a Power Automate flow that processes the image and returns the data

C.Use the Camera control to capture the image and use a custom formula to extract text

D.Integrate Microsoft Copilot Studio to handle the receipt scanning

AnswerA

AI Builder provides a ready-to-use model for receipt scanning.

Why this answer

AI Builder provides a prebuilt receipt processing model that can be directly integrated into a Power Apps canvas app. This model allows users to scan a receipt using the camera, automatically extract the amount and date, and populate those values into form fields. Option B is incorrect because while a Power Automate flow could also process the image, it is an unnecessary extra step when AI Builder can be used directly within Power Apps.

Option C is incorrect because the Camera control alone cannot extract text from an image; it requires additional processing like AI Builder. Option D is incorrect because Microsoft Copilot Studio is designed for building chatbots, not for receipt scanning and data extraction.

Exam trap

Candidates may incorrectly think that a Power Automate flow is required to process the receipt image, but AI Builder's receipt processing model can be directly added to Power Apps without additional flows.

Full explanation →

541

MCQhard

A company uses Power Automate to send approval requests. The flow is triggered when a new item is added to a SharePoint list. However, the flow fails when the item contains a large attachment. What is the most likely cause?

A.The flow is using the wrong trigger

B.The approval action is not configured for attachments

C.The SharePoint list is not properly configured for large files

D.The attachment exceeds the maximum file size allowed by Power Automate

AnswerD

Power Automate has a 100 MB limit for file-related actions.

Why this answer

Power Automate imposes a maximum file size limit for attachments processed within flows. When a SharePoint list item includes a large attachment that exceeds this limit, the flow fails during the approval action because the attachment data cannot be transmitted. This is a known constraint in Power Automate, typically around 100 MB for standard connectors, and is the most direct cause of the failure described.

Exam trap

The trap here is that candidates may confuse SharePoint's large file configuration (which supports files up to 250 GB) with Power Automate's attachment size limit, leading them to incorrectly select Option C.

How to eliminate wrong answers

Option A is wrong because the trigger (when a new item is added to a SharePoint list) is correctly configured; the issue is not with the trigger but with the attachment size during processing. Option B is wrong because the approval action does not require special configuration for attachments beyond the size limit; the failure occurs before the approval action can process the attachment. Option C is wrong because SharePoint lists can be configured to allow large files (up to 250 GB), but the failure is due to Power Automate's attachment size limit, not SharePoint's configuration.

Full explanation →

542

Multi-Selecteasy

Which TWO are examples of using AI Builder within Power Platform? (Select TWO)

Select 2 answers

A.Setting up a Power Automate trigger when a new email arrives.

B.Extracting text from scanned invoices using prebuilt models.

C.Designing a custom screen in a Power Apps canvas app.

D.Creating a Power BI dashboard to visualize sales data.

E.Identifying objects in images using a custom object detection model.

AnswersB, E

AI Builder's form processing extracts text.

Why this answer

AI Builder provides prebuilt models that can extract text and data from scanned invoices without requiring custom machine learning expertise. This capability integrates directly into Power Automate and Power Apps, enabling automated processing of invoice data within the Power Platform.

Exam trap

The trap here is that candidates confuse general Power Platform features (like triggers, screen design, or dashboards) with AI Builder's specific role of providing prebuilt and custom AI models, leading them to select options that are valid Power Platform capabilities but not AI Builder examples.

Full explanation →

543

MCQmedium

An administrator configures a Power Platform tenant-level policy with the JSON shown. What is the effect of this policy?

A.It allows only admins to manage environments

B.It restricts all users from accessing any Power Platform environment

C.It prevents data export from environments

D.It blocks all users from creating new environments

AnswerB

The policy restricts all subjects from accessing environments.

Why this answer

The JSON policy sets the 'blocked' property to true for all environments, which effectively denies all users (including admins) access to any Power Platform environment. This is a tenant-level restriction that overrides individual environment permissions, making it impossible for anyone to interact with Power Apps, Power Automate, or Power Virtual Agents within the tenant.

Exam trap

The trap here is that candidates often confuse a tenant-level access block with environment-level restrictions like data export prevention or creation limits, leading them to pick options that describe narrower policies.

How to eliminate wrong answers

Option A is wrong because the policy does not selectively allow only admins to manage environments; it blocks all users, including admins, from accessing any environment. Option C is wrong because the policy does not specifically target data export; it blocks all access, which is a broader restriction than just preventing data export. Option D is wrong because the policy does not block creation of new environments; it blocks access to existing environments, and environment creation is controlled by separate tenant settings or licensing.

Full explanation →

544

MCQmedium

A company uses Power Apps for a field service app. They notice that the app loads slowly when users access it on mobile devices. What is the most likely cause?

A.The app has too many Power Automate flows

B.The Dataverse environment is in a different region

C.The app uses Microsoft Entra ID for authentication

D.The app contains large images that are not optimized

AnswerD

Large images increase loading time, especially on mobile devices.

Why this answer

Large, unoptimized images increase the payload size that must be downloaded to the mobile device, directly impacting load times, especially over cellular networks. Power Apps loads all resources, including images, when the app starts, so oversized images cause significant delays. Optimizing images (e.g., compressing, resizing, using modern formats like WebP) reduces bandwidth usage and speeds up app loading.

Exam trap

The trap here is that candidates often confuse server-side latency (e.g., Dataverse region) with client-side resource loading, assuming any performance issue must be related to data or authentication rather than the app's static assets.

How to eliminate wrong answers

Option A is wrong because Power Automate flows run asynchronously and do not block the initial loading of a Power Apps canvas app; they are triggered by events and do not affect startup performance. Option B is wrong while a Dataverse environment in a different region can increase latency for data queries, it does not cause the app itself to load slowly on the device—app loading is primarily a client-side operation. Option C is wrong because Microsoft Entra ID authentication is a standard, lightweight token-based process that adds negligible overhead to app startup; it is not a common cause of slow loading.

Full explanation →

545

MCQmedium

Refer to the exhibit. The JSON policy shown fails to apply to the production environment. What is the most likely reason?

A.The connector IDs should include the full path with 'shared_twitter' and 'shared_facebook', which they do.

B.The action value should be 'Block' with a capital B, but the JSON uses 'Block' which is correct.

C.The JSON uses 'environment' as a key instead of 'environments'.

D.The policy name is missing a required prefix.

AnswerC

The correct key is 'environments' (plural) for the array of environment names.

Why this answer

The JSON policy uses 'environment' as a key, but the correct key in Microsoft Power Platform DLP (Data Loss Prevention) policy JSON schema is 'environments' (plural). This mismatch causes the policy to fail validation and not apply to the production environment, as the platform expects an array of environment IDs under the 'environments' key.

Exam trap

The trap here is that candidates may focus on the connector IDs or action values, which appear correct, and overlook the subtle but critical difference between 'environment' and 'environments' in the JSON key, a classic schema validation pitfall in Power Platform DLP policies.

How to eliminate wrong answers

Option A is wrong because the connector IDs in the exhibit do not include the full path with 'shared_twitter' and 'shared_facebook'; they are missing the 'shared_' prefix, which is required for connector references in Power Platform DLP policies. Option B is wrong because the action value 'Block' is correctly capitalized and valid; the issue is not with the action value but with the key name. Option D is wrong because Power Platform DLP policies do not require a specific prefix in the policy name; the name is arbitrary and does not affect policy application.

Full explanation →

546

MCQmedium

A flow fails with the error: 'GatewayTimeout'. The flow connects to an on-premises SQL Server via a data gateway. What is the most likely cause?

A.The SQL login credentials are incorrect

B.The on-premises data gateway is not running or unreachable

C.The SQL table does not exist

D.The flow trigger did not fire

AnswerB

Correct. Gateway timeout typically indicates connectivity issues to the on-premises resource.

