PL-900 Demonstrate the capabilities of Power Apps Practice Question
Your organization is a multi-national corporation using Microsoft Power Platform. The compliance team requires that all Power Apps apps be auditable: every data modification (create, update, delete) must be logged with the user, timestamp, and old/new values. Additionally, the app must enforce that only users from the same business unit can view each other's records. The app uses Dataverse as the data source. You need to design the solution. Which approach should you take?
⚠ Common exam trap
PL-900 often tests the difference between native platform security features (business unit security, Dataverse auditing) and custom workarounds (Power Automate logging, separate audit tables) — candidates overcomplicate the solution by choosing custom approaches when native features fully satisfy the requirements.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable Dataverse auditing for the entity and configure business unit security to restrict access
Enabling Dataverse auditing for the entity captures all create, update, and delete operations with user, timestamp, and old/new values — this is native Dataverse functionality that requires no custom development. Configuring business unit security ensures that users can only access records within their own business unit, which directly satisfies the requirement that only users from the same business unit can view each other's records. This combination uses built-in platform capabilities to meet both the auditing and access control requirements.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Enable Dataverse auditing for the entity and configure business unit security to restrict access
Why this is correct
Dataverse auditing records create, update and delete operations with user, timestamp and old/new values, satisfying the audit requirement. Business unit security roles then restrict record visibility to the same business unit, meeting the second constraint without custom code.
- ✗
Enable Dataverse auditing and use hierarchy security with business units
Why it's wrong here
Dataverse auditing logs user, timestamp and old/new values, but hierarchy security grants record access across parent and child business units, not only within the same unit. It is tempting because hierarchy security genuinely models managerial reporting lines, and would be right when managers must see subordinates' records.
- ✗
Use Power Automate to create custom logs and use field-level security to restrict visibility
Why it's wrong here
Power Automate logging only fires on triggers you author, so deletes and direct Dataverse edits escape capture, and field-level security restricts columns rather than which records a business unit can read. It is tempting because field-level security genuinely hides sensitive columns, and would be right when specific fields must be masked.
- ✗
Create a separate audit table and use Power Automate to write logs, and use role-based security
Why it's wrong here
A custom audit table captures only writes routed through your flows, missing deletions and out-of-app changes, while role-based security grants privileges per role, not per business unit. It is tempting because custom tables allow bespoke reporting, and would be right when audit data must be shaped for external retention.
Go deeper
Related to this question
About these practice questions
One of 701 original PL-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.