Microsoft Microsoft Certified: Power Platform Solution Architect Expert PL-600 Questions & Answers

• Question 21:

  You are designing an authentication strategy.

  You must provide users multiple primary authentication options for Microsoft Power Platform app sign-in events.

  You need to select the primary authentication methods.

  Which two authentication methods can you use? Each correct answer presents a complete solution.

  NOTE: Each correct selection is worth one point.

  A. Windows Hello for Business

  B. OAUTH software tokens

  C. Microsoft Authenticator app

  D. Voice call

  Correct Answer: BC

  B: Power Apps Portals: Authentication Overview. Two Main Types

  At a high level, there are two types of authentication in Power Apps Portals: local and external.

  Local authentication is when the username and password information is stored directly in CDS on the contact record. Usernames can either be the contact's email address, or a special username field. A hashed version of the user's password is stored, which makes it possible to verify that the correct password has been entered, but makes it impossible to retrieve their password from the database. While convenient and easy to use, local authentication has be deprecated by Microsoft, and should be avoided.

  External authentication is when something outside of CDS is managing usernames and passwords – think Microsoft Accounts, Facebook, Twitter, etc. Users log in with credentials from other services, which are associated with a contact in CDS. These external authentication managers are known as identity providers, and there are a few different protocols for identity management. Portals supports four main external identity protocols: OAuth2, SAML, WS-Federation and Open ID Connect.

  C: The Microsoft Authenticator app helps you sign in to your accounts when you're using two-step verification.

  Incorrect:

  Not A: Windows Hello for Business

  Reference: https://www.engineeredcode.com/blog/power-apps-portals-authentication-overview https://support.microsoft.com/en-us/account-billing/download-and-install-the-microsoft-authenticator-app-351498fc-850a-45da-b7b6-27e523b8702a

• Question 22:

  You are designing forms for a Microsoft Power Platform solution. Each person must see only the columns required for their department.

  

  You need to ensure that the forms open correctly, display only the fields needed, and that data can be entered quickly. How should you design the form?

  A. Create one form for each department. Add all columns needed for all departments. Use business rules to hide columns.

  B. Create a shared form for all departments. Add all the columns. Add column-level security to columns not needed for each department.

  C. Create one form for each department. Add only columns needed on the form for each department. Assign the appropriate security role to each form.

  D. Add new columns to an existing form. Grant all departments security roles for that form.

  Correct Answer: C

  Power Apps forms settings are a set of capabilities that make it easy for model-driven app makers to configure how users will access forms in a solution or application. From Form settings, there are three different areas a maker can choose from:

  1.

  Set security roles for a form.

  2.

  Set the form order.

  3.

  Set the fallback form for a table.

  Set security roles for a form Different people in your organization may interact with the same data in different ways. Managers may depend on being able to quickly scan information in a row and service people may require a form that streamlines data entry. You can accommodate different requirements by assigning forms to the security roles that different groups of people belong to.

  When you have more than one main or other form type defined for a table, you can select which forms users will be able to use based on their security roles. Because each table must be able to display a form for any user, at least one form must be designated as a ”fallback” form – a form visible to users whose security roles do not have any forms explicitly assigned to them.

  Reference: https://learn.microsoft.com/en-us/power-apps/maker/model-driven-apps/control-access-forms

• Question 23:

  You are implementing a solution that includes applications which perform high-volume Microsoft Dataverse operations.

  The applications must not experience a loss of functionality or loss of performance due to service protection API limits.

  You need to evaluate metrics for the service protection API limits.

  Which three metrics should you evaluate? Each correct answer pat of the solution.

  NOTE: Each correct selection is worth one point.

  A. Amount of API calls made within plug-in code.

  B. Number of API requests per web server.

  C. Amount of execution time that can be used for each connection.

  D. Number of concurrent connections per user account.

  E. Number of API requests per connection.

  Correct Answer: CDE

  Service protection API limits are enforced based on three facets:

  (E)

  The number of requests sent by a user.