Why this answer

The 'GatewayTimeout' error indicates that the flow successfully reached the on-premises data gateway but the gateway did not respond within the expected time frame. This typically occurs when the gateway service is not running, the machine hosting the gateway is offline, or network connectivity between the gateway and the SQL Server is broken. Incorrect credentials or missing tables would produce different errors (e.g., 'Login failed' or 'Invalid object name').

Exam trap

The trap here is that candidates confuse a 'GatewayTimeout' with authentication or data errors, assuming the issue is with credentials or the SQL object rather than the gateway's availability or network path.

How to eliminate wrong answers

Option A is wrong because incorrect SQL login credentials would result in an 'AccessDenied' or 'Login failed' error, not a timeout. Option C is wrong because a missing SQL table would produce a 'Invalid object name' or 'Table not found' error, not a timeout. Option D is wrong because if the flow trigger did not fire, the flow would not execute at all and no error would be generated.

Full explanation →

547

MCQeasy

A sales team uses a Power Automate flow that creates a contact in Dynamics 365 Sales whenever a new lead is added to a Salesforce system. The flow has been running successfully for months, but recently it started failing with an authentication error. What is the most likely cause?

A.The flow has exceeded its daily execution quota

B.The lead entity schema in Salesforce has changed

C.The flow is hitting API rate limits

D.The Salesforce connection credentials have expired

AnswerD

Expired credentials are the most common cause of authentication failures.

Why this answer

Authentication errors typically occur when the connection credentials for the connected service (Salesforce) expire or are revoked. Option A is incorrect because exceeding execution quotas would cause flow failures but not specifically authentication errors. Option B is incorrect because schema changes would cause data conversion or mapping errors, not authentication errors.

Option C is incorrect because API rate limits would produce throttling errors (e.g., HTTP 429), not authentication errors.

Full explanation →

548

MCQmedium

A non-profit organization wants to automate the process of sending thank-you emails to donors after a donation is recorded in a SharePoint list. Which Power Platform tool should they use?

A.Power Apps

B.Power Virtual Agents

C.Power Automate

D.Power BI

AnswerC

Power Automate can trigger on SharePoint list items and send emails.

Why this answer

Power Automate is the correct tool because it is designed to create automated workflows that trigger actions based on events, such as a new item being added to a SharePoint list. In this scenario, a Power Automate flow can be configured to run automatically when a donation is recorded, then send a thank-you email via an email connector (e.g., Outlook or SMTP). This directly addresses the need for process automation without manual intervention.

Exam trap

The trap here is that candidates often confuse Power Apps (which can display data and trigger flows) with Power Automate, forgetting that Power Automate is the dedicated tool for event-driven automation without requiring a custom app interface.

How to eliminate wrong answers

Option A is wrong because Power Apps is a low-code platform for building custom apps (canvas or model-driven) that require user interaction, not for automating backend workflows like sending emails. Option B is wrong because Power Virtual Agents is used to create conversational chatbots for customer service or Q&A, not for triggering automated email actions based on data changes. Option D is wrong because Power BI is a business analytics and visualization tool for creating reports and dashboards, not for executing automated processes or sending emails.

Full explanation →

549

Multi-Selecteasy

Which TWO capabilities does Power Apps provide? (Choose two.)

Select 2 answers

A.Creating Power BI dashboards

B.Scheduling automated workflows

C.Implementing business process flows

D.Building custom user interfaces with canvas apps

E.Training custom AI models

AnswersC, D

Model-driven apps support business process flows.

Why this answer

Power Apps provides capabilities for building custom user interfaces with canvas apps and implementing business process flows through model-driven apps. Option C is correct because model-driven apps include business process flows to guide users through processes. Option D is correct because canvas apps allow custom UI layouts.

Option A is incorrect because creating Power BI dashboards is a Power BI capability, not Power Apps. Option B is incorrect because scheduling automated workflows is handled by Power Automate. Option E is incorrect because training custom AI models is done with AI Builder, which is an add-on, not a core Power Apps capability.

Full explanation →

550

MCQeasy

You need to create a flow that runs every hour to check a SharePoint list for items with a 'Due Date' that has passed and sends a reminder email to the assigned person. Which type of flow should you create?

A.Desktop flow

B.Automated cloud flow

C.Business process flow

D.Scheduled cloud flow

AnswerD

Scheduled flows run on a recurring schedule.

Why this answer

A scheduled cloud flow runs on a recurring schedule and can include actions to query SharePoint and send email. Automated flows trigger on events, not time. Desktop flows are for desktop automation.

Business process flows guide users.

Full explanation →

551

MCQmedium

You are building a flow to automate the process of copying files from one SharePoint document library to another when a file is added. The flow should also send an email notification to a team. You have created the flow, but it is not triggering when a new file is added. What should you check first?

A.Verify that the flow owner has a valid Power Automate license

B.Confirm that the target library exists and is accessible

C.Ensure that the environment is not in a disabled state

D.Check the trigger configuration to ensure the correct library and site are selected

AnswerD

Incorrect trigger settings are a common cause of flow not triggering.

Why this answer

The most common issue is that the trigger is not configured correctly, e.g., incorrect library, site, or permissions. Checking the trigger settings is the first step. Licenses, environment, and service status are less likely to be the issue if other flows work.

Full explanation →

552

MCQmedium

A company wants to create a Power App that allows employees to submit expense reports with receipts. The app must be accessible from both mobile devices and desktop browsers, and must include a workflow for approval. Which combination of Power Platform components should be used?

A.Canvas app with Power Automate flow triggered by form submission.

B.Model-driven app with embedded Power Automate flow for approval.

C.Canvas app with AI Builder to process receipts and Power Automate for approval.

D.Power Pages site with a custom workflow.

AnswerA

Canvas apps can be responsive and Power Automate handles the approval process.

Why this answer

A canvas app is designed for responsive UI across mobile and desktop, making it suitable for both devices. Power Automate can be triggered from the canvas app (e.g., on form submission) to handle the approval workflow. Option B is incorrect because model-driven apps are not as flexible for custom mobile layouts.

Option C is incorrect because AI Builder is not required for receipt processing in this scenario; while it could be used, it is not necessary. Option D is incorrect because Power Pages is for external-facing websites, not internal apps with approval workflows.

Full explanation →

553

MCQmedium

An organization wants to ensure that all Power Platform solutions in production environments are tracked and changes are approved. What should the administrator implement?

A.Data Loss Prevention (DLP) policies

B.Environment security groups

C.Disable the 'Create personal productivity environments' setting

D.Managed solutions with application lifecycle management (ALM)

AnswerD

Managed solutions and ALM provide controlled deployment and change tracking.

Why this answer

Managed solutions with application lifecycle management (ALM) ensure that all Power Platform solutions in production environments are tracked and changes are approved by enforcing version control, solution layering, and controlled deployment through environments. This approach uses solution components and environment segmentation to prevent unapproved modifications and maintain an audit trail.

Exam trap

The trap here is that candidates often confuse DLP policies or security groups with change management, but only managed solutions with ALM provide the structured tracking and approval workflow required for production governance.

How to eliminate wrong answers

Option A is wrong because Data Loss Prevention (DLP) policies control data flow between connectors and prevent data exfiltration, but they do not track or approve changes to solutions. Option B is wrong because environment security groups manage user access and permissions to environments, not the tracking or approval of solution changes. Option C is wrong because disabling the 'Create personal productivity environments' setting only prevents users from creating their own environments, but does not enforce change tracking or approval for production solutions.

Full explanation →

554

Multi-Selectmedium

A company uses Microsoft Power Platform to automate business processes. They want to extend their solution by integrating with other Microsoft services. Which TWO services can be used together with Power Automate to trigger flows based on events from external systems?

Select 2 answers

A.Azure Logic Apps

B.Azure Event Grid

C.Power Virtual Agents

D.Azure DevOps

E.Azure SQL Database

AnswersA, B

Azure Logic Apps can trigger Power Automate flows via connectors.

