Courseiva

PL-900 · domain

Manage the Microsoft Power Platform environment

This domain covers administering Power Platform environments: creating and selecting environment types, using the Power Platform admin center, applying data loss prevention (DLP) policies, and managing environment lifecycle with PowerShell cmdlets like Get-AdminPowerAppEnvironment. Questions present admin scenarios and ask you to interpret commands, choose valid environment types, or pick correct governance actions.

95 questions29 easy36 medium30 hard

Focused practice

Practice Manage the Microsoft Power Platform environment questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about Manage the Microsoft Power Platform environment

Be able to identify valid environment types, read Power Platform admin PowerShell output, and apply DLP policies to block connectors across environments. The key skill is knowing that governance is environment-scoped, so choose the right environment and policy scope for each admin scenario.

Environment types: Sandbox, Production, Trial, and Developer, and when each is appropriate

Power Platform admin center tasks: creating environments, assigning admin roles, and managing settings

Data loss prevention policies that classify connectors as Business, Non-Business, or Blocked

PowerShell admin cmdlets such as Get-AdminPowerAppEnvironment and Set-AdminPowerAppEnvironment

Watch out for

Common Manage the Microsoft Power Platform environment exam traps

  • ▸Confusing environment types with app types; assuming 'Test' or 'Staging' are official Power Platform environment types when they are not.
  • ▸Thinking DLP policies apply per app or per user; they are scoped to environments and control connectors, not individual makers.
  • ▸Believing the default environment can be deleted or that every user can create environments; tenant settings govern this.

Question index

All Manage the Microsoft Power Platform environment questions (95)

Click any question to see the full explanation, or start a practice session above.

1

An administrator needs to prevent users from creating Power Apps outside of the approved environment (Production). The company has a Development and a Production environment. Users should only be able to create apps in Development. Which configuration should the administrator use?

Hard
2

Northwind Traders has a production environment named 'Ops-Prod' with Dataverse enabled. A maker reports that after importing a managed solution, a canvas app that previously worked now fails to connect to a custom connector. The admin confirms the connector exists in the environment and the maker holds the Environment Maker role. What is the most likely cause?

Hard
3

A global company uses Power Platform and wants to ensure that data residency requirements are met for users in different regions. What should they configure?

Hard
4

Refer to the exhibit. A Power Platform administrator applies this DLP policy to the default environment. What is the result?

Hard
5

A Power Platform administrator is configuring data loss prevention (DLP) policies for a tenant. The administrator needs to allow the use of the SharePoint connector and the Outlook connector in the same flow, but must block the use of the Twitter connector. Which DLP policy configuration should the administrator use?

Hard
6

A company uses a Power Platform environment that contains several production apps. They need to ensure that changes to these apps are reviewed and approved before deployment to the production environment. What should they implement?

Hard
7

A Power Platform administrator needs to provide a team of makers with a shared environment that includes preinstalled sample data and apps for learning purposes. The team should be able to reset the environment to its initial state if needed. Which environment type should the administrator create?

Easy
8

A company wants to ensure that changes to a Power Platform solution are tracked and can be rolled back if necessary. The development team uses source control. What should the administrator configure to enable solution lifecycle management?

Easy
9

A Power Platform administrator notices that a production environment has exceeded its storage quota. The administrator needs to free up storage without impacting active solutions. Which action should the administrator take first?

Medium
10

A help desk technician needs to confirm which Power Platform environments are associated with a specific Microsoft Dataverse database and check the environment type and region for each. The technician has the Power Platform Administrator role. Where should the technician look?

Easy
11

A Power Platform administrator is setting up a new environment for a department. The department requires that data stored in the environment remain within a specific geographic region. The administrator creates the environment in the Europe region. Which additional step must the administrator take to ensure that all data, including backups, stays in that region?

Medium
12

A Power Platform administrator wants to delegate the responsibility of managing environments to regional leads without granting them full admin privileges. Which role should the administrator assign?

