Exam PL-400: Microsoft Power Platform Developer — Questions and Answers

Question 1: Which Power Platform CLI command is used to authenticate to a Dataverse environment?

pac org connect
pac dataverse auth
pac env login
pac auth create (Correct answer)

Correct answer: pac auth create

The 'pac auth create' command creates an authentication profile for connecting to a Power Platform environment.

Question 2: A Power Apps portal (Power Pages) needs to allow anonymous users to submit forms but restrict record viewing to authenticated users. Which feature controls this?

DLP policies restricting portal connectors
Web roles with Entity permissions for authenticated users (Correct answer)
Azure AD B2C authentication profiles
Table permissions with anonymous access scope

Correct answer: Web roles with Entity permissions for authenticated users

Power Pages uses web roles and table permissions to control access; authenticated web roles can grant read access to records while anonymous users only submit.

Question 3: What is the FIRST consideration when designing a solution in Microsoft Certified Power Platform Developer Associate practice?

Available budget constraints
Establishing the project timeline
Understanding requirements, constraints, and stakeholder needs (Correct answer)
Selecting the preferred technology or method

Correct answer: Understanding requirements, constraints, and stakeholder needs

Effective design begins with a thorough understanding of requirements, constraints, and stakeholder needs. Without this foundation, design decisions may not align with actual needs, leading to costly revisions or unsatisfactory outcomes.

Question 4: A developer wants to use a Power BI dataset as the data source for a Power Apps canvas app without writing any code. Which connector enables this?

Azure Analysis Services connector
Power BI connector (Correct answer)
SQL Server connector
Dataverse connector

Correct answer: Power BI connector

The Power BI connector in Power Apps allows canvas apps to retrieve data from published Power BI datasets using DAX queries.

Question 5: A developer needs to ensure that a Power Automate flow's service principal has the minimum required Dataverse permissions. Which role should be assigned to an application user for read-only reporting flows?

Delegate access through an owner team
System Administrator
A custom security role with only Read privileges on required tables (Correct answer)
System Customizer

Correct answer: A custom security role with only Read privileges on required tables

Creating a custom security role with only the necessary read privileges follows least privilege principles and limits the blast radius of a compromised service principal.

Question 6: What distinguishes a Microsoft Certified Power Platform Developer Associate certified professional from a non-certified practitioner?

There is no meaningful difference in competency
Certification validates competency through standardized assessment against established benchmarks (Correct answer)
Certified professionals always have more years of experience
Certified professionals exclusively work in larger organizations

Correct answer: Certification validates competency through standardized assessment against established benchmarks

Certification provides objective validation of competency through standardized assessment. While non-certified practitioners may be skilled, certification offers verified evidence that a professional meets established benchmarks for knowledge and performance.

Question 7: What step is essential in Power App creation 2?

Avoid connectors
Essential design step 2 (Correct answer)
Ignore logic
Skip UI setup

Correct answer: Essential design step 2

"Essential design step 2" represents a critical stage in the Power App creation process. Following the initial setup, this step focuses on further developing the application's core functionality or user interface. It is vital for progressing towards a complete and effective app design.

Question 8: A developer creates a custom API in Dataverse that should only be callable by other Dataverse processes, not external users. Which privilege controls this?

Set the API binding type to Entity and restrict table access
Configure a custom connector to wrap the API with OAuth
Mark the API as 'Is Private' in its definition (Correct answer)
Assign the API a 'prvCallCustomAPI' privilege restricted to System roles

Correct answer: Mark the API as 'Is Private' in its definition

Setting a custom API as private prevents it from being discovered or called by external clients, limiting its use to internal Dataverse plugins and workflows.

Question 9: Which foundational principle is MOST important for success in the Microsoft Certified Power Platform Developer Associate profession?

Maximizing financial returns on every engagement
Maintaining the minimum requirements for certification
Specializing in only one narrow area of practice
Commitment to continuous learning, ethical practice, and quality outcomes (Correct answer)

Correct answer: Commitment to continuous learning, ethical practice, and quality outcomes

Success in any professional field requires a commitment to continuous learning to stay current, ethical practice to maintain trust and integrity, and a focus on quality outcomes that serve stakeholders and the public interest.

Question 10: When a design constraint conflicts with a stakeholder preference in Microsoft Certified Power Platform Developer Associate, the BEST approach is to:

Ignore the constraint if the stakeholder insists
Remove all constraints to maximize design flexibility
Always prioritize the stakeholder's preference
Evaluate both factors, communicate trade-offs, and find an optimal solution (Correct answer)

Correct answer: Evaluate both factors, communicate trade-offs, and find an optimal solution

When constraints and preferences conflict, professionals should evaluate both factors objectively, clearly communicate the trade-offs to stakeholders, and work collaboratively to find a solution that best balances both considerations.

