CCNA Manage the Microsoft Power Platform environment Questions — Page 3 of 3

151

MCQmedium

A software company uses Power Platform to build customer-facing portals. They have a dedicated production environment and a sandbox environment for development. The developer needs to copy the entire production environment (including all apps, flows, and data) to the sandbox environment for performance testing. The developer wants to ensure that the sandbox environment is an exact copy, including all data. What should the developer do?

A.Export the solutions from the production environment and import them into the sandbox environment.

B.Manually recreate the apps and flows in the sandbox and use the same data source.

C.Use Power Automate to copy all data from production to sandbox.

D.Use the 'Copy environment' feature in the Power Platform Admin Center, selecting 'Full copy' including data.

AnswerD

This copies everything, including data, to the sandbox environment.

Why this answer

The Power Platform Admin Center provides a 'Copy environment' feature that can copy both customizations and data from a production environment to a sandbox environment. This meets the requirement exactly.

Practice this question →

152

MCQmedium

An administrator needs to ensure that only users from a specific Microsoft Entra ID group can access a Power Platform environment. What should the administrator configure?

A.Disable the 'Create personal productivity environments' setting

B.Assign a security group to the environment in the Power Platform admin center

C.Set environment capacity limits

D.Configure a data loss prevention (DLP) policy

AnswerB

Security groups control which users can access the environment.

Why this answer

Option B is correct because assigning a security group to an environment in the Power Platform admin center restricts access to only members of that Microsoft Entra ID group. This is the standard method for controlling user access to a Power Platform environment, ensuring that only authorized users can interact with its resources.

Exam trap

The trap here is that candidates often confuse access control (security group assignment) with data governance (DLP policies) or capacity management, leading them to select options that address different administrative concerns.

How to eliminate wrong answers

Option A is wrong because disabling the 'Create personal productivity environments' setting only prevents users from creating their own personal environments; it does not restrict access to an existing environment. Option C is wrong because setting environment capacity limits controls storage and API usage, not user authentication or authorization. Option D is wrong because configuring a data loss prevention (DLP) policy governs data movement between connectors and services, not user access to the environment itself.

Practice this question →

153

Multi-Selecteasy

An administrator needs to assign user roles in a Power Platform environment. Which TWO roles can be assigned to allow users to create and edit Power Apps and flows, but not manage environments?

Select 2 answers

A.System Customizer

B.Basic User

C.System Administrator

D.Global Administrator

E.Environment Maker

AnswersB, E

Basic User can use apps but not manage environments.

Why this answer

Environment Maker and Basic User roles allow creation and use of apps without environment management. Option A is wrong because System Administrator manages environments. Option D is wrong because System Customizer customizes system.

Option E is wrong because Global Admin has tenant-wide management.

Practice this question →

154

MCQeasy

A Power Platform admin receives a request to allow a group of developers to create and manage environments within a tenant. What is the minimum role assignment required?

A.Assign the System Administrator role in each environment.

B.Assign the Global Administrator role in Microsoft Entra ID.

C.Assign the Dynamics 365 Administrator role.

D.Assign the Environment Admin role in the Power Platform admin center.

AnswerD

Environment Admin can create and manage environments.

Why this answer

The Environment Admin role in the Power Platform admin center is the minimum role required to create and manage environments within a tenant. This role grants the necessary permissions to provision, modify, and delete environments without needing broader tenant-wide administrative privileges.

Exam trap

The trap here is that candidates often confuse the Environment Admin role with the System Administrator role, assuming that managing environments requires full administrative access within each environment, rather than understanding that environment creation is a tenant-level administrative action.

How to eliminate wrong answers

Option A is wrong because the System Administrator role is scoped to a single environment and does not grant the ability to create new environments across the tenant. Option B is wrong because the Global Administrator role in Microsoft Entra ID is a highly privileged tenant-wide role that is not required for environment management; it would over-provision permissions and violate the principle of least privilege. Option C is wrong because the Dynamics 365 Administrator role is focused on managing Dynamics 365 instances and settings, not the full environment lifecycle in the Power Platform admin center.

Practice this question →

155

MCQmedium

A company uses Power BI dashboards to monitor real-time production metrics. The dashboards use DirectQuery to a SQL Server database. Users report that the dashboards are slow during peak hours. What is the most effective first step to improve performance?

A.Optimize the SQL queries used in the dataset

B.Create aggregations in the dataset

C.Increase the Power BI Premium capacity

D.Switch the dataset to Import mode

AnswerA

Optimizing queries reduces load on the source and improves responsiveness.

Why this answer

Option B is correct because optimizing the source query can reduce the amount of data processed. Option A is wrong because increasing capacity may help but is not the first step. Option C is wrong because switching to Import mode would require scheduled refreshes and is not real-time.

Option D is wrong because aggregations are useful but creating them without query optimization may not address the root cause.

