Microsoft Certified: Power Platform Solution Architect Expert — Practice Set 1

Question 1

You are a Power Platform solution architect starting a new engagement. A manufacturing company wants to modernize their field service operations using Microsoft Power Platform. During initial discussions, the client mentions they already have a Dynamics 365 Field Service license. You need to initiate solution planning. What should be your first step?

Accepted Answer

The first step in solution planning is to evaluate business requirements and identify existing Microsoft Power Platform solution components. Since the client already has Dynamics 365 Field Service, the architect should assess what existing components can be leveraged before designing new ones. This aligns with the 'Initiate solution planning' sub-domain of PL-600.

Question 2

You are a Power Platform solution architect. A retail company wants to assess whether Microsoft Power Platform can support their high-volume order processing system that handles 50,000 transactions per hour. You need to determine the feasibility of this requirement. What should you evaluate first?

Accepted Answer

When performing fit/gap analysis, the architect must determine the feasibility of meeting specific requirements. For high-volume transaction processing, evaluating Microsoft Power Platform API limits and Microsoft Dataverse capacity is critical to determine if the platform can support 50,000 transactions per hour without throttling.

Question 3

You are a Power Platform solution architect. During a requirements workshop, a healthcare client mentions they have 15 years of patient data in a legacy on-premises SQL Server database and a custom Java application for appointment scheduling. You need to identify existing solutions and systems. What should you do?

Accepted Answer

When identifying existing solutions and systems, the architect should evaluate the organization's enterprise architecture, identify data sources needed for a solution, and define use cases and quality standards for existing data. This provides a complete picture before making architectural decisions about migration or integration.

Question 4

You are a Power Platform solution architect for a financial services company. Stakeholders have provided a high-level requirement: 'We need a customer portal that shows account balances.' During requirements capture, you need to refine this. Which set of activities best represents capturing complete requirements?

Accepted Answer

Complete requirements capture involves refining high-level requirements, identifying both functional requirements (what the system does) and non-functional requirements (performance, security, scalability), and guiding the process of designing future state business processes. Omitting non-functional requirements leads to architectural gaps later.

Question 5

You are a Power Platform solution architect. A logistics company needs a solution to automate their shipment tracking process, which currently involves manual data entry across three legacy systems. After gathering requirements, you discover the company has 500 employees but only 50 actively manage shipments. They want real-time notifications when shipments are delayed. You need to identify organization information and metrics. What should you assess?

Accepted Answer

Identifying organization information and metrics requires assessing risk factors (such as poor data quality in legacy systems that could affect migration), reviewing key success criteria (e.g., real-time notification delivery within X seconds), and guiding the collection of current state business processes to understand the baseline.

Question 6

You are a Power Platform solution architect. A client requires a customer self-service portal where customers can raise support tickets, track status, and view their order history. The client currently uses SAP for order management and a legacy CRM system. You need to perform a fit/gap analysis. Which approach is most appropriate?

Accepted Answer

A fit/gap analysis involves evaluating Dynamics 365 apps and AppSource options to solve requirements first, then addressing functional gaps through alternate solutions. Evaluating Power Pages for the portal and Dynamics 365 Customer Service for ticket management against the requirements determines what is natively available before considering custom development.

Question 7

You are a Power Platform solution architect. A pharmaceutical company plans to implement a Microsoft Power Platform solution for regulatory document management. The system must maintain an immutable audit trail of all document changes for FDA compliance, support digital signatures, prevent any data deletion, and integrate with an existing SAP ERP system. After analysis, you find that Microsoft Dataverse does not natively support immutable audit records — users with System Administrator roles can delete audit logs. You need to determine the scope for the solution. What is the most appropriate recommendation?

Accepted Answer

When addressing functional gaps, the architect must find alternate solutions within the Power Platform ecosystem rather than abandoning the platform or ignoring requirements. Integrating Azure Immutable Blob Storage for audit archiving addresses the compliance gap while keeping the core solution on Power Platform. SharePoint does not natively support immutable records (Option D is incorrect). Simply documenting the risk (Option C) is unacceptable for FDA compliance.

Question 8

You are a Power Platform solution architect designing a solution for a global retail company with operations in 15 countries. The company wants to ensure data residency compliance with GDPR for European operations while maintaining a single unified reporting capability. You need to design an environment strategy. What is the most appropriate approach?

Accepted Answer

Designing an environment strategy for GDPR compliance requires creating dedicated environments with data residency configured for European regions, ensuring personal data does not leave the EU. A central reporting environment with aggregated anonymized data supports the unified reporting requirement without violating data residency rules.

