Manage the Microsoft Power Platform environment →mediumMultiple ChoiceObjective-mapped

PL-900 Data Loss Prevention (DLP) policy Practice Question

Exhibit

{
  "policyName": "Block Social Connectors",
  "description": "Prevent use of social media connectors in all environments",
  "environments": ["All"],
  "connectorClassification": ["Blocked"],
  "connectors": ["Twitter", "Facebook", "LinkedIn"],
  "action": "Block"
}

An administrator configures a Data Loss Prevention (DLP) policy with the scope set to 'All environments' and places selected connectors in the 'Blocked' group. What will be the result of this policy?

⚠ Common exam trap

Candidates often confuse the scope of DLP policies. A policy applied to 'All environments' affects every environment, including the default environment. The configuration clearly sets the scope to 'All environments' and the connectors are in the 'Blocked' group.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The connectors are blocked in all environments

The DLP policy is configured with the scope set to 'All environments' and the selected connectors are in the 'Blocked' group. Therefore, these connectors are blocked in every environment, including production and non-production. Option A is incorrect because audit mode is not enabled; the connectors are blocked, not audited. Option B is incorrect because the policy applies to all environments, not just production. Option D is incorrect because there is no exception for the default environment—the policy applies universally.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✗
The connectors are allowed but audited
Why it's wrong here
Incorrect. The exhibit shows the connectors are in the 'Blocked' group, not in 'Audit only' mode. Also, audit mode does not block connectors—it only logs usage.
✗
The connectors are blocked only in production environments
Why it's wrong here
Incorrect. The policy is set to 'All environments', so it applies to production and non-production environments alike. There is no filter for only production.
✓
The connectors are blocked in all environments
Why this is correct
Correct. The policy scope is 'All environments' and the connectors are blocked, meaning they cannot be used in any environment.
✗
The connectors are blocked except for the default environment
Why it's wrong here
Incorrect. There is no exclusion for the default environment. The policy applies to all environments, including the default.

Go deeper

PL-900 Data Loss Prevention (DLP) policy Practice Question

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question