Easy
13

A company has a Power Platform environment that contains several unmanaged solutions. The administrator wants to promote a solution to production. Which action should the administrator take to ensure the solution can be deployed to other environments?

Easy
14

A company is implementing Microsoft Power Platform and needs to ensure that only licensed users can create environments. Which setting should be enabled?

Easy
15

An organization has multiple Power Platform environments. The administrator needs to move a solution from a development environment to a production environment. The solution includes custom connectors and environment variables. What is the correct process?

Hard
16

A company uses Power BI to visualize sales data from Dynamics 365 Sales. A new policy requires that all data must be stored in the US region only. The Power BI tenant is currently in the default region (home region). What should the admin do to comply with the policy?

Medium
17

A company uses Power Automate flows that connect to SharePoint and Microsoft Entra ID. The administrator needs to ensure that the flows can access data only from approved data sources. What should the administrator configure?

Medium
18

Which TWO are valid ways to distribute a Power App to end users? (Select 2)

Easy
19

A university uses Power Apps for student registration. The app is built on Dataverse and shared with all students. Recently, a student reported that they cannot access the app and receive an error that they do not have permission. The app was working earlier. The admin checks the environment and finds that the app's sharing settings have been changed. The admin needs to restore access for all students quickly. What should the admin do?

Easy
20

A company is migrating a complex Power Apps solution from a development environment to production. The solution includes custom connectors, flows, and Dataverse tables. Which THREE steps should the administrator take to ensure a successful migration?

Hard
21

A manufacturing company uses Power Automate flows to process inventory updates. The flows use standard connectors. The company needs to ensure that the flows can be run by users in their own context without requiring the flow owner's credentials. Which authentication type should be used for the connections?

Easy
22

A Power Platform administrator needs to manage user access to a specific environment. The administrator wants to allow a group of users to create apps and flows in that environment, but restrict them from modifying environment settings or managing other users. Which two actions should the administrator perform? (Choose two.)

Medium
23

An organization uses Power Automate flows that connect to Microsoft Dataverse. The flows need to run under a service account with specific permissions. What is the best practice to manage the connection?

Medium
24

An administrator is planning the environment strategy for a large enterprise. Which TWO considerations should the administrator include to ensure proper governance?

Medium
25

Which THREE are valid components of a Microsoft Power Platform environment?

Medium
26

A company wants to restrict the ability to create Power Apps and Power Automate flows in the default environment to only a specific security group. What is the recommended approach?

Medium
27

Refer to the exhibit. An administrator runs this PowerShell command against a Power Platform environment. What can the administrator conclude?

Medium
28

A company has a Power Platform environment that is running low on storage. The administrator needs to free up storage without deleting important data. What should they do first?

Hard
29

Which TWO are valid methods to create a new Power Platform environment?

Easy
30

A user reports they cannot create a new Power Apps app in the default environment. They have a Power Apps license. What is the most likely cause?

Easy
31

A Power Platform administrator at Contoso manages a production environment that contains several mission-critical Power Apps canvas apps. The administrator wants to ensure that any change made to an app in this environment is recorded and can be traced back to the user who made it, for audit purposes. Which feature should the administrator enable to meet this requirement?

Medium
32

A company has a Power Platform environment used for development. The development team needs to deploy a solution to a test environment. What is the recommended approach?

Medium
33

A company wants to use Microsoft Copilot Studio to build a chatbot that helps employees reset their passwords. Which TWO components are required? (Choose two.)

Easy
34

A Power Platform administrator needs to monitor the usage of Power Apps and Power Automate across the tenant to identify which environments are consuming the most resources. Which tool should the administrator use?

Easy
35

You are a Power Platform administrator for a non-profit organization. The organization has a single environment used by volunteers and staff. A new volunteer needs to be able to run a specific Power App that manages event registrations, but should not be able to modify the app or access any other resources in the environment. The volunteer has a valid Power Apps license. You need to provide the volunteer with the minimum permissions necessary. What should you do?

Easy
36

An admin needs to view the capacity add-ons purchased for a tenant, including AI Builder credits. Where should the admin go?