Question 9

You are a Power Platform solution architect designing the data model for a property management company. Properties can have multiple units, each unit can have multiple tenants over time, and each tenant can have multiple lease agreements. Lease agreements are linked to payment schedules, and payments must be tracked individually. You need to design relationships and relationship behaviors. Which relationship behavior should you use between the Lease Agreement table and Payment table to ensure payments are automatically deleted when a lease is cancelled?

Accepted Answer

A Parental relationship (Cascade All) ensures that when a parent record (Lease Agreement) is deleted, all related child records (Payments) are also deleted. 'Referential, Restrict Delete' would prevent deletion of the lease if payments exist. 'Remove Link' would only nullify the foreign key, not delete the payments. This design ensures data integrity when leases are cancelled.

Question 10

You are a Power Platform solution architect. A manufacturing company needs to integrate their Power Platform solution with a SAP S/4HANA system running on-premises, an Azure Data Factory pipeline, and a third-party IoT platform. The integration must support both real-time event-driven updates and scheduled batch synchronization. You need to design integrations. Which approach provides the most scalable and maintainable integration architecture?

Accepted Answer

Designing integrations for complex multi-system scenarios requires using appropriate tools for each integration pattern. Azure API Management provides centralized governance for all integrations, Power Automate handles event-driven flows, Azure Logic Apps handles batch processing efficiently, and the on-premises data gateway enables secure connectivity to on-premises SAP without exposing it to the internet.

Question 11

You are a Power Platform solution architect designing a security model for a financial services company. The company has three business units: Retail Banking, Corporate Banking, and Investment Management. Each business unit must only see its own customer records. Managers within each business unit must be able to see all records owned by their subordinates. Additionally, a Compliance team needs read-only access to all records across all business units for regulatory purposes. You need to design the security model. Which two components should you configure? Choose 2.

Accepted Answer

The correct approach requires: (A) Creating separate business units for each division and using the Manager hierarchy so managers can access subordinate records — this enforces the business unit data isolation requirement. (B) A Compliance security role with Organization-level read access allows the Compliance team to read all records across business units without being constrained to a single business unit. Options C and D address different concerns (column security and Entra CA are not the primary solution here), and Option E eliminates the business unit isolation requirement.

Question 12

You are a Power Platform solution architect. A company needs a Microsoft Dataverse data model to support a complex scenario where a single customer can be both a buyer and a seller on their marketplace platform. The customer's activity as a buyer and as a seller must be tracked separately, but both must link back to the same customer profile. You need to design the data model. Which approach is most appropriate?

Accepted Answer

Designing data models to address complex requirements means using proper relational structure. A single Account/Contact table maintains the unique customer profile, while separate Buyer Activity and Seller Activity tables with lookup relationships to Account properly normalize the data. This avoids duplication, maintains referential integrity, and allows tracking of both roles for the same customer without data redundancy.

Question 13

You are a Power Platform solution architect. A global consulting firm wants to automate their project proposal process. When a new proposal is submitted, it must: (1) trigger an AI-powered document review using Azure AI Services, (2) route for multi-level approval based on proposal value thresholds, (3) send notifications via Microsoft Teams, (4) update a SharePoint document library, and (5) sync with their Salesforce CRM. The entire process must complete within 30 minutes for proposals under $100,000 and 48 hours for larger proposals. You need to design an automation strategy. Which architecture best meets these requirements?

Accepted Answer

Designing an automation strategy for complex multi-step processes requires Power Automate cloud flows with the right connectors and parallelism. A Dataverse trigger starts the flow, parallel branches ensure Teams notifications and SharePoint updates happen concurrently (reducing total time), a custom connector to Azure AI Services handles the AI document review, the Approvals connector supports configurable multi-level routing with different timeouts based on proposal value, and a Salesforce connector handles CRM sync. Power Automate Desktop (Option C) is for desktop/UI automation, not cloud-based document workflows.

Question 14

You are a Power Platform solution architect. A healthcare organization needs to integrate their Power Platform solution with an on-premises Electronic Health Records (EHR) system using HL7 FHIR standards. The integration must ensure end-to-end encryption, authenticate using OAuth 2.0 client credentials, and comply with HIPAA Business Associate Agreement (BAA) requirements. External users, including partner clinics, also need access to specific patient data through a Power Pages portal. You need to design an authentication strategy. Which combination of components achieves this?