Practice this question →

156

Multi-Selectmedium

Which TWO actions are necessary to enable AI Builder in a Power Apps environment? (Select 2)

Select 2 answers

A.Install AI Builder connectors

B.Purchase AI Builder credits

C.Create a DLP policy that allows AI Builder

D.Enable AI Builder in the environment

E.Assign a Power Automate license to users

AnswersB, D

AI Builder requires a paid add-on or credits.

Why this answer

Option B is correct because AI Builder requires an add-on license. Option D is correct because AI Builder must be enabled in the environment. Option A is wrong because AI Builder works with standard connectors.

Option C is wrong because no Power Automate license is required to use AI Builder in Power Apps. Option E is wrong because DLP policies are not required for AI Builder enablement.

Practice this question →

157

Multi-Selecthard

An administrator is planning to deploy a solution across multiple environments. Which THREE practices should they follow?

Select 3 answers

A.Create separate environments for development, test, and production

B.Use managed solutions in test and production environments

C.Export solutions as managed when moving from development

D.Use unmanaged solutions in production for easier modifications

E.Copy the entire development environment to test and production

AnswersA, B, C

Separate environments provide isolation and controlled deployment.

Why this answer

Options A, C, and D are correct. Using managed solutions in test/production is a best practice. Exporting solutions as managed is standard for deployment.

Creating separate development environments ensures isolation. Option B is wrong because unmanaged solutions should not be used in production. Option E is wrong because copying the entire environment is not a targeted deployment.

Practice this question →

158

MCQhard

A Power Platform administrator is configuring a data loss prevention (DLP) policy for a production environment. The policy must block the use of the SharePoint connector but allow the use of the SQL Server connector. The administrator creates a policy and assigns it to the environment. However, users can still use the SharePoint connector. What is the most likely reason?

A.The policy was not assigned to the correct environment.

B.The users have the System Administrator role in the environment.

C.A tenant-level DLP policy allows SharePoint and is set to a higher priority.

D.The DLP policy has not been saved and published.

AnswerC

Environment policies can be overridden by tenant policies if configured.

Why this answer

DLP policies can be set at the tenant level or environment level. If a tenant-level policy allows SharePoint, it overrides the environment-level policy unless the environment policy is set to be more restrictive. Option A is incorrect because the policy was assigned.

Option C is incorrect because the user's role does not bypass DLP. Option D is incorrect because policies take effect immediately.

Practice this question →

159

MCQhard

A global organization has multiple geographic regions and needs to comply with data residency requirements. Each region must have its own Power Platform environment with data stored locally. What is the recommended approach to manage these environments?

A.Use Microsoft Entra ID conditional access policies to enforce data location.

B.Create separate tenants for each region.

C.Create separate environments for each region within the same tenant.

D.Create a single environment and use data policies to restrict data access by region.

AnswerC

Each environment can be provisioned in a specific region to meet data residency.

Why this answer

The correct approach is to create separate environments for each region, as Power Platform supports multiple environments within the same tenant. Option A is incorrect because a single environment cannot enforce data residency for multiple regions. Option B is incorrect because creating a separate tenant per region complicates management and is not recommended.

Option D is incorrect because using Microsoft Entra ID groups does not address data residency.

Practice this question →

160

MCQhard

A large enterprise uses Microsoft Power Platform with a centralized Center of Excellence (CoE). They have over 200 environments, each assigned to different business units. The security team requires that all environments enforce multi-factor authentication (MFA) for makers and admins. Additionally, they want to ensure that environment creation is limited to a specific security group. The current setup uses Microsoft Entra ID for identity. The admin needs to implement these requirements with minimal impact on existing users. What should the admin do?

A.Use the Power Platform admin center to assign the 'Environment Maker' role to the security group.

B.Configure a Conditional Access policy in Microsoft Entra ID requiring MFA for the Power Platform app registration.

C.Create a Power Automate flow to monitor environment creation and send alerts.

D.Enable MFA within each Power Platform environment's settings.

AnswerB

Conditional Access policies enforce MFA for all Power Platform access. Restricting environment creation is done via Admin Center.

Why this answer

MFA is enforced through Conditional Access policies in Microsoft Entra ID, not within Power Platform. To limit environment creation, the admin should use the Power Platform Admin Center settings to restrict creation to a security group.

Practice this question →

161

Multi-Selecteasy

Which TWO of the following are valid reasons to create multiple Power Platform environments?

Select 2 answers

A.To increase the total storage capacity available.

B.To isolate data for different business units or projects.

C.To improve performance of Power Automate flows.

D.To separate development, testing, and production workloads.

E.To reduce the cost of Power Apps licenses.

AnswersB, D

Isolation helps with data governance and security.

