hardMultiple ChoiceObjective-mapped
PL-900 Practice Question: A Power Platform consultant for a large…
You are a Power Platform consultant for a large university that wants to build a public-facing Power Pages site for alumni. The site must allow alumni to register, update their profile, view upcoming events, and donate to the university. The university uses Microsoft Entra ID for staff and students, but alumni will use their personal email accounts to register. The security team requires that all data transmitted between the browser and the portal be encrypted. Additionally, the alumni relations team needs to send targeted emails to alumni based on their interests, which are captured during registration. The development team wants to use a low-code approach to integrate the donation functionality, which should process payments through a third-party payment gateway. You need to design the solution. Which of the following is the best approach?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable HTTPS for the site (default), store alumni profiles and interests in Dataverse, use Power Automate with a custom connector for payment processing, and use Power Automate to send targeted emails.
The best approach. Power Pages enables HTTPS by default, ensuring encrypted data transmission. Alumni can register using personal accounts via local authentication or external identity providers (like Microsoft Entra ID, but not required). Storing profiles and interests in Dataverse allows the alumni relations team to use Power Automate to send targeted emails based on interests. For payment processing, a custom connector in Power Automate can be built to call the third-party payment gateway, satisfying the low-code requirement. Option A is incorrect because using a custom web API with Liquid contradicts the low-code requirement and adds complexity. Option B is incorrect because requiring alumni to create Microsoft accounts and using Entra ID as the only provider would prevent alumni from using personal email accounts, which is a requirement. Option C is incorrect because using custom JavaScript for payment processing violates the low-code approach and may introduce security risks.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create a custom web API in Azure to handle payments and call it from Power Pages using Liquid.
Why it's wrong here
Creating a custom web API in Azure contradicts the low-code requirement stated in the stem, as it introduces custom development and maintenance overhead that Power Platform’s native payment connector or Power Automate integration avoids. This option is tempting because a custom API offers full control over payment logic and would be correct if the team needed complex, non-standard payment workflows that no existing connector supports.
- ✗
Configure Microsoft Entra ID as the only identity provider and require alumni to create a Microsoft account.
Why it's wrong here
Using only Microsoft Entra ID restricts alumni who have personal email accounts; Power Pages supports local authentication for external users.
- ✗
Use the Power Pages design studio to build the donation page with custom JavaScript to call the payment gateway API.
Why it's wrong here
Using custom JavaScript to call the payment gateway violates the low-code requirement; Power Automate can handle payment processing via a custom connector.
- ✓
Enable HTTPS for the site (default), store alumni profiles and interests in Dataverse, use Power Automate with a custom connector for payment processing, and use Power Automate to send targeted emails.
Why this is correct
This approach uses built-in HTTPS, Dataverse for profile storage, Power Automate for payment processing and targeted emails, fully meeting requirements with low-code.
Go deeper
Related to this question
About these practice questions
This PL-900 question is part of Courseiva's 904-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.