Accepted Answer

Designing an authentication strategy for healthcare integration requires OAuth 2.0 client credentials via Microsoft Entra ID app registrations for secure service-to-service communication with the EHR (no user credentials stored). Azure API Management enforces TLS 1.2+ for encryption and centralizes OAuth token validation. Microsoft Entra External ID (B2C) provides secure, standards-based authentication for external partner clinic users on Power Pages, meeting HIPAA requirements. Basic auth and IP allowlisting do not meet modern security standards required for HIPAA compliance.

Question 15

You are a Power Platform solution architect. A company wants to implement Microsoft Power Platform for a field sales team that includes both internal employees and contractors from partner agencies. Internal employees can see all customers and their full history. Contractors can only see customers assigned to them and must not see pricing information. You need to design column and row level security. Which configuration achieves this?

Accepted Answer

Designing security models with column and row level security requires configuring Dataverse security roles for row access (User-level access restricts contractors to only their assigned records) and column security profiles for column-level restrictions (hiding pricing columns). This is enforced at the platform level, not just the UI, ensuring contractors cannot access pricing data through any interface including the API. Hiding columns in the form designer (Option A) is a UI-only control and not a true security boundary.

Question 16

You are a Power Platform solution architect. A company plans to use Microsoft Power Platform to build an internal employee portal (Power Pages), a mobile app for field workers (Power Apps), and automated approval workflows (Power Automate). The security team requires that a data loss prevention (DLP) policy prevents the approval workflows from sending company data to external consumer email services like Gmail or Yahoo Mail. You need to identify DLP policies for the solution. What should you configure?

Accepted Answer

DLP policies in Power Platform admin center allow classification of connectors into Business, Non-business, or Blocked tiers. Classifying consumer email connectors (Gmail, Yahoo) as 'Blocked' prevents their use in any flow within the targeted environment, while classifying Office 365 Outlook as 'Business' allows legitimate corporate email. This is enforced at the platform level. Conditional Access (Option D) controls authentication to services, not Power Automate connector usage.

Question 17

You are a Power Platform solution architect. A client needs to implement Robotic Process Automation (RPA) to automate their legacy insurance claims processing desktop application, which does not have a modern API. The automation must run unattended during off-hours to process 200 claims nightly. You need to design a robotic process automation solution. What is the correct approach using Microsoft Power Platform?

Accepted Answer

Designing RPA for legacy applications without APIs requires Power Automate Desktop, which provides UI automation capabilities (screen scraping, keyboard/mouse automation). Unattended mode allows the RPA bot to run without human interaction during off-hours. A Power Automate cloud flow on a nightly schedule triggers the desktop flow, and a service account with appropriate permissions ensures the automation runs reliably. The on-premises data gateway enables communication between cloud flows and the desktop machine.

Question 18

You are a Power Platform solution architect reviewing a proposed solution design. The solution architect on your team proposes the following for a large enterprise: use a single Microsoft Dataverse environment for all development, test, and production workloads, store all configuration data as hardcoded values in Power Automate flows, and share a single system administrator account across all team members. You need to identify design flaws. Which two issues must be corrected? Choose 2.

Accepted Answer

The two critical design flaws are: (A) Using a single environment for dev/test/prod violates ALM best practices — Microsoft recommends separate environments with solution-based deployments to ensure changes are tested before reaching production. (B) Sharing a system administrator account violates least-privilege and security principles, and makes audit logs meaningless since all actions are attributed to the same account. Individual accounts with appropriate roles are required. Options C and D are incorrect — Dataverse is fully supported as a data source and is the recommended store for Power Platform solutions.

Question 19

You are a Power Platform solution architect. During the validation phase of a solution, your team discovers that a Power Automate flow runs successfully in the development environment but fails intermittently in production during peak hours. The error message indicates API throttling from the Dynamics 365 connector. You need to validate the solution design. What should you do?

Accepted Answer

Validating the solution design requires assessing performance against API limits. When throttling occurs, the architect must evaluate whether the flow can be optimized to reduce API calls (e.g., batch operations, trigger filtering), implement retry logic with exponential backoff (a Microsoft best practice for handling transient throttling), and determine if current design patterns need architectural changes. Developer environments have the same API limits as production.

Question 20

You are a Power Platform solution architect. Your team is preparing to go live with a large Dynamics 365 Customer Engagement and Power Platform implementation. Three days before the go-live date, the data migration team reports that 15% of migrated Account records have duplicate contacts associated with them due to a data quality issue in the source system. The go-live date is fixed due to a contractual obligation. You need to support go-live. What is the most appropriate action?

