Manage the Microsoft Power Platform environment →easyMultiple ChoiceObjective-mapped

PL-900 Practice Question: Manage the Microsoft Power Platform environment

Exhibit

Refer to the exhibit.
{
  "policyName": "Block Social Connectors",
  "scope": "TenantLevel",
  "environmentType": "All",
  "connectors": [
    {
      "id": "/providers/Microsoft.PowerApps/apis/shared_facebook",
      "action": "Block"
    },
    {
      "id": "/providers/Microsoft.PowerApps/apis/shared_twitter",
      "action": "Block"
    },
    {
      "id": "/providers/Microsoft.PowerApps/apis/shared_linkedin",
      "action": "Block"
    }
  ]
}

Refer to the exhibit. A Power Platform administrator creates a DLP policy as shown. What is the effect of this policy?

⚠ Common exam trap

It's easy for candidates to confuse 'Blocked' with 'Non-Business' or assume the policy only applies to production environments, when the exhibit explicitly shows 'All environments' selected.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Facebook, Twitter, and LinkedIn connectors are blocked tenant-wide

The exhibit shows a Data Loss Prevention (DLP) policy configured with the 'Social media' category set to 'Blocked' for all environments. This means the Facebook, Twitter, and LinkedIn connectors are explicitly blocked tenant-wide, preventing their use in any environment (production, sandbox, or default). Option C correctly identifies this outcome.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
Facebook, Twitter, and LinkedIn connectors are allowed in all environments
Why it's wrong here
The action is Block, not Allow.
✗
All social media connectors are blocked in all environments
Why it's wrong here
Only Facebook, Twitter, and LinkedIn are explicitly blocked.
✓
Facebook, Twitter, and LinkedIn connectors are blocked tenant-wide
Why this is correct
The policy blocks these three connectors at the tenant level.
✗
The policy only applies to production environments
Why it's wrong here
The environmentType is All, so it applies to all environment types.

Go deeper

1 more way this is tested on PL-900

These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.

Variation 1. An administrator configures a Data Loss Prevention (DLP) policy with the scope set to 'All environments' and places selected connectors in the 'Blocked' group. What will be the result of this policy?

medium

A.The connectors are allowed but audited
B.The connectors are blocked only in production environments
✓ C.The connectors are blocked in all environments
D.The connectors are blocked except for the default environment

Why C: The DLP policy is configured with the scope set to 'All environments' and the selected connectors are in the 'Blocked' group. Therefore, these connectors are blocked in every environment, including production and non-production. Option A is incorrect because audit mode is not enabled; the connectors are blocked, not audited. Option B is incorrect because the policy applies to all environments, not just production. Option D is incorrect because there is no exception for the default environment—the policy applies universally.

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.

PL-900 Practice Question: Manage the Microsoft Power Platform environment

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question

1 more way this is tested on PL-900