Why this answer

Azure Logic Apps is a cloud service that provides pre-built connectors and enterprise integration capabilities, allowing Power Automate to trigger flows based on events from external systems via HTTP requests, webhooks, or service bus messages. Azure Event Grid is a fully managed event routing service that uses a publish-subscribe model, enabling Power Automate to react to events from Azure services or custom sources in near real-time. Both services extend Power Automate's event-driven triggers beyond its native connectors.

Exam trap

The trap here is that candidates may confuse Azure Logic Apps as a standalone alternative to Power Automate rather than recognizing it as a complementary service that provides advanced event triggers, or they may incorrectly assume Azure SQL Database can natively trigger flows without an intermediary event service.

Full explanation →

555

Multi-Selectmedium

Which TWO features can be used to secure data in Power BI?

Select 2 answers

A.Q&A visuals

B.Bookmarks

C.Drill-through

D.Row-level security (RLS)

E.Sensitivity labels

AnswersD, E

RLS restricts data access based on user roles.

Why this answer

Row-level security (RLS) is correct because it restricts data access at the row level based on user roles and filters, ensuring that users only see data relevant to them. This is a core Power BI security feature that controls data visibility without duplicating reports or datasets.

Exam trap

The trap here is that candidates confuse features for data exploration or navigation (Q&A, bookmarks, drill-through) with actual security controls, leading them to select options that enhance user experience rather than protect data.

Full explanation →

556

Drag & Dropmedium

Drag and drop the steps to build a model-driven app in Power Apps in the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

Why this order

Model-driven apps require first setting up Dataverse tables, then designing forms/views, then building the app with sitemap, and finally publishing with security roles.

Full explanation →

557

MCQmedium

A retail chain uses Power BI to analyze sales data from multiple stores. The data is stored in an Azure SQL Database. The company wants to give store managers access to a dashboard that shows their store's sales compared to the company average. However, store managers should not see other stores' data. The company also wants to automate the process of sending a weekly sales report to regional managers via email. The regional managers need to see aggregated data for their region. You need to implement a solution using Power Platform components. What should you do?

A.Create a Power Automate flow that runs a SQL query and sends the results via email, and give store managers access to the Azure SQL Database directly.

B.Create separate Power BI dashboards for each store and each region, and manually share them.

C.Create a Power BI dataset with RLS to filter by store, publish a dashboard, and use a scheduled Power Automate flow to email a paginated report to regional managers.

D.Use Power Apps to build a custom dashboard for each store, and use Power Automate to email reports.

AnswerC

RLS ensures store managers see only their data; Power Automate automates email delivery.

Why this answer

It uses Power BI Row-Level Security (RLS) to restrict store managers to only their store's data while allowing regional managers to see aggregated data via a paginated report. The scheduled Power Automate flow automates the weekly email delivery, meeting both security and automation requirements without manual intervention.

Exam trap

The trap here is that candidates often confuse Power BI dashboards with paginated reports, assuming a standard dashboard can be emailed directly, but Power BI requires a paginated report or a subscription feature for scheduled email delivery, and RLS is the only secure way to enforce per-store data isolation without duplicating datasets.

How to eliminate wrong answers

Option A is wrong because giving store managers direct access to the Azure SQL Database bypasses Power BI's RLS and exposes all stores' data, violating the requirement to restrict visibility. Option B is wrong because manually creating and sharing separate dashboards for each store and region is not scalable and fails to automate the weekly email report to regional managers. Option D is wrong because Power Apps custom dashboards are not designed for ad-hoc data exploration and aggregation like Power BI, and the solution does not address the need for a dashboard that compares store sales to company averages.

Full explanation →

558

MCQmedium

A Power Apps developer created a canvas app that uses a SQL Server data source. Users report that the app is slow when navigating between screens. Which design change should the developer make to improve performance?

A.Replace the SQL data source with a SharePoint list to increase delegation limits.

B.Move all data loading logic from OnVisible to the App.OnStart property.

C.Add a Timer control to preload data for the next screen.

D.Apply delegation-compatible filters on galleries to reduce data loaded from the server.

AnswerD

Delegation pushes filtering to SQL, reducing data sent to the app.

Why this answer

To improve performance in a canvas app with a SQL Server data source, the most effective design change is to apply delegation-compatible filters on galleries (option D). Delegation allows the server to process the filtering, reducing the amount of data transferred to the app and speeding up screen navigation. Option A is incorrect because replacing SQL Server with SharePoint does not inherently improve delegation; both support delegation, but the root cause is unfiltered data loads.

Option B is wrong because moving logic to App.OnStart preloads data only once, not per screen, and doesn't address data volume during navigation. Option C is incorrect because preloading with a Timer control adds complexity and does not reduce the data transferred; delegation is the proper solution.

Full explanation →

559

MCQhard

An organization has a Power Pages site that uses Microsoft Entra ID authentication. They want to add a custom registration page that collects additional information like phone number and date of birth. What is the recommended approach?

A.Use the Power Pages registration form customizer in the admin center

B.Embed a canvas app to handle registration and capture additional data

C.Modify the Microsoft Entra ID sign-up policy to include additional attributes

D.Create a custom registration page using Liquid templates and store additional data in a Dataverse table

AnswerD

Custom registration pages can be built with Liquid and can store extra data in Dataverse.

Why this answer

Power Pages allows creating custom registration pages using Liquid templates, which can collect additional attributes and store them in Dataverse tables, providing flexibility beyond standard identity provider capabilities. Option A is incorrect because the Power Pages admin center does not include a registration form customizer for adding custom fields; it only provides basic sign-in settings. Option B is incorrect because embedding a canvas app is not the standard or recommended approach for extending registration forms; custom Liquid templates are more appropriate for this scenario.

Option C is incorrect because modifying the Microsoft Entra ID sign-up policy to include additional attributes is possible but limited to Azure AD B2C and does not integrate with Dataverse storage, making it less suitable for Power Pages custom data collection.

Full explanation →

560

MCQhard

A Power Pages site must display a chart showing monthly sales data from Dataverse. The chart should update automatically when new data is added. What is the recommended approach?

A.Embed a Power BI report that connects to Dataverse.

B.Write custom JavaScript using the Chart.js library.

C.Use a list component with a chart visualization.

D.Export data to Excel and display as an image.

AnswerA

Power BI reports can auto-refresh and provide rich visualizations.

Why this answer

Power Pages can embed Power BI reports, which can refresh automatically. Using a list with a chart is limited to basic charts and may not auto-refresh. Custom JavaScript is complex and unreliable.

Excel export is static.

Full explanation →

561

MCQhard

A company wants to use Power Apps to create a mobile app for field technicians. The app must work offline and sync data when connectivity is restored. Which feature should they use?

A.Offline capability in Dataverse (mobile offline sync)

B.Power Apps portals

C.Power Apps component framework

D.Monitor tool in Power Apps

AnswerA

Dataverse enables offline data sync for mobile apps.

Why this answer

Dataverse provides offline capability for mobile apps, allowing field technicians to work without connectivity and sync data when reconnected. Option B, Power Apps portals, is for external-facing websites, not offline mobile apps. Option C, Power Apps component framework, is for building custom controls, not offline sync.

Option D, Monitor tool, is for debugging and performance monitoring, not offline functionality.

Full explanation →

562

MCQmedium

A company uses Power Apps to manage customer service cases. They want to implement a business rule that automatically sets the priority to 'High' when the customer is a VIP. Where should the business rule be defined?

A.In the SharePoint list settings

B.In a Power Automate flow

C.In the Dataverse table's business rules settings

D.In the canvas app's OnStart property

AnswerC

Business rules are defined on Dataverse tables.