Accepted Answer

Supporting go-live when data migration issues are discovered requires escalating the issue and providing options to resolve them. The architect should quantify the business impact, attempt to remediate using available tools (Dataverse Duplicate Detection), and if full remediation is not possible within the timeline, propose a phased approach — migrating clean records first and remediating the remaining records in a subsequent wave. This balances the contractual go-live obligation with data quality requirements.

Question 21

You are a Power Platform solution architect. During the solution review, you discover that a business rule configured on the Opportunity table conflicts with a Power Automate flow that also runs when an Opportunity is updated. The business rule sets the Status to 'Pending Review' when the estimated value exceeds $100,000, but the flow simultaneously changes the Status to 'Approved' for the same condition. Users report that Opportunity statuses are unpredictable. You need to resolve automation conflicts. What should you do?

Accepted Answer

Resolving automation conflicts requires identifying the source of conflict and consolidating the logic into a single authoritative mechanism. Business rules run synchronously at the form level during save, while Power Automate flows triggered by Dataverse record changes run asynchronously after the save completes — the flow will overwrite the business rule's value. The correct approach is to consolidate status assignment into one mechanism (either the business rule or the flow) and remove conflicting logic from the other.

Question 22

You are a Power Platform solution architect. A client has identified a performance issue one week before go-live: their Power Apps model-driven app loads the Account form in 8–12 seconds, which is unacceptable. Profiling reveals the form has 45 subgrids loading simultaneously, multiple JavaScript web resources executing on load, and business rules evaluating complex conditions across 30 fields. You need to identify and resolve performance issues. What is the recommended approach?

Accepted Answer

Resolving Power Apps model-driven app performance issues requires addressing the root causes: (1) Moving subgrids to tabs so they only load when the user navigates to that tab reduces initial page load overhead, (2) Consolidating and minifying JavaScript reduces the number of HTTP requests and script execution time on load, (3) Moving complex business rule logic to server-side plugins shifts processing to the server where it's more efficient. Simply increasing bandwidth or replacing the app type does not address the underlying design issues.

Question 23

You are a Power Platform solution architect. A client wants to add a new capability to their existing Dynamics 365 Sales implementation: an AI-powered lead scoring model that predicts the likelihood of a deal closing based on historical data. The client wants to know if this can be achieved within Microsoft Power Platform without purchasing additional third-party AI tools. You need to identify Microsoft Power Platform solution components. Which component addresses this requirement natively?

Accepted Answer

Identifying Microsoft Power Platform solution components includes knowing that Dynamics 365 Sales includes a built-in predictive lead scoring feature powered by AI Builder. This feature trains on historical Dynamics 365 opportunity and lead data to produce a predictive score for each lead, requiring no third-party AI tools. This is a native component of the existing Microsoft ecosystem the client already uses.

Question 24

You are a Power Platform solution architect. A client's solution requires connecting their Power Platform environment to their on-premises Microsoft Dataverse data through a private network without exposing traffic to the public internet. Their IT security policy prohibits any inbound firewall rule changes on-premises. You need to assess networking possibilities to support integrations. Which approach satisfies these requirements?

Accepted Answer

Both the on-premises data gateway (Option A) and Azure ExpressRoute (Option C) can satisfy the requirements. The on-premises data gateway uses outbound HTTPS connections to Azure Service Bus relay, requiring no inbound firewall rules — ideal for lower-bandwidth, simpler integrations. Azure ExpressRoute provides a dedicated private circuit from the corporate network to Microsoft Azure, offering higher bandwidth, lower latency, and no public internet exposure — ideal for high-volume or latency-sensitive integrations. The choice depends on bandwidth and latency requirements. The architect must assess both options against the specific integration needs.

Question 25

You are a Power Platform solution architect. Your team has completed a security review of a Power Platform solution. You discover that a custom API endpoint built as a Power Pages custom API allows unauthenticated callers to query Microsoft Dataverse data by passing a table name as a query parameter. You need to review the security across the solution. What is the most critical remediation?

Accepted Answer

The security review has identified a critical vulnerability: an unauthenticated API that exposes Dataverse data. The remediation must address authentication (require Entra ID tokens to identify the caller), authorization (verify the caller has appropriate Dataverse table-level permissions before returning data), and input validation (prevent injection attacks via the table name parameter). Input validation alone (Option A) does not prevent an authenticated attacker from querying authorized tables. Monitoring (Option D) is reactive, not preventive. A VPN (Option C) restricts network access but does not enforce identity-based authorization.

PL-600 — Microsoft Power Platform Solution Architect