PL-900 Practice Question: Describe the business value of Microsoft Power Platform
Which TWO of the following are best practices for managing Power Platform environments in an enterprise? (Choose two.)
⚠ Common exam trap
Candidates often think disabling auditing improves performance (Option C) or that a single environment simplifies management (Option D), but the PL-900 exam emphasizes governance, security, and ALM separation as core best practices.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement Data Loss Prevention (DLP) policies to control data flow between connectors.
Option B is correct because Data Loss Prevention (DLP) policies in the Power Platform Admin Center let administrators classify connectors into Business, Non-Business, and Blocked groups, preventing sensitive data from flowing between incompatible connectors and enforcing enterprise governance. Option E is correct because separating development, testing, and production into distinct environments isolates changes, supports managed solutions and deployment pipelines, and prevents unverified customizations from affecting live business data. Options A, C, and D are not best practices: sharing all connectors and data sources by default violates least-privilege and exposes sensitive data, disabling auditing removes the compliance and security trail needed for enterprise oversight, and using a single environment for all workloads mixes development and production, risking instability and data corruption.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Share all connectors and data sources with all users by default.
Why it's wrong here
Sharing every connector and data source with all users grants broad access to sensitive data and violates least-privilege, since connections inherit the credentials of whoever owns them. It is tempting because it removes per-user connection setup friction, which suits small pilots or personal productivity environments.
- ✓
Implement Data Loss Prevention (DLP) policies to control data flow between connectors.
Why this is correct
DLP policies define which connectors may share data within a tenant, blocking combinations that could leak business data to consumer services. This satisfies the enterprise governance requirement by enforcing connector classification across environments and apps centrally.
- ✗
Disable auditing to improve performance.
Why it's wrong here
Disabling auditing removes the Dataverse audit log that records record changes and access, which enterprise governance and compliance investigations depend on. It is tempting because auditing writes add storage and processing overhead, so teams disable it to reduce cost or latency in non-production environments.
- ✗
Use a single environment for all development and production workloads.
Why it's wrong here
A single environment mixes unmanaged development solutions with production data, so a developer's unpublished changes deploy straight into live workloads with no isolation. It is tempting because it avoids environment provisioning and solution promotion effort, which suits individual makers or proof-of-concept work.
- ✓
Use separate environments for development, testing, and production.
Why this is correct
Separate development, testing, and production environments isolate work in progress from live solutions, preventing unvalidated changes from affecting business users. This satisfies the enterprise management requirement by supporting controlled application lifecycle management and safe deployment promotion.
Go deeper
Related to this question
About these practice questions
This PL-900 question is part of Courseiva's 701-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.