Question 11: Which environment variable type should be used to store a JSON configuration object in Power Platform?

Text (Correct answer)
Number
JSON (Secret)
Data source

Correct answer: Text

JSON configuration objects can be stored as Text type environment variables, as there is no dedicated JSON type — Text supports arbitrary string content including JSON.

Question 12: Which integration method fits scenario 7?

Ignore integration
Secure connector 7 (Correct answer)
Unstable API
Unsecured link

Correct answer: Secure connector 7

For effective and secure integration within the Power Platform, 'Secure connectors' are the preferred mechanism. They enable applications and flows to interact with external systems and data sources reliably, while adhering to security best practices. This method ensures that data exchange for scenario 7 is authenticated, authorized, and protected, which is essential for enterprise-grade solutions.

Question 13: What step is essential in Power App creation 4?

Essential design step 4 (Correct answer)
Ignore logic
Skip UI setup
Avoid connectors

Correct answer: Essential design step 4

"Essential design step 4" signifies a significant milestone in Power App creation, building upon previous foundational work. This step typically involves integrating more complex features or refining existing components. Its successful execution is crucial for advancing the app towards its final, polished state.

Question 14: What is the most important professional competency for PL 400 certification in custom connectors?

Speed of task completion
Memorization of all reference materials
Ability to work alone exclusively
Deep knowledge combined with practical application skills (Correct answer)

Correct answer: Deep knowledge combined with practical application skills

Professional competency requires both deep knowledge of the subject matter and the ability to apply that knowledge in practical situations.

Question 15: A Power Platform developer needs to display a specific page of an embedded Power BI report. Which embed configuration property controls the initial page?

pageName (Correct answer)
initialPage
reportSection
defaultPage

Correct answer: pageName

The 'pageName' property in the Power BI JavaScript SDK's embed configuration specifies which report page to display on load.

Question 16: Which professional attribute is most valued in canvas apps within the PL 400 field?

Working in isolation
Accountability and commitment to standards (Correct answer)
Avoiding challenging situations
Prioritizing personal convenience

Correct answer: Accountability and commitment to standards

Accountability and commitment to professional standards build trust and ensure consistent, high-quality practice.

Question 17: Which approach best demonstrates mastery of custom connectors in PL 400 practice?

Avoiding complex scenarios
Relying entirely on technology
Following procedures without understanding
Applying principles to novel situations with sound judgment (Correct answer)

Correct answer: Applying principles to novel situations with sound judgment

True mastery involves understanding underlying principles well enough to apply them to new and unfamiliar situations with professional judgment.

Question 18: What is the value of continuing education in canvas apps for PL 400 professionals?

It is only needed for recertification
It replaces workplace experience
It is primarily a social activity
It keeps professionals current with evolving standards and practices (Correct answer)

Correct answer: It keeps professionals current with evolving standards and practices

Continuing education ensures professionals stay current with the latest developments, standards, and best practices in their field.

Question 19: A developer wants to enforce that an embedded Power BI report always applies a specific RLS role regardless of the authenticated user. Which embed token parameter accomplishes this?

datasetFilterOverride in the report settings
securityFilter in the GenerateToken request body
RLSFilter in the embed configuration
effectiveIdentity with a username and roles array (Correct answer)

Correct answer: effectiveIdentity with a username and roles array

The effectiveIdentity object in the GenerateToken request specifies a username and roles array, forcing the embed session to apply the specified RLS roles.

Question 20: In the PCF manifest, what is the behavioral difference between a property with `usage='bound'` versus `usage='input'`?

'bound' restricts the property to model-driven apps; 'input' allows use in canvas apps
'bound' properties are persisted to Dataverse automatically; 'input' properties are transient
'bound' properties require TypeScript type definitions; 'input' properties work with plain JavaScript
'bound' enables two-way data flow (read and write); 'input' is read-only (the control cannot push values back) (Correct answer)

Correct answer: 'bound' enables two-way data flow (read and write); 'input' is read-only (the control cannot push values back)

A 'bound' property participates in two-way binding — the control can both read the current value and write a new value back via `notifyOutputChanged` and `getOutputs`; an 'input' property is read-only from the control's perspective.

Question 21: What step is essential in Power App creation 3?

Avoid connectors
Essential design step 3 (Correct answer)
Skip UI setup
Ignore logic

Correct answer: Essential design step 3

"Essential design step 3" is a key component in the sequential development of a Power App. At this stage, specific design elements or functional requirements are addressed. Successfully completing this step ensures the app continues to evolve according to its intended purpose and user experience goals.

