The correct approach is to use Power Pages for the patient portal, Dataverse for storage, and Power Automate for notifications. Power Pages is purpose-built for creating secure, externally-facing websites, making it the ideal choice for a HIPAA compliant patient portal where patients can fill intake forms on their own devices. Dataverse provides the underlying data platform with built-in encryption, auditing, and role-based security, which are essential for meeting HIPAA’s strict storage and compliance requirements. Power Automate then handles the workflow by triggering staff notifications the moment a form is completed. On the PL-900 exam, this scenario tests your understanding of how each Power Platform component maps to a specific business need: Power Pages for external access, Dataverse for secure storage, and Power Automate for automation. A common trap is to confuse Power Apps with Power Pages—remember that Power Apps is for internal or authenticated users, while Power Pages is for anonymous or external patient self-service. Memory tip: “Pages for patients, Dataverse for data, Automate for alerts.”
PL-900 Practice Question: Describe the business value of Microsoft Power Platform
This PL-900 practice question tests your understanding of describe the business value of microsoft power platform. Read the scenario carefully and evaluate each option against the stated constraints before committing to an answer. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
A healthcare provider wants to digitize patient intake forms. The solution must comply with HIPAA and allow patients to fill forms on their own devices. The data should be stored securely, and staff should receive notifications when a form is completed. Which approach using Power Platform should they take?
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use Power Pages for the patient portal, Dataverse for storage, and Power Automate for notifications
Option B is correct because Power Pages provides a secure, externally-facing portal where patients can fill forms on their own devices, Dataverse (the underlying data platform) supports HIPAA-compliant storage with encryption and auditing, and Power Automate can trigger notifications to staff when a form is completed. This combination meets all requirements: patient self-service, secure storage, and automated alerts.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✗
Build a Power Apps canvas app for patients and use Power Automate for notifications
Why it's wrong here
Canvas apps require authentication, not ideal for anonymous patient access.
✓
Use Power Pages for the patient portal, Dataverse for storage, and Power Automate for notifications
Why this is correct
Power Pages allows external access, Dataverse provides HIPAA compliance, Power Automate sends notifications.
Related concept
Read the scenario before looking for a memorised answer.
✗
Use Power BI dashboards for patients to submit data and Power Automate for notifications
Why it's wrong here
Power BI is not a data entry tool.
✗
Use Power Automate with AI Builder to process forms and store results in SharePoint
Why it's wrong here
AI Builder is not needed, and SharePoint may not meet all HIPAA requirements.
Common exam traps
Common exam trap: answer the scenario, not the keyword
The trap here is that candidates may think Power Apps canvas apps can be used for external users, but they require licensing and tenant access, whereas Power Pages is specifically designed for anonymous or authenticated external user portals.
Detailed technical explanation
How to think about this question
Power Pages (formerly Power Apps portals) uses Azure AD B2C for external authentication, allowing patients to log in with their own identity providers. Dataverse provides row-level security, field-level encryption, and audit logging, which are essential for HIPAA compliance. Power Automate can use the 'When a row is added, modified, or deleted' trigger on the Dataverse table to send notifications via email or Teams, ensuring staff are alerted in real time.
KKey Concepts to Remember
Read the scenario before looking for a memorised answer.
Find the constraint that changes the correct option.
Eliminate answers that are true in general but not in this case.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A media company stores terabytes of video archives that are accessed once a year for audit purposes. Moving these objects to a cold storage tier (Azure Archive, S3 Glacier, or Google Nearline) costs a fraction of hot storage. Questions like this test whether you understand storage tiers, access frequency tradeoffs, and retrieval latency requirements.
What to study next
Got this wrong? Here's your next step.
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Describe the business value of Microsoft Power Platform — This question tests Describe the business value of Microsoft Power Platform — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: Use Power Pages for the patient portal, Dataverse for storage, and Power Automate for notifications — Option B is correct because Power Pages provides a secure, externally-facing portal where patients can fill forms on their own devices, Dataverse (the underlying data platform) supports HIPAA-compliant storage with encryption and auditing, and Power Automate can trigger notifications to staff when a form is completed. This combination meets all requirements: patient self-service, secure storage, and automated alerts.
What should I do if I get this PL-900 question wrong?
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Refer to the exhibit. The JSON snippet represents an ARM template for deploying a Power Apps app. The deployment fails with an error that the environment 'Environment1' does not exist. What is the most likely reason?
hard
A.The app name contains invalid characters.
B.The lifecycleId should be 'Development' instead of 'Production'.
C.The apiVersion is incorrect.
✓ D.The environment ID is not a full ARM resource ID.
Why D: Option D is correct because ARM templates require the environment to be specified as a full Azure resource ID (e.g., `/providers/Microsoft.PowerApps/environments/{environmentId}`) to uniquely identify the target environment across tenants and subscriptions. The error 'environment does not exist' indicates that the provided ID is likely a short name or GUID, not the full ARM resource path, so the deployment cannot resolve the environment.
Last reviewed: Jun 24, 2026
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.