hardMultiple ChoiceObjective-mapped
PL-900 ARM template Practice Question
Exhibit
{"text":"Refer to the exhibit.\n\n{\n \"$schema\": \"https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#\",\n \"contentVersion\": \"1.0.0.0\",\n \"parameters\": {\n \"websiteName\": {\n \"type\": \"string\",\n \"defaultValue\": \"contosoportal\"\n }\n },\n \"resources\": [\n {\n \"type\": \"Microsoft.Web/sites/config\",\n \"apiVersion\": \"2022-09-01\",\n \"name\": \"[concat(parameters('websiteName'), '/appsettings')]\",\n \"properties\": {\n \"PortalEndpoint\": \"https://contosoportal.powerappsportals.com\",\n \"AuthenticationEnabled\": \"true\",\n \"AllowedExternalDomains\": \"contoso.com\"\n }\n }\n ]\n}","description":"An ARM template snippet for configuring Power Pages app settings."}Refer to the exhibit. You are reviewing an ARM template for deploying a Power Pages site. The template sets the 'AllowedExternalDomains' to 'contoso.com'. What is the purpose of this setting?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Restrict authentication to users from contoso.com.
The 'AllowedExternalDomains' setting in an ARM template for Power Pages restricts which external domains can be used for authentication. By setting it to 'contoso.com', only users from that domain can sign in, matching option A. Option B is incorrect because it does not allow any domain; option C is incorrect because CORS is not controlled by this setting; option D is incorrect because this setting does not control embedding content.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Restrict authentication to users from contoso.com.
Why this is correct
Only users from the specified domain can authenticate.
- ✗
Allow users from any external domain to sign in.
Why it's wrong here
The setting restricts to contoso.com only.
- ✗
Enable cross-origin resource sharing (CORS) for contoso.com.
Why it's wrong here
CORS is configured separately.
- ✗
Allow embedding of content from contoso.com.
Why it's wrong here
This setting is for authentication, not embedding.
Go deeper
Related to this question
About these practice questions
This PL-900 question is part of Courseiva's 904-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.