Easy
37

A Power Platform administrator is reviewing the security roles in a new environment. The administrator needs to grant a user the ability to create and modify all components within the environment, including managing other users' security roles. Which security role should be assigned?

Medium
38

A Power Platform administrator needs to view the capacity consumption for the tenant, including how much Dataverse storage and Power Platform request capacity is being used. Where should the administrator go?

Easy
39

An organization is preparing for a Power Platform rollout. They need to ensure that only licensed users can create new environments, and that environment creation is audited. Additionally, they want to restrict which connectors can be used in production environments. Which THREE capabilities should they use?

Hard
40

An organization uses Power Apps portals to allow external customers to submit support tickets. The portal uses Microsoft Entra ID for authentication. The security team wants to require multi-factor authentication (MFA) for external portal users. What is the best approach?

Medium
41

An organization uses Power Automate flows that connect to Microsoft Dataverse and SharePoint. The administrator needs to ensure that only specific connectors can be used together. What should they configure?

Easy
42

A Power Platform administrator needs to monitor the usage of Power Apps and Power Automate across the organization to identify which environments have the highest adoption. Which built-in tool should the administrator use?

Easy
43

Which TWO of the following are valid environment types in Power Platform?

Easy
44

A company is using Power Automate flows that connect to multiple third-party services. The security administrator wants to ensure that no sensitive data is sent to unauthorized external services. Which feature should be used to enforce this requirement?

Medium
45

A Power Platform admin needs to ensure that all environments have a backup policy that automatically creates backups every 24 hours. What is the default backup frequency for Dataverse environments?

Medium
46

The exhibit shows a DLP policy configuration for a Power Platform environment. Which connector is allowed for business use?

Hard
47

A large enterprise uses Power Platform with multiple environments. They need to enforce a policy that blocks all Canvas apps from using the 'Twitter' connector, but only in the 'Production' environment. What should the administrator do?

Hard
48

A company is deploying Power Virtual Agents (now Copilot Studio) chatbots across multiple departments. Each department needs its own environment to manage chatbots independently. However, the company wants to share a common set of entities and workflows across all environments. Which approach should the administrator take?

Medium
49

An administrator configures a Data Loss Prevention (DLP) policy with the scope set to 'All environments' and places selected connectors in the 'Blocked' group. What will be the result of this policy?

Medium
50

A Power Platform administrator discovers that a developer has deployed a canvas app to production that connects to both SharePoint and an unapproved third-party REST API using a custom connector. The security team requires that custom connectors be reviewed before production use, while still allowing makers to prototype them in a sandbox environment. What should the administrator configure to meet this requirement?

Hard
51

An organization wants to ensure that all Power Platform solutions in production environments are tracked and changes are approved. What should the administrator implement?

Medium
52

A Power Platform administrator needs to delegate the ability to create and manage environments to a specific user without granting full Power Platform administrator privileges. The administrator wants to follow the principle of least privilege. What should the administrator do?

Medium
53

A company wants to enforce data loss prevention (DLP) policies for Power Automate flows. Which TWO actions can the administrator perform?

Medium
54

An organization uses Microsoft Power Platform and wants to enforce data loss prevention (DLP) policies across all environments. They need to block the use of a specific third-party connector in all environments. What should the administrator do?

Medium
55

A Power Platform administrator is configuring a new environment for a team that will use both Power Apps and Power Automate. The administrator needs to ensure that the team can only use a specific set of connectors and that data cannot be shared between certain connectors. Which two actions should the administrator take? (Choose two.)

Medium
56

Which THREE components are part of the Power Platform environment lifecycle management?

Hard
57

A multinational corporation uses Power Platform extensively. They have multiple environments: DEV, TEST, UAT, STAGING, and PROD. A developer accidentally published a Power App that connects to a SQL Server database using an unapproved connector in the PROD environment. The organization has strict data governance policies that require all connections to use approved connectors only. The admin needs to block this connector in PROD while still allowing it in other environments. What should the admin do?