Why this answer

Business rules are defined on Dataverse tables and apply to model-driven apps. Option C is correct because business rules are created in the Power Apps portal under the Dataverse table settings. Option A is incorrect because SharePoint lists do not support Power Apps business rules; they rely on SharePoint's own workflows or Power Automate.

Option B is incorrect because Power Automate is for creating automated workflows, not business rules that apply directly to table records in Dataverse. Option D is incorrect because the canvas app's OnStart property handles app initialization logic, not data validation or business rules that should enforce behavior at the data layer.

Full explanation →

563

MCQeasy

You are reviewing a Power Automate flow that uses an Office 365 Users connector. The exhibit shows a JSON definition of an action. What does this action do?

A.Updates the profile of the user who triggered the flow.

B.Deletes the user profile of the record owner.

C.Creates a new user profile in Office 365.

D.Retrieves the user profile of the record owner.

AnswerD

The operation is GetUserProfile and the User parameter is the owner.

Why this answer

The action uses the GetUserProfile operation with a User parameter taken from the trigger output. It retrieves the profile of the user who is the owner of the triggering record. Option A is incorrect because the action does not perform an update; it only retrieves data.

Option B is incorrect because the action does not delete a profile. Option C is incorrect because the action does not create a new profile. Therefore, option D is correct.

Full explanation →

564

MCQhard

Refer to the exhibit. A Power Apps administrator runs the PowerShell command shown. What is the purpose of this command?

A.To remove the user from a Power Apps environment

B.To check if the user can connect to Dataverse

C.To create a new Power Apps license for the user

D.To verify which Power Apps licenses are assigned to the user

AnswerD

The AssignedLicenses property shows license SKUs, including Power Apps.

Why this answer

The administrator is checking which licenses (including Power Apps) are assigned to the user. Option A is wrong because the command is not about app permissions. Option B is wrong because it does not create anything.

Option C is wrong because it does not check connectivity.

Full explanation →

565

MCQmedium

A Power Automate flow uses the 'HTTP' action to call an external API. The flow fails intermittently with a 429 (Too Many Requests) error. What is the best practice to handle this?

A.Switch to a different API endpoint

B.Add a 'Terminate' action to stop the flow on error

C.Configure retry policy with exponential backoff

D.Reduce the timeout of the HTTP action

AnswerC

Correct: Retry policies can handle transient failures gracefully.

Why this answer

Configuring retry policy with exponential backoff is a best practice for handling HTTP 429 errors, as it automatically retries after increasing delays, reducing server load. Option A is incorrect because using a different endpoint does not address the rate limit on the original API. Option B is incorrect because terminating the flow on error does not handle the error gracefully and may cause data loss.

Option D is incorrect because reducing timeout does not prevent or handle rate limiting; it only changes how long the flow waits for a response.

Full explanation →

566

MCQmedium

Refer to the exhibit. A canvas app has a gallery (Gallery1) with the Items property shown. The app also has a text input (TextSearchBox1) for searching accounts. Users report that when they type a search term, the gallery does not update until they click a button. What is the most likely cause?

A.The data source is not delegable, causing the filter to fail

B.The text input's OnChange event is not set to refresh the gallery

C.The gallery's DelayOutput property on the text input is set to true

D.The gallery's Items property is set to a static value instead of using TextSearchBox1.Text

AnswerD

If the Items property is not dynamic, it won't respond to text changes

Why this answer

The gallery's Items property is set to a static value instead of using TextSearchBox1.Text. In canvas apps, the Items property of a gallery must dynamically reference the text input's Text property to update as the user types. If it's set to a static collection or a value that doesn't change, the gallery won't reflect search input until it's manually refreshed (e.g., by a button).

Option D directly addresses this issue.

Full explanation →

567

MCQmedium

A company uses Power BI to create reports from Dataverse data. The administrator needs to ensure that report creators can only see data from tables they have access to in Dataverse. Which security feature should the administrator configure?

A.Set environment security group to include only report creators

B.Configure table-level permissions in Dataverse

C.Define row-level security (RLS) roles in Power BI and map them to Dataverse roles

D.Assign the 'Environment Maker' role to report creators

AnswerC

RLS restricts data visible to each user in the report.

Why this answer

Row-level security (RLS) in Power BI can be used to restrict data access at the row level, and by mapping Power BI RLS roles to Dataverse roles, report creators will only see data from tables they have access to in Dataverse. Option A is wrong because environment security group controls access to the environment, not data within reports. Option B is wrong because table-level permissions in Dataverse control access to the table itself, but when using Power BI to report on Dataverse data, the data is imported or queried; RLS in Power BI is needed to enforce row-level restrictions.

Option D is wrong because the Environment Maker role allows creating resources in the environment but does not restrict data visibility in reports.

Full explanation →

568

MCQeasy

A marketing team uses a Power Automate flow that posts a message to Microsoft Teams when a new lead is added to a SharePoint list. The flow runs successfully, but the message is not appearing in the expected Teams channel. What is the first thing you should check?

A.Verify that the Teams webhook URL is correctly pointing to the intended channel

B.Review the flow run history for failure details

C.Check if the SharePoint list trigger is properly configured

D.Ensure the flow owner has permissions to post to Teams

AnswerA

A wrong webhook URL would cause the message to go to the wrong channel or fail.

Why this answer

The most common misconfiguration is using the wrong webhook URL for the channel. Option B is incorrect because the trigger is working if the flow runs. Option C is incorrect because posting to Teams does not require special permissions beyond the connection.

Option D is incorrect because flow execution might not show detailed errors unless you open the run history.

Full explanation →

569

MCQmedium

A Power Apps canvas app uses a SharePoint list as its data source. Users report that the app is slow to load when the list contains over 10,000 items. What is the best approach to improve performance?

A.Increase the data row limit in the app settings.

B.Switch to a Microsoft Dataverse data source.

C.Reduce the number of columns in the SharePoint list.

D.Use delegation-compatible functions and filters in the app.

AnswerD

Delegation pushes processing to the data source, reducing the amount of data retrieved.

Why this answer

Delegation allows queries to be processed on the data source side, reducing the amount of data transferred and improving performance. Option D is correct because delegation-compatible functions (e.g., Filter, LookUp) ensure only relevant data is retrieved. Option A is wrong because increasing the data row limit loads more data, worsening performance.

Option B is wrong because switching to Dataverse might help but is not the best approach—it requires migration and may not always be feasible. Option C is wrong because reducing columns only marginally reduces data size, but without delegation, performance issues persist due to large row counts.

Full explanation →

570

MCQeasy

A small business wants to create a simple public-facing website to showcase their services and allow customers to book appointments. They have no existing IT infrastructure and want to use a low-code solution that integrates with Microsoft 365 for email notifications. They also need to manage appointment data without building a custom database. You recommend Power Pages. What is the most efficient way to set up the appointment booking feature?

A.Build a Power Automate portal that accepts form submissions and writes to a Dataverse table.

B.Use SharePoint lists to store appointments and embed the list in a Power Pages page using an iframe.

C.Use Excel Online as the backend and connect via Power Automate to create appointments from the portal.

D.Create a new Dataverse table for appointments, then use the Power Pages 'List and Form' template to allow users to view available slots and submit bookings.

AnswerD

This leverages built-in capabilities for data management and form creation with minimal effort.

Why this answer

Power Pages provides a 'List and Form' template that can be based on a Dataverse table. Option D is the simplest. Option A (SharePoint) is not recommended for structured data.

Option B (Excel) is not a scalable database. Option C (Power Automate) is not a data storage solution.

Full explanation →

571

MCQhard

Refer to the exhibit. A Power Platform environment uses Data Loss Prevention (DLP) policy with this JSON snippet. What is the effect of this policy rule?

A.It requires approval for connectors accessing Seattle accounts.

B.It allows all connectors for accounts outside Seattle.

C.It classifies connectors as Business for accounts in Seattle.

