Configure and Troubleshoot Microsoft Power Platform PL-400 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   When configuring a Power Platform environment for development, which setting should be enabled to allow developers to create and test solutions without affecting production?

   • AEnable the environment for external sharing
   • BSet the environment as the default environment
   • CDisable the Dataverse database
   • DCreate the environment as a sandbox environment
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   During a security audit, you find that a Power Apps app in a production environment uses a connection that references a shared Office 365 mailbox. The app sends emails on behalf of users. What is the operational security issue and what should you do?

   • ADisable the app's email functionality to avoid any security risk.
   • BUse the app owner's personal mailbox for the connection instead of the shared mailbox.
   • CThe shared mailbox is not a security issue because it is a standard way to send emails; no change is needed.
   • DThe shared mailbox connection may have excessive permissions; replace it with a dedicated service account that has only the necessary send permissions.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A security review reveals that a Power Automate flow uses a connection that references a user account with a high-privilege role. The flow only needs to update records in a single custom table. What is the operational security issue and what should you do?

   • AThe connection uses an account with excessive privileges; create a service principal with a custom role limited to Update on the specific table.
   • BUse the flow owner's personal account instead of a service account.
   • CDisable the flow to avoid any security risk.
   • DThe connection is fine because the flow only runs when triggered by a user.
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   Your organization has a single production environment and a separate development environment. A developer needs to test a solution that includes a custom API and a PCF control. The developer has the Environment Maker role in the development environment, but the solution requires access to a custom table that is not in the development environment. What should you do to support the developer's testing while maintaining least privilege?

   • AAdd the custom table to the development environment and grant the developer a custom security role with the necessary privileges on that table.
   • BUse the production environment for testing because the table already exists there.
   • CGive the developer the Environment Maker role in the production environment so they can access the table.
   • DGrant the developer the System Administrator role in the development environment so they can create the table themselves.
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A Power Platform environment has a custom connector that uses a shared user account with the System Administrator role. The connector is used by a canvas app that only needs to read data from a single table. You need to resolve the security issue while minimizing disruption to the app's users. What should you do?

   • AKeep the System Administrator role but restrict the connector's IP address range to reduce exposure.
   • BCreate a service principal with a custom role that has Read-only access to the specific table, update the connector to use this service principal, and test the app.
   • CDisable the shared account and ask users to provide their own credentials for the connector.
   • DChange the shared account's role to Environment Maker and update the connector to use that account.
   Reveal Solution Discussion Select an answer first