PL-900 Practice Question: Manage the Microsoft Power Platform environment
Your organization has a Power Apps portal that allows external users to submit support tickets. You need to ensure that only authenticated external users from specific domains can access the portal. What should you configure?
⚠ Common exam trap
Test-takers frequently confuse DLP policies (which control data connectors) with access control mechanisms, or they mistakenly believe that simply sharing a URL (security by obscurity) or using IP restrictions (which don't authenticate users) can satisfy domain-based authentication requirements.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure the portal to use Microsoft Entra ID authentication and set up domain restrictions.
Power Apps portals can be configured to use Microsoft Entra ID (formerly Azure AD) as the identity provider, and within the portal settings you can restrict sign-in to users from specific domains. This ensures that only authenticated external users whose email domain matches the allowed list can access the portal, meeting the requirement without relying on IP filtering or obscurity.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Create a data loss prevention (DLP) policy that blocks external users.
Why it's wrong here
DLP policies control connector usage, not portal access.
- ✗
Restrict access to the portal by IP address using a web application firewall.
Why it's wrong here
IP restrictions are for network-level access, not user authentication.
- ✗
Share the portal URL only with users from the allowed domains.
Why it's wrong here
Sharing the URL does not enforce authentication or domain restrictions.
- ✓
Configure the portal to use Microsoft Entra ID authentication and set up domain restrictions.
Why this is correct
Microsoft Entra ID allows domain-based access restrictions.
Go deeper
Related to this question
About these practice questions
One of 904 original PL-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.