This PL-900 practice question tests your understanding of manage the microsoft power platform environment. This is a configuration task: choose the command set that satisfies every stated requirement. Small differences — like 'secret' vs 'password' or 'transport input ssh' vs 'all' — change whether the answer is correct. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
Which TWO settings can you configure in a Power Platform environment to control data loss prevention?
Connector sharing settings
Why wrong: Sharing settings are not DLP.
Environment security roles
Why wrong: Security roles control user permissions, not DLP.
Audit logging configuration
Why wrong: Audit logging is for tracking changes, not DLP.
Default action for connectors
The default action (block or allow) is a DLP setting.
Environment-specific DLP policies
DLP policies can be assigned to specific environments.
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Default action for connectors
Option D is correct because the 'Default action for connectors' setting in a Power Platform environment allows administrators to define the default behavior (e.g., Block, Allow, or Audit) for connectors that are not explicitly covered by a DLP policy. This setting directly controls data loss prevention by preventing data from being shared with unmanaged or risky connectors. Option E is correct because environment-specific DLP policies enable granular control over which connectors can be used together, preventing data from flowing between business and non-business connectors within that environment.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Connector sharing settings
Why it's wrong here
Sharing settings are not DLP.
Environment security roles
Why it's wrong here
Security roles control user permissions, not DLP.
Audit logging configuration
Why it's wrong here
Audit logging is for tracking changes, not DLP.
Default action for connectors
Why this is correct
The default action (block or allow) is a DLP setting.
Related concept
Read the scenario before looking for a memorised answer.
Environment-specific DLP policies
Why this is correct
DLP policies can be assigned to specific environments.
Related concept
Read the scenario before looking for a memorised answer.
Common exam traps
The trap here is that candidates often confuse 'connector sharing settings' (which control access and sharing permissions) with DLP policies (which control data flow and connector grouping), leading them to incorrectly select Option A.
Detailed technical explanation
Under the hood, Power Platform DLP policies use connector classification (Business, Non-Business, Blocked) to enforce data flow restrictions. The 'Default action for connectors' setting applies to any connector not explicitly classified, and when set to 'Block', it prevents data from being sent to or received from that connector. Environment-specific DLP policies override tenant-level policies, allowing admins to tailor restrictions per environment, which is critical for scenarios like isolating development environments from production data flows.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
A company's IT admin needs to give a contractor read-only access to production logs without sharing account credentials. Using role-based access control (RBAC) and temporary scoped permissions — not a permanent shared password — is the correct pattern. Questions like this test whether you can apply least-privilege access across cloud identity services.
What to study next
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Manage the Microsoft Power Platform environment — study guide chapter
Learn the concepts, then practise the questions
Manage the Microsoft Power Platform environment practice questions
Targeted practice on this topic area only
All PL-900 questions
976 questions across all exam domains
Microsoft Power Platform Fundamentals PL-900 study guide
Full concept coverage aligned to exam objectives
PL-900 practice test guide
How to use practice tests most effectively before exam day
Related practice questions
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
Practise PL-900 questions linked to Identify foundational components of Power Platform.
Practise PL-900 questions linked to Demonstrate capabilities of Power BI.
Practise PL-900 questions linked to Describe complementary Microsoft Power Platform solutions.
Practise PL-900 questions linked to Demonstrate the capabilities of Power Automate.
Practise PL-900 questions linked to Describe the business value of Microsoft Power Platform.
Practise PL-900 questions linked to Manage the Microsoft Power Platform environment.
Practise PL-900 questions linked to Identify foundational components of Microsoft Power Platform.
Practise PL-900 questions linked to Demonstrate the capabilities of Power BI.
Practise PL-900 questions linked to Demonstrate the capabilities of Power Apps.
Practise PL-900 questions linked to Demonstrate the capabilities of Microsoft Copilot Studio.
Practise PL-900 questions linked to Demonstrate the capabilities of Power Pages.
Practise PL-900 questions linked to PL-900 fundamentals.
Practice this exam
Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.
FAQ
Manage the Microsoft Power Platform environment — This question tests Manage the Microsoft Power Platform environment — Read the scenario before looking for a memorised answer..
The correct answer is: Default action for connectors — Option D is correct because the 'Default action for connectors' setting in a Power Platform environment allows administrators to define the default behavior (e.g., Block, Allow, or Audit) for connectors that are not explicitly covered by a DLP policy. This setting directly controls data loss prevention by preventing data from being shared with unmanaged or risky connectors. Option E is correct because environment-specific DLP policies enable granular control over which connectors can be used together, preventing data from flowing between business and non-business connectors within that environment.
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Keep practising
Last reviewed: Jun 24, 2026
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.