Medium
58

A company uses Microsoft Power Platform and requires that all environment creation requests go through an approval process. The security team wants to prevent non-admins from creating trial environments. What should the administrator configure?

Medium
59

An organization wants to allow external partners to access specific Power Apps and data without granting them full access to the tenant. What should they configure?

Medium
60

An organization wants to ensure that when a Power Apps canvas app is shared with a user, the user can run the app but cannot edit it or share it with others. The app is in a production environment. What should the administrator or maker do?

Medium
61

A company has multiple Power Platform environments. They want to automatically apply consistent settings (e.g., DLP policies, audit settings) to all new environments. What should they do?

Hard
62

A financial services company uses Power Automate to process loan applications. The flow uses the ‘When a new email arrives’ trigger from a shared mailbox. The flow recently stopped working after an admin changed the mailbox permissions. What is the most likely cause?

Hard
63

An organization wants to enable Microsoft Copilot Studio (formerly Power Virtual Agents) to answer questions from employees about company policies. The chatbot must only use internal company documents stored in SharePoint as its knowledge source. Which configuration should the administrator use?

Easy
64

A Power Platform administrator is configuring data loss prevention (DLP) policies. The company uses Power Automate flows that connect to Microsoft SharePoint and Microsoft Teams. The security team wants to block any flow from sending data from SharePoint to unsanctioned third-party services. Which DLP policy configuration should the administrator apply?

Hard
65

A hospital uses Power Apps to manage patient intake forms. The app stores data in Microsoft Dataverse. The security policy requires that patient health information (PHI) be encrypted at rest and in transit. The environment is already configured with default Dataverse settings. The IT admin needs to ensure compliance. What should the admin do?

Easy
66

A Power Platform administrator needs to provide a team of makers with a shared environment that includes a pre-installed Microsoft Dataverse database and sample apps. The environment should be available to all team members without requiring them to create their own. What should the administrator do?

Easy
67

An organization has multiple Power Platform environments. The security team mandates that all environments must use Microsoft Entra ID conditional access policies to enforce multi-factor authentication. However, one environment hosts a service account that cannot perform interactive logins. What should the administrator do to comply without breaking the service account?

Hard
68

Your organization uses Power Automate to automate business processes. A flow that runs daily fails intermittently with 'HTTP 429 - Too Many Requests' errors. What should you do to resolve this issue?

Medium
69

A company uses Power Automate flows that access Microsoft SharePoint and Microsoft Dataverse. They want to prevent data from leaving the organization. What should they configure?

Easy
70

An organization has multiple Power Platform environments including production, development, and test. They want to ensure that changes made in development are promoted to test and then to production, with approval gates. Which feature should they use?

Hard
71

Which TWO actions can a Power Platform administrator perform in the Power Platform admin center?

Medium
72

A Power Platform administrator wants to see the capacity usage of all environments in the tenant. Where should they look?

Easy
73

Which TWO are best practices for managing Power Platform environments in a large enterprise?

Easy
74

Your organization has a Power Apps portal that allows external users to submit support tickets. You need to ensure that only authenticated external users from specific domains can access the portal. What should you configure?

Hard
75

A company has a production environment containing a model-driven app used by 400 sales staff. The administrator wants to review who accessed the app in the last 30 days and which users were inactive, without enabling any paid auditing features. Which tool should the administrator use?

Medium
76

An organization is using Power Virtual Agents (now Copilot Studio) to create a customer service chatbot. The chatbot must be available only to users inside the organization, not to external customers. What should the administrator do?

Medium
77

A government agency uses Power Platform with strict compliance requirements. They need to retain all audit logs of user activities within Power Platform for at least 7 years. The agency uses Microsoft Purview for compliance and Microsoft Sentinel for security monitoring. The admin needs to ensure that all Power Platform audit events are captured and retained for the required period. What should the admin do?

Hard
78

A Power Platform administrator needs to ensure that all Power Automate cloud flows in a specific environment can only use connectors approved by the security team, and that flows combining a blocked connector with any other connector are prevented from running. Which mechanism should the administrator use?