D.It blocks all connectors for accounts in Seattle.

AnswerD

The exact match condition triggers block for matching records.

Why this answer

The JSON snippet defines a DLP policy rule that applies to the 'Seattle' environment. It sets the connector classification to 'Blocked' for all connectors, meaning no connectors can be used in that environment. Therefore, the correct effect is that all connectors are blocked for accounts in Seattle, making option D correct.

Exam trap

The trap here is that candidates may misinterpret the 'Blocked' classification as requiring approval or as applying only to certain connector types, when in fact it universally prohibits all connectors in that environment.

How to eliminate wrong answers

Option A is wrong because the policy does not mention any approval process; it directly blocks connectors rather than requiring approval. Option B is wrong because the policy explicitly targets accounts in Seattle, not outside Seattle, and it blocks connectors rather than allowing them. Option C is wrong because the policy classifies connectors as 'Blocked', not 'Business', for accounts in Seattle.

Full explanation →

572

MCQeasy

A company wants to build an app that allows employees to submit expense reports. The app must include approval workflow. Which Power Platform component should be used to define the approval process?

A.Power Virtual Agents

B.Power Apps

C.Power Automate

D.Power BI

AnswerC

Power Automate provides built-in approval actions and workflow automation.

Why this answer

Power Automate is the tool for creating approval workflows. Option C (Power Automate) is correct. Option A (Power Virtual Agents) is wrong because it is for chatbots.

Option B (Power Apps) is wrong because it is for building the app interface, not the workflow. Option D (Power BI) is wrong because it is for data visualization.

Full explanation →

573

Multi-Selectmedium

A company wants to enforce data loss prevention (DLP) policies for Power Automate flows. Which TWO actions can the administrator perform?

Select 2 answers

A.Allow users to bypass DLP policies with administrator approval

B.Block specific connectors from being used in flows

C.Create a custom DLP policy for a specific environment

D.Assign DLP policies to specific users

E.Inherit the tenant-level DLP policy for all environments

AnswersB, C

Blocking connectors is a common DLP action.

Why this answer

Administrators can block specific connectors from being used in Power Automate flows as part of a DLP policy, preventing data from being shared with unauthorized services. Option C is correct because DLP policies can be scoped to a specific environment, allowing granular control over connector usage within that environment. This enables the administrator to enforce data protection rules tailored to different business contexts.

Exam trap

The trap here is that candidates often confuse environment-level DLP policy assignment with user-level assignment, or assume that tenant-level policies are automatically inherited by all environments, when in fact each environment can have its own independent DLP policy.

Full explanation →

574

MCQhard

A model-driven app for inventory management uses a custom entity 'Warehouse'. The app maker added a subgrid showing 'Warehouse Items' related to the selected warehouse. However, the subgrid does not show any data even though there are items linked. What is the most likely cause?

A.The Warehouse form does not include the lookup field to Warehouse Items.

B.The user does not have read permissions on the Warehouse Items entity.

C.The relationship between Warehouse and Warehouse Items is not configured correctly or is missing.

D.The subgrid component is not supported on the main form.

AnswerC

Subgrids rely on a relationship to filter related records; without it, no data appears.

Why this answer

The most likely cause is that the relationship between Warehouse and Warehouse Items is not configured correctly or is missing (Option C). Without a proper one-to-many relationship defined, the subgrid cannot retrieve the related records. Option A is incorrect because the lookup field belongs on the Warehouse Items entity, not on the Warehouse form; the subgrid relies on the relationship, not a lookup on the main form.

Option B is incorrect because read permissions would affect all views of the entity, not just the subgrid; given that items are linked, permissions are likely sufficient. Option D is incorrect because subgrids are fully supported on main forms in model-driven apps.

Full explanation →

575

MCQmedium

An organization uses Microsoft Power Platform and wants to enforce data loss prevention (DLP) policies across all environments. They need to block the use of a specific third-party connector in all environments. What should the administrator do?

A.Create a DLP policy for each environment and block the connector

B.Create a custom connector with the same name and block it

C.Remove the connector from the default solution

D.Create a tenant-level DLP policy that blocks the connector

AnswerD

A tenant-level DLP policy applies to all environments.

Why this answer

DLP policies in Microsoft Power Platform can be configured at the tenant level to apply across all environments. By creating a tenant-level DLP policy and blocking the specific third-party connector, the administrator ensures consistent enforcement without needing to manage individual environment policies. This approach centralizes control and prevents the connector from being used in any environment.

Exam trap

The trap here is that candidates often assume DLP policies must be created per environment, overlooking the tenant-level scope that provides centralized enforcement across all environments.

How to eliminate wrong answers

Option A is wrong because creating a DLP policy for each environment is inefficient and error-prone; it requires manual replication across environments and does not guarantee uniform enforcement if environments are added or missed. Option B is wrong because creating a custom connector with the same name does not block the original third-party connector; custom connectors are separate entities and blocking a custom connector does not affect the built-in or certified connector. Option C is wrong because removing a connector from the default solution does not block its use; connectors are not managed through solutions in that way, and removal from a solution only affects solution components, not connector availability in environments.

Full explanation →

576

Matchingmedium

Match each Microsoft Power Platform component to its primary purpose.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Build custom apps with low code

Automate workflows and processes

Visualize and analyze data

Create AI-powered chatbots

Build external-facing websites

Why these pairings

Power Apps builds custom apps, Power Automate automates workflows, Power BI analyzes data, and Power Virtual Agents creates chatbots. Common confusions include swapping these definitions.

Full explanation →

577

MCQeasy

A business analyst wants to build an app quickly using a pre-built template. Which Power Apps capability should they use?

A.Create a Model-driven app from a Dataverse table

B.Use Power Automate to generate the app

C.Use a Power Apps template from the template gallery

D.Create a Canvas app from blank

AnswerC

Templates provide a starting point with pre-built functionality.

Why this answer

Power Apps offers templates for common scenarios. Canvas apps from blank require more effort. Model-driven apps are not template-based.

Power Automate is for workflows.

Full explanation →

578

MCQmedium

A company wants to build a Power Apps canvas app for field technicians to report equipment issues. The app must allow offline data entry and sync when connectivity is restored. Which feature should the developer enable?

A.Use a Power Automate flow to queue data submissions

B.Configure the app to store data in a SharePoint list

C.Use the Common Data Service (Dataverse) offline sync

D.Enable the 'Offline' feature in the app settings

AnswerD

Power Apps canvas apps have an Offline feature that caches data for offline use and syncs later.

Why this answer

Power Apps mobile app supports offline capabilities by enabling the 'Offline' feature, which allows data to be cached and synced later. Option D is correct. Option A is wrong because Power Automate flows can be triggered online but do not provide offline data caching.

Option B is wrong because SharePoint lists require network connectivity unless using a third-party sync tool. Option C is wrong because the Common Data Service (Microsoft Dataverse) supports offline sync only when the app is explicitly configured for offline use, but the question asks about the feature to enable in the app.

Full explanation →

579

MCQhard

An organization uses Power Automate flows that connect to Microsoft SharePoint Online and Microsoft Dataverse. The security team requires that all connections to Dataverse use service principal authentication instead of user credentials. The administrator needs to ensure that flows relying on Dataverse connections continue to work after the change. What should the administrator do?

A.Create a new environment and migrate flows there

B.Register a service principal in Microsoft Entra ID and update connection references in the flows' solution

C.Recreate all flows with a shared connection using a service principal

D.Delete existing connections and ask users to create new ones

AnswerB

This allows flows to authenticate using the service principal.

Why this answer

Service principal authentication in Power Automate requires registering an application in Microsoft Entra ID (formerly Azure AD) and using its credentials to authenticate to Dataverse. Updating the connection references in the flows' solution to point to a service principal-based connection ensures all flows continue to work without requiring user credentials, meeting the security team's requirement.