Question 22: What is the purpose of Dataverse elastic tables compared to standard tables?

They allow external data to be surfaced without storage
They support complex relationships between multiple entities
They are designed for large-scale, high-velocity data with flexible schema (Correct answer)
They replicate data to Azure Synapse automatically

Correct answer: They are designed for large-scale, high-velocity data with flexible schema

Elastic tables use Azure Cosmos DB underneath and are optimized for high-volume, time-series, or IoT-type data with schema flexibility.

Question 23: A developer needs to ensure Power Pages (portals) forms do not expose Dataverse table names or column schema to anonymous web users. Which setting prevents schema exposure?

Enable Azure Front Door WAF rules for the portal
Disable the Dataverse Web API for the portal
Set all Dataverse tables to private in the maker portal
Configure table permissions to deny global read and restrict the OData endpoint (Correct answer)

Correct answer: Configure table permissions to deny global read and restrict the OData endpoint

Properly configured table permissions prevent the portal's OData endpoint from exposing table schemas or returning unauthorized records to anonymous users.

Question 24: What step is essential in Power App creation 6?

Avoid connectors
Skip UI setup
Essential design step 6 (Correct answer)
Ignore logic

Correct answer: Essential design step 6

"Essential design step 6" marks another important progression in Power App development. This step likely involves refining the user interface, optimizing performance, or adding advanced features. It is critical for enhancing the app's usability and robustness.

Question 25: Which API endpoint is used to retrieve a list of reports in a Power BI workspace using the Power BI REST API?

GET /v1.0/myorg/groups/{groupId}/reports (Correct answer)
GET /v1.0/myorg/datasets/{datasetId}/reports
GET /v1.0/myorg/reports?workspaceId={id}
GET /v1.0/myorg/workspaces/{id}/listreports

Correct answer: GET /v1.0/myorg/groups/{groupId}/reports

The endpoint GET /v1.0/myorg/groups/{groupId}/reports returns all reports in a specified workspace (group) via the Power BI REST API.

Question 26: Which integration method fits scenario 4?

Secure connector 4 (Correct answer)
Ignore integration
Unstable API
Unsecured link

Correct answer: Secure connector 4

In the context of scenario 4, the appropriate integration method is identified as "Secure connector 4." This indicates that a specific, secure connector is the recommended tool for linking systems or services for this particular use case within the Power Platform. Employing a secure connector ensures that data transfers are protected, authenticated, and compliant with security standards, which is vital for robust and trustworthy integrations.

Question 27: Which PCF context API provides methods to format dates, numbers, and currency values according to the current user's locale?

context.locale
context.formatting (Correct answer)
context.globalization
context.utils

Correct answer: context.formatting

`context.formatting` exposes methods such as `formatDateShort`, `formatDecimal`, and `formatCurrency` that automatically respect the user's regional settings stored in Dataverse.

Question 28: What is the recommended approach for handling errors in power apps development?

Implement structured error handling with meaningful messages (Correct answer)
Let errors crash the application
Log errors but never handle them
Suppress all error messages

Correct answer: Implement structured error handling with meaningful messages

Structured error handling with meaningful messages helps diagnose problems quickly while maintaining application stability and user experience.

Question 29: Which statement BEST describes the relationship between Microsoft Certified Power Platform Developer Associate certification requirements and industry evolution?

Certification requirements never change once established
Requirements evolve periodically to reflect advances in knowledge, technology, and practice standards (Correct answer)
Requirements become less stringent over time
Changes only occur when government mandates new requirements

Correct answer: Requirements evolve periodically to reflect advances in knowledge, technology, and practice standards

Certification requirements evolve to keep pace with advances in professional knowledge, technological developments, and changes in practice standards. This ensures that certified professionals remain current and competent in a changing professional landscape.

Question 30: A developer is building a solution where Dataverse data changes must update a Power BI streaming dataset in near real-time. What combination achieves this?

Dataverse plugin + Power Automate flow + Power BI push dataset (Correct answer)
Dataverse virtual table + DirectQuery dataset
Dataverse change tracking + Azure Data Factory + Power BI import
Dataverse export to data lake + Power BI composite model

Correct answer: Dataverse plugin + Power Automate flow + Power BI push dataset

A Dataverse plug-in or Power Automate trigger can detect record changes and use the Power BI connector to push data to a streaming (push) dataset in near real-time.

Question 31: A Dataverse plugin needs to securely retrieve a password to call an external service. Which approach is most secure?

