DLP Policy Effects on Connectors
Exhibit
Refer to the exhibit.
{
"policy": {
"connectors": {
"blocked": ["Microsoft SharePoint"]
},
"environment": {
"type": "Production"
}
}
}Refer to the exhibit. A Power Platform admin creates a DLP policy with this JSON configuration. What is the effect?
Quick Answer
This DLP policy is scoped to the Production environment type and sets the SharePoint connector's classification to Blocked, and those two settings together determine the answer: the policy doesn't target one named environment, it targets an environment type, so it applies to every environment that falls into the production category, including the default environment. It's easy to misread a DLP policy by focusing on the connector alone and forgetting that the scope field is what determines breadth of enforcement, since a policy can block the same connector but apply narrowly to one environment or broadly to a whole environment type depending on how scope is configured. The connector-level action ('Blocked') and the environment-level scope ('Environment' type set to Production) work independently: the first decides what happens to the connector, the second decides where that decision applies. That's also why the SharePoint connector alone is affected here rather than every SharePoint-related or on-premises connector, and why the policy isn't limited to a single business data group or the default environment specifically, since those would require a different scope or classification setting entirely. When you see a DLP policy question on the exam, read the scope and environment-type fields as carefully as the connector classification itself, since the combination of the two is almost always what the question is actually testing.
⚠ Common exam trap
A common mix-up: candidates assume 'Blocked' only applies to the default environment, but the 'Environment' scope in the JSON applies the policy to all production environments, not just the default one.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The SharePoint connector is blocked in all production environments.
The JSON configuration sets the SharePoint connector to 'Blocked' with the scope 'Environment', meaning it applies to all production environments. Therefore, the SharePoint connector is blocked in all production environments, including the default one, making option A correct. Option B is incorrect because the policy only blocks the SharePoint connector, not all SharePoint Online and on-premises connectors. Option C is incorrect because the connector is blocked, not restricted to the business data group. Option D is incorrect because the policy applies to all production environments, not just the default environment.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The SharePoint connector is blocked in all production environments.
Why this is correct
The policy applies to environments with type Production and blocks the SharePoint connector.
- ✗
The policy blocks all SharePoint Online and SharePoint on-premises connectors.
Why it's wrong here
The connector name 'Microsoft SharePoint' typically refers to SharePoint Online; on-premises may have a different connector name.
- ✗
The SharePoint connector is restricted to the business data group.
Why it's wrong here
The JSON uses 'blocked', not 'restricted'.
- ✗
The SharePoint connector is blocked only in the default environment.
Why it's wrong here
The JSON does not specify environment name; it specifies type Production.
Go deeper
Related to this question
About these practice questions
This PL-900 question is part of Courseiva's 904-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on PL-900
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Refer to the exhibit. A Power Platform administrator applies this DLP policy to the default environment. What is the result?
hard- A.All connectors are allowed
- B.All connectors are blocked
- C.The policy applies to all environments
- ✓ D.Microsoft Teams and Twitter connectors are blocked in the default environment
Why D: The exhibit shows a Data Loss Prevention (DLP) policy configured with Microsoft Teams and Twitter connectors in the 'Blocked' group. Since this policy is applied to the default environment, only those two connectors are blocked in that environment. All other connectors remain in the 'Allowed' group by default, so they are permitted. Therefore, the correct result is that Microsoft Teams and Twitter connectors are blocked in the default environment.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.