Why this answer

Option B is correct because Power Platform environments act as security and data boundaries, allowing organizations to isolate data for different business units or projects. Each environment has its own Dataverse database, which prevents data leakage and enables role-based access control tailored to specific teams or initiatives.

Exam trap

The trap here is that candidates may confuse environment isolation with performance or cost benefits, but the PL-900 exam specifically tests the understanding that environments are primarily for data and workload separation, not for scaling or licensing savings.

Practice this question →

162

MCQmedium

An organization has several Power Platform environments used for development and testing. They want to prevent accidental deletion of important data. What strategy should they implement?

A.Regularly export all data to Excel files and store them in OneDrive.

B.Set environment capacity limits to prevent storage of excessive data.

C.Enable versioning on all SharePoint lists used by Power Apps.

D.Use the Power Platform admin center to configure environment backups and enable solution checker.

AnswerD

Backups allow recovery; solution checker helps enforce best practices to avoid data loss.

Why this answer

Option D is correct because the Power Platform admin center provides automated daily backups (with a 28-day retention for production environments) and allows manual backups, which directly protects against accidental data loss. Enabling solution checker is a separate best practice for quality assurance, but the core strategy for preventing accidental deletion is leveraging the built-in backup and restore capabilities.

Exam trap

The trap here is that candidates may confuse data protection strategies (like backups) with data governance tools (like capacity limits or solution checker), or assume that manual exports to Excel are a sufficient enterprise-grade backup solution.

How to eliminate wrong answers

Option A is wrong because manually exporting data to Excel files stored in OneDrive is not a scalable or reliable strategy; it introduces human error, lacks automation, and does not provide point-in-time restore capabilities for the entire environment. Option B is wrong because setting environment capacity limits prevents storage of excessive data but does not protect against accidental deletion of existing important data; it only caps future growth. Option C is wrong because versioning on SharePoint lists only protects data within SharePoint lists used by Power Apps, not the entire Power Platform environment (including Dataverse tables, flows, and apps), and does not provide environment-level backup or restore.

Practice this question →

163

MCQmedium

Refer to the exhibit. The JSON shows a Power Platform environment's properties in an ARM template. Based on the exhibit, which statement about this environment is true?

A.This environment is a Standalone environment without any linked environments.

B.This environment is a Production environment linked to a Sandbox environment.

C.This environment is a Sandbox environment linked to a Dynamics 365 instance.

D.This environment is a Production environment with no data storage.

AnswerB

The environmentType is Production, and linkedEnvironmentMetadata shows a Sandbox.

Why this answer

The exhibit shows an ARM template with properties including 'environmentType': 'Production' and 'linkedEnvironmentId' referencing a Sandbox environment. This indicates the Production environment is linked to a Sandbox environment for data synchronization or development purposes, which is a common configuration in Power Platform for lifecycle management. The presence of a linked environment ID confirms it is not standalone, and the environment type is Production, not Sandbox.

Exam trap

The trap here is that candidates often assume a Production environment cannot be linked to a Sandbox environment, or they confuse the 'environmentType' value with the linked environment's type, leading them to incorrectly select Option C or D.

How to eliminate wrong answers

Option A is wrong because the ARM template includes a 'linkedEnvironmentId' property, which means this environment is linked to another environment, so it is not a Standalone environment. Option C is wrong because the 'environmentType' property is set to 'Production', not 'Sandbox', so this environment is not a Sandbox environment. Option D is wrong because the ARM template does not indicate any restriction on data storage; the 'linkedEnvironmentId' and 'environmentType' properties do not imply 'no data storage', and Production environments typically have data storage.

Practice this question →

164

Multi-Selecthard

An administrator is managing a Power Platform environment that uses Microsoft Entra ID for authentication. The company wants to enforce multi-factor authentication (MFA) for all users accessing Power Apps. Which THREE configurations should the administrator implement? (Choose three.)

Select 3 answers

A.Configure the environment's 'User authentication' setting to 'Require MFA' in Power Platform admin center

B.Disable security group membership for the environment

C.Enable MFA in the environment's security settings under 'Require MFA'

D.Create a conditional access policy in Microsoft Entra ID that requires MFA for all cloud apps

E.Assign the 'System Administrator' role to all users

AnswersA, C, D

This setting enforces MFA for the environment.

Why this answer

Option A is correct because the Power Platform admin center provides a direct 'Require MFA' setting under environment 'User authentication' that enforces MFA for all users accessing Power Apps within that environment. This setting works in conjunction with Microsoft Entra ID to require a second factor during authentication, ensuring that all users must pass MFA before accessing the environment's resources.

Exam trap

The trap here is that candidates may think MFA can only be enforced via Entra ID conditional access policies (Option D), but the Power Platform admin center has its own 'Require MFA' toggle that works independently, and the question asks for three configurations, so both the admin center setting and a conditional access policy are valid approaches.

Practice this question →