PL-900 Demonstrate the capabilities of Power Apps Practice Question
Your organization is a multi-national corporation using Microsoft Power Platform. The compliance team requires that all Power Apps apps be auditable: every data modification (create, update, delete) must be logged with the user, timestamp, and old/new values. Additionally, the app must enforce that only users from the same business unit can view each other's records. The app uses Dataverse as the data source. You need to design the solution. Which approach should you take?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable Dataverse auditing for the entity and configure business unit security to restrict access
Dataverse provides built-in auditing that logs data modifications (create, update, delete) with user, timestamp, and old/new values. Business unit security in Dataverse can restrict record visibility to users within the same business unit, meeting the compliance requirement. Option B is incorrect because hierarchy security is not designed for record visibility restrictions based on business units; business unit security is the appropriate feature. Option C is incorrect because while Power Automate can create custom logs, it is not a native auditing solution and adds unnecessary complexity; field-level security does not restrict record visibility but rather specific field access. Option D is incorrect because creating a separate audit table and using Power Automate for logging is redundant since Dataverse auditing already provides this capability.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Enable Dataverse auditing for the entity and configure business unit security to restrict access
Why this is correct
Correct: Dataverse auditing logs all changes, and business unit security limits record visibility.
- ✗
Enable Dataverse auditing and use hierarchy security with business units
Why it's wrong here
Incorrect: Hierarchy security is for manager access, not business unit isolation.
- ✗
Use Power Automate to create custom logs and use field-level security to restrict visibility
Why it's wrong here
Incorrect: Field-level security hides fields, not records; Power Automate for logging is extra work.
- ✗
Create a separate audit table and use Power Automate to write logs, and use role-based security
Why it's wrong here
Incorrect: Role-based security does not restrict by business unit.
Go deeper
Related to this question
About these practice questions
One of 904 original PL-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.