Exam trap

The trap here is that candidates may think recreating flows or migrating environments is necessary, when in fact the solution-level connection reference can be updated to switch authentication methods without rebuilding the flows.

How to eliminate wrong answers

Option A is wrong because creating a new environment and migrating flows does not change the authentication method; the flows would still use user credentials unless the connection references are updated. Option C is wrong because recreating all flows is unnecessary and inefficient; the existing flows can be updated by modifying their connection references to use a service principal connection. Option D is wrong because deleting existing connections and asking users to create new ones would disrupt operations and still rely on user credentials, not service principal authentication.

Full explanation →

580

Drag & Dropmedium

Drag and drop the steps to configure a Power Virtual Agents chatbot in the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

Why this order

The correct sequence for configuring a Power Virtual Agents chatbot is: first create the bot, then define topics to handle user intents, add nodes to each topic to define the conversation flow, test the bot in the test pane to verify behavior, and finally publish the bot to make it available to users. Publishing before testing risks deploying unresolved issues.

Full explanation →

581

Multi-Selectmedium

Which TWO actions can be used to implement error handling in a Power Automate flow?

Select 2 answers

A.Use a Scope action to group actions and configure error handling

B.Add a Condition action to check for errors

C.Use a Compose action to store error details

D.Configure Run After settings

E.Add an Apply to Each action

AnswersA, D

Scope allows parallel branches and combined error handling.

Why this answer

Options A and D are correct because a Scope action can group actions and allow you to configure error handling for the group, and the Run After settings let you specify what happens when a previous action fails, succeeds, or times out. Option B is incorrect because a Condition action is used for conditional logic, not error handling. Option C is incorrect because a Compose action is used to build data, not handle errors.

Option E is incorrect because the Apply to Each action is used to iterate over arrays, not for error handling.

Full explanation →

582

MCQeasy

A user reports they cannot create a new environment in the Power Platform admin center. What is the most likely reason?

A.The tenant has insufficient trial capacity.

B.The user does not have a Power Apps license.

C.The user lacks the Global Admin or Power Platform Administrator role.

D.The user's network blocks the Power Platform admin center.

AnswerC

Correct. This option includes Global Admin, which is one of the roles that can create environments. However, note that Environment Admin alone is insufficient; only Global Admin (or Power Platform Administrator) works.

Why this answer

Creating a new environment in Power Platform requires either the Global Admin or Power Platform Administrator role. The Environment Admin role can manage existing environments but cannot create new ones. Therefore, the most likely reason is that the user lacks the necessary administrative role.

Option C correctly identifies the required roles.

Exam trap

A common trap is thinking the Environment Admin role is sufficient for creating environments, but it only allows management of existing environments. Only Global Admin or Power Platform Administrator can provision new ones.

How to eliminate wrong answers

Option A is wrong because insufficient trial capacity prevents the creation of a trial environment, but the question does not specify that the user is trying to create a trial environment; the user could be attempting to create a production or sandbox environment, which do not rely on trial capacity. Option B is wrong because a Power Apps license is required to use Power Apps, but creating environments in the admin center is a management task that depends on administrative roles, not on having a Power Apps license assigned. Option D is wrong because while network blocks could prevent accessing the admin center URL, the user reports they cannot create a new environment, implying they can access the admin center but the creation action fails, which points to a permissions issue rather than a connectivity problem.

Full explanation →

583

MCQmedium

A Power Pages site has a page that displays a chart summarizing sales data. The chart is built using a Dataverse view. The sales data changes frequently. What must be configured to ensure the chart updates automatically?

A.No additional configuration is needed; the chart updates automatically

B.Set the chart's cache duration to 0 in the site settings

C.Schedule a Power Automate flow to refresh the chart every hour

D.Configure the chart to use a real-time data stream via Power Automate

AnswerA

Charts based on Dataverse views automatically reflect real-time data changes.

Why this answer

Dataverse views in Power Pages automatically reflect the latest data without manual refresh. The chart updates in real time as the underlying view data changes. Option B is incorrect because Power Pages charts do not have a cache duration setting for Dataverse views; page caching might delay updates but does not require a setting of 0.

Option C is incorrect because Power Automate flows are not needed—the chart updates automatically via the Dataverse view. Option D is incorrect because there is no real-time data stream configuration required; the chart already updates dynamically.

Full explanation →

584

MCQhard

Refer to the exhibit. The JSON describes a Power Apps function. What is the correct usage of this function to return a date 7 days from today?

A.AddDays(7; Today())

B.AddDays(Today(), 7)

C.AddDays(7, Today())

D.AddDays('7', Today())

AnswerB

Correct. Follows the proper Power Fx syntax: AddDays(DateTime, NumberOfDays) with Today() as the date and 7 as the number of days.

Why this answer

The AddDays function in Power Apps (Power Fx) uses the syntax AddDays(DateTime, NumberOfDays). So AddDays(Today(), 7) returns the date 7 days from today. Option A uses a semicolon and has the arguments reversed.

Option C also reverses the arguments (days first, then date). Option D uses a string for the number of days, which is invalid.

Full explanation →

585

MCQhard

Refer to the exhibit. A Power Pages site has a web role called 'Partner' with permissions to read the Proposal table and read/write the Invoice table. A user assigned the Partner role attempts to create a new record in the Proposal table. What will happen?

A.The user is denied access because the Partner role does not exist

B.The user is allowed to create the record because the Partner role implicitly includes Write on all tables

C.The user is denied access because the Partner role has only Read permission on the Proposal table

D.The user is allowed to create the record because Write permission is granted on the Invoice table

AnswerC

Write permission is required to create records, and it is not granted.

Why this answer

The Partner role only has Read permission on the Proposal table, so create (Write) is not allowed. Option A is wrong because the role exists. Option B is wrong because the Partner role does not implicitly include Write on all tables; permissions must be explicitly granted.

Option D is wrong because Write permission on the Invoice table does not extend to the Proposal table.

Full explanation →

586

MCQhard

You are a Power Platform administrator. A user reports that they cannot create a new environment in the Power Platform admin center. The user has a Power Apps per user plan license. What is the most likely reason?

A.The user does not have access to the Power Platform admin center.

B.The user is not a global administrator in Microsoft Entra ID.

C.The user has not assigned the license to themselves.

D.The user does not have a license that includes environment creation rights, such as Power Apps Plan 2 or Power Automate Plan 2.

AnswerD

Per user plan does not include environment creation; need Plan 2 or trial.

Why this answer

Creating environments in the Power Platform admin center requires a license that includes environment creation rights, such as Power Apps Plan 2 or Power Automate Plan 2. The user's Power Apps per user plan license only allows them to use apps and flows, not to create or manage environments. Without the appropriate license, the environment creation option is disabled in the admin center.

Exam trap

The trap here is that candidates often assume any Power Apps license grants full admin center access, but Microsoft deliberately restricts environment creation to higher-tier plans to enforce capacity management and security boundaries.

How to eliminate wrong answers

Option A is wrong because the user can access the Power Platform admin center with any Power Apps license, but their license type restricts what they can do there. Option B is wrong because being a global administrator in Microsoft Entra ID is not required to create environments; the user needs the appropriate Power Platform license or a system administrator role in the environment. Option C is wrong because the user has already assigned the license to themselves (as stated in the question), and the issue is not about license assignment but about the license type lacking environment creation rights.

Full explanation →

587

MCQeasy

You need to create a flow that sends a push notification to a user's mobile device when a high-priority email arrives in their inbox. Which trigger and action combination should you use?

A.When an item is created trigger and Post message action

B.When a new email arrives trigger and Send push notification action

C.When an approval request is triggered and Send email action

D.Recurrence trigger and Send email action

AnswerB

This directly addresses the requirement.