  (C)

  The combined execution time required to process requests sent by a user.

  (D)

  The number of concurrent requests sent by a user.

  Reference: https://docs.microsoft.com/en-us/power-apps/developer/data-platform/api-limits

• Question 24:

  You are designing a solution for a national vehicle repair company. You have the following requirements:

  1.

  Customers must search for vehicle issues by using natural language expressions.

  2.

  Customers must contact a customer service agent as required.

  You need to recommend a solution.

  Which two features should you include? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Power Apps portal

  B. Power Virtual Agents

  C. Customer Insights

  D. Business process flow

  Correct Answer: AD

  A: Portal search needs Dataverse search feature to be enabled at Dataverse environment

  To enable Dataverse search:

  1.

  In the Power Platform admin center, select an environment.

  2.

  Select Settings > Product > Features.

  3.

  Under Search, set Dataverse search to On.

  4.

  Select Save.

  Once the index is provisioned, it may take anywhere between an hour or more to complete a full sync for average size organizations, to a couple of days for large size organizations.

  Benefits include: Provides intelligent search by applying AI technology to interpret natural language such as misspellings, common abbreviations, and synonyms to deliver quality results.

  D: Customers must contact a customer service agent as required.

  Business process flows provide a guide for people to get work done. They provide a streamlined user experience that leads people through the processes their organization has defined for interactions that need to be advanced to a

  conclusion of some kind. This user experience can be tailored so that people with different security roles can have an experience that best suits the work they do.

  Reference:

  https://docs.microsoft.com/en-us/power-apps/maker/portals/configure/search

  https://docs.microsoft.com/en-us/power-automate/business-process-flows-overview

• Question 25:

  A company uses a third-party cloud-based app to make real-time business decisions. The app has a RESTful API.

  You must design a Microsoft Power Platform solution that interacts with the third-party app. Changes made in the Microsoft Power Platform solution must be reflected in the cloud app.

  You need to recommend technologies to integrate the Microsoft Power Platform solution with the cloud app.

  Which two technologies should you recommend? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. Scheduled Power Automate cloud flow with a custom connector to the cloud app

  B. Power Virtual Agents

  C. Custom plug-on registered with Microsoft Dataverse

  D. Model-driven app

  Correct Answer: AC

  A: To enable Logic Apps, Power Automate, or Power Apps to communicate with the REST or SOAP API, use a custom connector, which is a wrapper around a REST API (Logic Apps also supports SOAP APIs).

  C: Custom APIs are a powerful way to connect to any existing API, hosted anywhere, from PowerApps. You do not need a PowerApps Enterprise subscription to register or use a Custom API.

  Custom APIs are RESTful endpoints that you can connect to and use from PowerApps. All you’ll need is a Swagger definition file for your endpoint.

  Reference: https://docs.microsoft.com/en-us/power-platform/guidance/architecture/real-world-examples/custom-connector-canvas https://powerapps.microsoft.com/hr-hr/blog/register-and-use-custom-apis-in-powerapps/

• Question 26:

  You are a Microsoft Power Platform solution architect working on a project. API calls are being sent between external applications and a Microsoft Power Platform solution.

  The number of requests per user within a given time frame varies. Some users may be exceeding the service protection API limits.

  You need to ensure that the API conforms to service protection limits.

  Which three metrics should you review? Each correct answer presents part of the solution.

  NOTE: Each correct selection is worth one point.

  A. The number of requests that a user can make each day.

  B. The total number of requests that can be processed each day.

  C. The number of concurrent requests that a user can make.

  D. The total execution time for requests by all users.

  E. The combined execution time required to process requests from a user.

  Correct Answer: ACE

  Three types of service protection API limit errors that can be returned:

  Number of requests

  This limit counts the total number of requests during the preceding 300 second period.

  Execution time

  This limit tracks the combined execution time of incoming requests during the preceding 300 second period.

  Concurrent requests

  This limit tracks the number of concurrent requests.