Use a Secure Configuration string in the plugin step registration (Correct answer)
Pass the password via an input parameter on the plugin message
Hardcode the password in the plugin assembly
Store the password in a Dataverse table record with column-level security

Correct answer: Use a Secure Configuration string in the plugin step registration

Plugin step Secure Configuration stores encrypted values that are only accessible to the plugin code at runtime and are not visible in the plugin registration UI after saving.

Question 32: Which integration method fits scenario 6?

Unstable API
Unsecured link
Ignore integration
Secure connector 6 (Correct answer)

Correct answer: Secure connector 6

In the Power Platform, 'Secure connectors' are the standard and recommended method for integrating with external services and data sources. They provide a robust and secure way to connect applications and flows to various systems, ensuring data integrity and authentication. This approach is crucial for maintaining the security and reliability of business processes within the Power Platform ecosystem, making it the appropriate choice for scenario 6.

Question 33: Which approach is MOST important for PL 400 professionals when applying technical procedures?

Following personal shortcuts developed through experience
Using the fastest method available regardless of standards
Adhering to established protocols while adapting to specific conditions (Correct answer)
Applying the same technique in every situation without variation

Correct answer: Adhering to established protocols while adapting to specific conditions

Technical procedures require adherence to established protocols as a foundation, with professional judgment to adapt appropriately to specific conditions. This balance ensures both consistency and effectiveness.

Question 34: Which Dataverse feature enables a developer to define a formula-based column value that is calculated in real time during a query?

Rollup column
Calculated column
Formula column (Correct answer)
Autonumber column

Correct answer: Formula column

Formula columns use Power Fx expressions and are evaluated at query time rather than stored as a static value.

Question 35: What is the MOST important deliverable at the completion of a PL 400 design phase?

Meeting minutes from design discussions
A brief email summarizing key decisions
Comprehensive documentation including specifications, drawings, calculations, and compliance evidence (Correct answer)
A verbal summary of the design concept

Correct answer: Comprehensive documentation including specifications, drawings, calculations, and compliance evidence

Comprehensive design documentation serves as the authoritative reference for implementation, provides evidence of compliance, supports future maintenance and modifications, and creates a professional record of the design process.

Question 36: What is the MOST effective way for new PL 400 professionals to build competency in their field?

Studying certification materials exclusively
Combining formal education, mentored practice, and ongoing professional development (Correct answer)
Focusing solely on the most advanced topics
Learning entirely through trial and error

Correct answer: Combining formal education, mentored practice, and ongoing professional development

Building professional competency requires a multi-faceted approach: formal education provides foundational knowledge, mentored practice develops applied skills under guidance, and ongoing professional development ensures continuous growth and currency in the field.

Question 37: What role does collaboration play in model-driven apps for PL 400 professionals?

It reduces individual accountability
It is only needed in emergencies
It enhances outcomes through diverse perspectives and shared expertise (Correct answer)
It slows down work unnecessarily

Correct answer: It enhances outcomes through diverse perspectives and shared expertise

Collaboration leverages diverse perspectives and combined expertise to achieve better outcomes than any individual could alone.

Question 38: What is the MOST effective approach to quality assurance in Microsoft Certified Power Platform Developer Associate?

Integrating quality checks throughout the entire process from planning to completion (Correct answer)
Assigning quality responsibility to a single person
Inspecting finished work only at the final stage
Conducting quality reviews only when complaints are received

Correct answer: Integrating quality checks throughout the entire process from planning to completion

Quality assurance is most effective when integrated throughout the entire process. Checking quality only at the end allows defects to propagate, while continuous monitoring catches issues early when they are easier and less costly to address.

Question 39: What is the value of continuing education in custom connectors for PL 400 professionals?

It is primarily a social activity
It replaces workplace experience
It keeps professionals current with evolving standards and practices (Correct answer)
It is only needed for recertification

Correct answer: It keeps professionals current with evolving standards and practices

Continuing education ensures professionals stay current with the latest developments, standards, and best practices in their field.

Question 40: In Power Platform, what is the purpose of 'Environment Security Groups' in the Power Platform admin center?

To control which Azure subscriptions can host the environment
To define which DLP policies apply to the environment
To assign Dataverse security roles automatically based on group membership
To restrict who can access the environment by limiting it to group members (Correct answer)

Correct answer: To restrict who can access the environment by limiting it to group members

Setting a security group on an environment restricts environment access so only members of that Azure AD group can log in and use apps within it.

Exam PL-400: Microsoft Power Platform Developer

This certification validates the skills of developers to design, develop, secure, and troubleshoot solutions built on the Microsoft Power Platform.

Questions

120 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds

These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

learn.microsoft.com — Test dates, exam information · verified Oct 2026