Why this answer

The 'When a new email arrives' trigger is designed to monitor an inbox for incoming messages, and the 'Send push notification' action sends a notification directly to a mobile device via the Power Automate mobile app or Microsoft Teams. This combination directly fulfills the requirement to react to a high-priority email and deliver a push notification to the user's device.

Exam trap

The trap here is that candidates often confuse 'Send push notification' with 'Send email' or 'Post message', not realizing that push notifications are device-specific and require the Power Automate mobile app, while email actions send traditional email messages.

How to eliminate wrong answers

Option A is wrong because the 'When an item is created' trigger is specific to a data source like SharePoint or Dataverse, not an email inbox, and the 'Post message' action sends a message to a channel or chat, not a push notification to a mobile device. Option C is wrong because the 'When an approval request is triggered' trigger waits for an approval action, not an incoming email, and the 'Send email' action sends an email, not a push notification. Option D is wrong because the 'Recurrence' trigger runs on a schedule, not in response to an email event, and the 'Send email' action sends an email, not a push notification.

Full explanation →

588

MCQhard

An app maker creates a canvas app that uses a Dataverse table with 100,000 records. The app includes a gallery that displays all records. Users experience long load times. What should the app maker do to improve performance without changing the data source?

A.Use delegable functions in the gallery's Items property

B.Switch to a SharePoint list as the data source

C.Increase the data row limit in Dataverse settings

D.Remove all filters from the gallery

AnswerA

Delegable filters push processing to the server, improving performance.

Why this answer

Using delegable functions (such as Filter, Sort, LookUp) in the gallery's Items property allows the query to be processed on the Dataverse server, returning only the necessary subset of records. This significantly reduces the amount of data transferred and improves performance for large datasets like 100,000 records. Option B is incorrect because it involves changing the data source, which is not allowed per the question.

Option C is incorrect because increasing the data row limit in Dataverse settings does not address the delegation issue and may even worsen performance. Option D is incorrect because removing filters would cause the entire dataset to be loaded, making load times even longer.

Full explanation →

589

MCQmedium

Refer to the exhibit. The JSON shows a snippet of a DLP policy. Which effect will this policy have on a Power Automate flow that uses Google Sheets and Dropbox connectors?

A.The flow will be blocked because it uses blocked connectors.

B.The flow will run but the connection references will be deleted.

C.The flow will be blocked only if it uses both connectors together.

D.The flow will run normally but will be restricted to the production environment only.

AnswerA

Both connectors are blocked, so any flow using them will not run.

Why this answer

The DLP policy in the exhibit defines a 'Blocked' connector group that includes both Google Sheets and Dropbox. In Power Automate, when a flow uses any connector listed in a blocked group, the flow is prevented from running. Since the flow uses both blocked connectors, it will be blocked entirely, regardless of whether they are used together or separately.

Exam trap

The trap here is that candidates may think DLP policies only block flows when multiple connectors from different groups are combined (cross-group sharing), but in reality, any connector placed in the 'Blocked' group alone is sufficient to block the flow entirely.

How to eliminate wrong answers

Option B is wrong because DLP policies do not delete connection references; they block the execution of flows that use blocked connectors. Option C is wrong because the policy blocks any flow that uses a blocked connector individually; it does not require both connectors to be used together. Option D is wrong because DLP policies apply across all environments unless specifically scoped, and the policy does not restrict the flow to a production environment—it blocks it entirely.

Full explanation →

590

Multi-Selecthard

Which THREE components are part of the Power Platform environment lifecycle management?

Select 3 answers

A.Environment creation

B.Environment deletion

C.Creating users in Microsoft Entra ID

D.Environment backup and restore

E.Publishing Power BI reports

AnswersA, B, D

Creating environments is a key lifecycle operation.

Why this answer

Environment creation is a core component of Power Platform environment lifecycle management because it establishes the isolated container where apps, flows, and data reside. The lifecycle begins when an administrator provisions a new environment, which sets up a dedicated Dataverse database, security boundaries, and resource limits. Without creation, no subsequent lifecycle operations (backup, restore, deletion) can occur.

Exam trap

The trap here is that candidates confuse operational tasks (like creating users or publishing reports) with environment lifecycle management, which strictly covers the creation, deletion, backup, and restore of the environment itself, not activities that occur within it.

Full explanation →

591

Multi-Selectmedium

Which THREE components are part of Microsoft Power Platform?

Select 3 answers

A.Power Virtual Agents

B.Azure DevOps

C.Power Apps

D.Power Automate

E.Power BI

AnswersC, D, E

Power Apps is a core component of Power Platform for building low-code apps.

Why this answer

The three core components of Microsoft Power Platform are Power Apps, Power Automate, and Power BI. While Power Virtual Agents is also a component, the question asks for only three, and these three are the traditional pillars.

Exam trap

A common mistake is including Power Virtual Agents as one of the three, but the traditional core is Power Apps, Power Automate, and Power BI.

Full explanation →

592

Multi-Selecthard

Which THREE actions can be performed by using Power Apps component framework (PCF) in a model-driven app?

Select 3 answers

A.Add a client-side script that runs on field change

B.Implement data validation using Dataverse Web API

C.Build a custom input control with complex UI elements

D.Change the layout of the main form using drag and drop

E.Configure a business rule to set field values

.Create a custom visualization that calls an external API

AnswersB, C

PCF controls can interact with Dataverse Web API.

Why this answer

All three correct options utilize Power Apps component framework (PCF) to create custom components. The null option involves building a custom visualization component that can call external APIs, such as REST endpoints, to display data from external sources. Option B is correct because PCF components can use the `context.webAPI` methods to interact with Dataverse Web API for data validation beyond simple client-side scripting.

Option C is correct because PCF allows building custom input controls with complex UI elements like sliders or maps, which are not possible with out-of-the-box form controls. In contrast, options A, D, and E are incorrect: A uses client-side scripts (JavaScript) not PCF, D is done via form editor layout, and E uses business rules, which are separate features.

Exam trap

Candidates often confuse PCF with traditional client-side scripting (option A) or business rules (option E). However, PCF is specifically for building reusable custom components that can include complex UI, external API calls, and Dataverse Web API integration. The trap is that options A, D, and E are valid customization techniques but are not part of PCF.

Full explanation →

593

MCQeasy

A Power Pages site needs to display a map showing the locations of company offices stored in Dataverse. Which component should be used to embed the map?

A.A custom JavaScript component using a mapping API

B.A Power Automate flow that generates an image

C.A Power Virtual Agents chatbot

D.A Power BI report embedded in the page

AnswerA

Custom JavaScript can integrate with mapping services like Bing Maps.

Why this answer

Power Pages supports embedding custom code like JavaScript map APIs. Option B is wrong because Power Automate can trigger actions but not display a map. Option C is wrong because Power Virtual Agents is for chatbots.

Option D is wrong because Power BI can embed reports but not directly a map from Dataverse coordinates.

Full explanation →

594

MCQhard

A user sees the exhibit error when opening a Power BI report in the service. What is the most likely cause?

A.The scheduled refresh failed due to credentials

B.The on-premises data gateway is offline

C.The dataset was deleted from the workspace

D.The data source connection in the service was modified

AnswerD

This error indicates the dataset cannot find the data source.

Why this answer

The error shown in the exhibit is a typical 'Couldn't load the data for this visual' message that occurs when the data source connection defined in the Power BI service has been changed (e.g., server name, database name, or authentication method) but the report's underlying dataset still references the old connection. This mismatch prevents the service from retrieving data, even if the gateway is online and credentials are valid. Option D is correct because modifying the data source connection in the service without updating the dataset's connection string breaks the data retrieval pipeline.

Exam trap

The trap here is that candidates often confuse a data source connection modification error with a gateway offline error, because both can prevent data loading, but the gateway error is specific to on-premises connectivity while the connection modification error occurs even with cloud data sources.