Hard
79

A Power Platform administrator is reviewing the capacity of a production environment. The environment has a database size of 2 GB, file storage of 10 GB, and log storage of 1 GB. The tenant has a total of 10 GB of database capacity, 50 GB of file capacity, and 2 GB of log capacity. The administrator notices that the production environment is consuming a disproportionate amount of database capacity. Which action should the administrator take to identify the largest tables in the environment?

Hard
80

Which THREE actions can a Power Platform administrator perform in the Power Platform admin center to manage environments?

Hard
81

A Power Platform administrator needs to provide a team of makers with a shared environment that includes a common set of connectors and a preconfigured Microsoft Dataverse database. The makers should be able to collaborate on apps and flows without affecting other environments. What should the administrator create?

Easy
82

A non-profit organization uses Power Platform to manage donor information. The organization wants to ensure that only users in the ‘Donor Managers’ security group can edit records in the ‘Donations’ table. What is the best way to achieve this?

Easy
83

Your organization has multiple Power Platform environments. You need to ensure that a specific connector (e.g., SQL Server) is blocked in the production environment but allowed in the development environment. What should you configure?

Medium
84

A company uses Power Virtual Agents (now Copilot Studio) to build a customer service chatbot. The bot needs to securely escalate to a live agent when it cannot resolve the issue. The escalation must pass the conversation context to the agent. What should the bot use?

Hard
85

An administrator is setting up a new Power Platform environment for a department. The department requires that all users in the environment use only approved connectors, and that data cannot be shared between the approved connectors and any unapproved connectors. What should the administrator configure?

Hard
86

Your organization uses Power Virtual Agents (now Copilot Studio) for customer service. You need to ensure that the bot can access customer data from a Dataverse table that contains sensitive information. What is the best approach to secure the data?

Hard
87

A company uses Microsoft Power Platform and wants to enforce data loss prevention (DLP) policies for all environments. The admin needs to block the use of SharePoint connector in all default environments. Which action should the admin take?

Medium
88

A company uses Microsoft Copilot Studio to create a custom copilot. The copilot needs to access customer data stored in a Dataverse table that contains sensitive information. The compliance team requires that data accessed by the copilot must be audited. What should the admin configure?

Hard
89

The exhibit shows a JSON snippet used to create a Power Platform environment via the Power Platform API. The administrator runs the script but the environment is created with the default language and currency instead of the specified values. What is the most likely reason?

Medium
90

A Power Platform administrator is configuring a data loss prevention (DLP) policy for a new environment. The policy must allow the use of the SharePoint and Outlook connectors together, but must prevent the use of the Twitter connector with any other connector. How should the administrator configure the DLP policy?

Hard
91

An administrator needs to ensure that only users from a specific Microsoft Entra ID group can access a Power Platform environment. What should the administrator configure?

Medium
92

A global organization has multiple geographic regions and needs to comply with data residency requirements. Each region must have its own Power Platform environment with data stored locally. What is the recommended approach to manage these environments?

Hard
93

Which TWO of the following are valid reasons to create multiple Power Platform environments?

Easy
94

An organization has several Power Platform environments used for development and testing. They want to prevent accidental deletion of important data. What strategy should they implement?

Medium
95

A small business wants to give its finance team a dedicated space to build apps and flows that only finance team members can access, separate from the default environment used by the rest of the company. The administrator needs to create this isolated workspace. What should the administrator create?

Easy

Frequently asked questions

What does the Manage the Microsoft Power Platform environment domain cover on the PL-900 exam?
Be able to identify valid environment types, read Power Platform admin PowerShell output, and apply DLP policies to block connectors across environments. The key skill is knowing that governance is environment-scoped, so choose the right environment and policy scope for each admin scenario.
How many questions are in this domain?
This page lists all 95 Manage the Microsoft Power Platform environment questions in the PL-900 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only Manage the Microsoft Power Platform environment questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.
pl-900 PL-900 power platform environment Practice Questions