  Reference:

  https://docs.microsoft.com/en-us/powerapps/developer/data-platform/api-limits

• Question 27:

  You are evaluating a solution design for a model-driven app that will have a large number of complex forms.

  Many of the forms take up to 10 seconds to load.

  You need to recommend solution to speed up loading times for the forms.

  Which two solutions should you recommend? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

  A. Consolidate and reduce scripts.

  B. Use synchronous JavaScript requests.

  C. Move scripts into the OnLoad event.

  D. Remove unnecessary fields.

  Correct Answer: AD

  D: Controls that require extra data beyond the primary record produce the most strain on form responsiveness and loading speed. These controls fetch data over the network and often involve a waiting period (seen as progress indicators) because it can take time to transmit the data.

  Keep only the most frequently used of these controls on the default tab. Incorrect Answers:

  B: Use asynchronous network requests when requesting data. Request data asynchronously rather than synchronously when extra data is necessary for customizations.

  C: Moving scripts to the Onload event would slow down the loading of the form.

  Reference: https://docs.microsoft.com/en-us/powerapps/maker/model-driven-apps/design-performant-forms

• Question 28:

  A local bank uses Microsoft Power Platform apps to store customer data.

  The bank IT director discovers that all employees can see the social security numbers of their customers. The IT team does not understand how field-level security works and needs help with the design.

  You need to recommend a solution to the bank that meets the following requirements:

  1.

  The system must restrict access to customer social security numbers to the vice president of finance only.

  2.

  The vice president of finance must be able to read and update customer social security numbers. Which two actions should you recommend? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  A. Set the values for the read permission and for the update permission for social security number to yes.

  B. Enable field-level security for the member table.

  C. Create a field-level security profile.

  D. Enable field-level security for the social security number column.

  Correct Answer: CD

  Field-level security is managed by the security profiles. To implement field-level security, a system administrator performs the following tasks.

  1.

  Enable field security on one or more fields for a given entity.

  2.

  Associate one more existing security profiles, or create one or more new security profiles to grant the appropriate access to specific users or teams.

  Reference: https://docs.microsoft.com/en-us/power-platform/admin/field-level-security

• Question 29:

  A company has a model-driven app. The app has forms with both Business Rules and JavaScript added to handle the business logic on the form.

  The form contains logic that is enforced by using business rules. The company wants to apply the business rules to all forms in the app.

  You need to recommend a simplified form setup so the form can be maintained moving forward.

  What should you recommend?

  A. Manage the business logic with a Power Apps Component Framework (PCF) control.

  B. Evaluate whether complex parts of the logic can be solved by using Power Apps Component Framework (PCF) control. Use Business Rules for the remaining functionality.

  C. Remove the Business Rules and use only JavaScript.

  D. Update logic to ensure Business Rules are optimized. Use JavaScript for the remaining functionality.

  Correct Answer: A

  PCF controls are reusable.

  Reference: https://docs.microsoft.com/en-us/powerapps/developer/component-framework/overview

• Question 30:

  A company provides mobile diagnostic imaging services. You are designing a Power Apps solution to manage patient appointments and procedures.

  Patient records are stored within the company's cloud patient billing system. The patient ID must be the only information stored within the app. The patient name and date of birth must be visible to the technician to verify the patient's identity.

  You need to recommend a solution to display the patient information.

  What should you recommend?

  A. Virtual table

  B. Business rule

  C. Privacy preference

  D. Data gateway

  E. Custom dataflow

  Correct Answer: A

  A virtual table is a custom table in Microsoft Dataverse that has columns containing data from an external data source. Virtual tables appear in your app to users as regular table rows, but contain data that is sourced from an external database, such as an Azure SQL Database. Rows based on virtual tables are available in all clients including custom clients developed using the Dataverse web services.

  Incorrect Answers:

  D: The On-premises data gateway provides secure data transfer between on-premises data sources and your Azure Analysis Services servers in the cloud.

  Reference: https://docs.microsoft.com/en-us/powerapps/maker/data-platform/create-edit-virtual-entities