How to eliminate wrong answers

Option A is wrong because a scheduled refresh failure due to credentials would produce a specific 'Credentials are invalid' or 'Refresh failed' error in the refresh history, not a generic 'Couldn't load the data' error on the report canvas. Option B is wrong because an offline on-premises data gateway would generate a 'Gateway not reachable' or 'Gateway offline' error message, not a data source connection error. Option C is wrong because if the dataset were deleted from the workspace, the report would show a 'Dataset not found' or 'We couldn't find the dataset' error, not a data loading failure that implies the dataset exists but cannot connect.

Full explanation →

595

MCQhard

A Power Pages site is experiencing slow load times for a page that displays a list of products from a Dataverse table. The page uses a Liquid template with a fetch query that retrieves all products without filtering. Which change would most improve performance?

A.Enable the content delivery network (CDN) for the site.

B.Adjust the page caching settings in the Power Pages admin center.

C.Replace the Liquid template with the out-of-the-box list component.

D.Modify the fetch query in the Liquid template to include a filter, such as only active products.

AnswerD

Filtering reduces the dataset returned, improving page load time.

Why this answer

Modifying the fetch query in the Liquid template to include a filter (e.g., only active products) reduces the amount of data retrieved from Dataverse, directly addressing the performance issue caused by fetching all products. Option A (CDN) improves delivery of static assets, not dynamic query results. Option B (page caching) may help if the data doesn't change often, but it doesn't fix the underlying inefficiency of the query.

Option C (out-of-the-box list component) still retrieves all data unless configured with a filter, so it does not guarantee improvement.

Full explanation →

596

MCQmedium

You are reviewing a Power Automate flow definition. The flow should send an email when a new invoice file is added to a SharePoint folder. However, the flow is not triggering. What is the most likely cause?

A.The folder path '/documents/invoices' is incorrect or the flow lacks permissions.

B.The email action uses an incorrect dynamic expression.

C.The flow needs a 'Get file content' action before sending email.

D.The SharePoint trigger requires a 'When a file is created or modified' trigger instead.

AnswerA

Incorrect folder path or permissions can prevent triggering.

Why this answer

The most likely cause is that the folder path '/documents/invoices' is incorrect or the flow lacks permissions. Power Automate triggers for SharePoint require exact folder paths and appropriate access rights to monitor file additions. If the path is misspelled, uses a relative path instead of a server-relative path, or the service account does not have read permissions on the folder, the trigger will not fire.

Exam trap

The trap here is that candidates often assume the trigger type is wrong (option D) because they confuse 'created or modified' with 'created only', but the real issue is typically a misconfigured folder path or permissions, not the trigger selection.

How to eliminate wrong answers

Option B is wrong because an incorrect dynamic expression in the email action would cause the email to fail or send incorrect data, but it would not prevent the flow from triggering. Option C is wrong because the 'Get file content' action is only needed if you want to process the file's binary data; the trigger itself provides metadata about the new file, and sending an email does not require file content. Option D is wrong because the 'When a file is created or modified' trigger is actually the correct trigger for detecting new files; the issue is not the trigger type but the folder path or permissions.

Full explanation →

597

MCQmedium

Refer to the exhibit. A Power Pages web role configuration snippet is shown. What access does this web role grant to the 'incident' entity?

A.Read all incidents, write incidents related to the user, and create new incidents.

B.No access because the scope is set to Contact.

C.Only read incidents related to the user's contact.

D.Read, write, and create all incident records globally.

AnswerA

Read Global, write Deep (related to contact), create Global.

Why this answer

The configuration grants read, write, and create privileges with different scopes. Read and create are Global (all records), write is Deep (records owned by user's business unit). Scope 'Contact' means records related to the user's contact record.

Full explanation →

598

MCQmedium

A multinational corporation uses Power Platform extensively. They have multiple environments: DEV, TEST, UAT, STAGING, and PROD. A developer accidentally published a Power App that connects to a SQL Server database using an unapproved connector in the PROD environment. The organization has strict data governance policies that require all connections to use approved connectors only. The admin needs to block this connector in PROD while still allowing it in other environments. What should the admin do?

A.Create a tenant-level DLP policy that blocks the connector for all environments.

B.Remove the developer's permissions to the PROD environment.

C.Delete the Power App from PROD.

D.Create an environment-level DLP policy for PROD that blocks the connector.

AnswerD

Environment-level policies can block connectors in specific environments without affecting others.

Why this answer

Environment-level DLP policies allow blocking connectors in specific environments. The admin should create an environment-level DLP policy for PROD that blocks the unapproved connector. This overrides the tenant-level policy that might allow it elsewhere.

Full explanation →

599

MCQhard

An organization wants to implement AI-driven insights for sales forecasting using historical data. Which Power Platform capability should they use?

A.Power BI Quick Insights

B.Microsoft Copilot Studio

C.Power Apps with Dataverse

D.Power Automate with AI Builder

AnswerD

AI Builder provides prebuilt and custom AI models that can be used in Power Automate for forecasting.

Why this answer

AI Builder within Power Automate provides prebuilt AI models (e.g., prediction models) that can analyze historical sales data to generate forecasts. This capability is specifically designed for integrating AI-driven insights into automated workflows without requiring custom machine learning development.

Exam trap

The trap here is that candidates often confuse Power BI's descriptive analytics (Quick Insights) with predictive forecasting, overlooking that AI Builder is the dedicated Power Platform component for building and consuming custom predictive models without code.

How to eliminate wrong answers

Option A is wrong because Power BI Quick Insights provides automated data exploration and pattern discovery (e.g., trends, outliers) but does not generate predictive sales forecasts from historical data; it focuses on descriptive analytics, not predictive modeling. Option B is wrong because Microsoft Copilot Studio is designed for building conversational AI agents (chatbots) and does not include predictive analytics or sales forecasting capabilities. Option C is wrong because Power Apps with Dataverse enables custom app development and data storage but lacks built-in AI forecasting; it would require additional services (e.g., AI Builder or Azure Machine Learning) to implement predictive insights.

Full explanation →

600

MCQhard

An organization has deployed a Power Automate flow that processes sensitive customer data. The security team requires that the flow's connections use managed identities instead of user credentials. What should the administrator do?

A.Share the flow with the security team and have them modify the connections.

B.Use a service principal with a certificate and store the certificate in the flow's environment.

C.Store the user credentials in Azure Key Vault and reference them in the flow.

D.Use managed identities for the connections where supported.

AnswerD

Managed identities provide secure, credential-free authentication for supported connectors.

Why this answer

Managed identities in Power Automate allow connections to authenticate to Azure resources without storing credentials, directly addressing the security team's requirement to avoid user credentials. Managed identities are a secure, Azure AD-backed identity that can be assigned to a flow or environment, eliminating the need for shared secrets or user context.

Exam trap

The trap here is that candidates often confuse managed identities with service principals or Key Vault integration, thinking any secretless approach qualifies, but managed identities specifically eliminate the need for any stored credential or certificate.

How to eliminate wrong answers

Option A is wrong because sharing the flow with the security team and having them modify connections does not remove user credentials; it merely shifts the credential management burden and still relies on user identities. Option B is wrong because using a service principal with a certificate still requires certificate management and storage, which is not a managed identity and introduces additional complexity and secret rotation overhead. Option C is wrong because storing user credentials in Azure Key Vault and referencing them in the flow still uses user credentials, not managed identities, and violates the requirement to avoid user credentials entirely.

Full explanation →

Page 8 of 13

All pages

1 2 3 4 5 6 7 8 9 10 11 12 13

Practice PL-900 by domain

Target a specific domain to shore up weak areas.

Demonstrate the capabilities of Power Automate Describe the business value of Microsoft Power Platform Manage the Microsoft Power Platform environment Demonstrate the capabilities of Power Apps Demonstrate the capabilities of Microsoft Copilot Studio

See all domains with question counts →