Build Microsoft Power Platform solutions

AB-400 · 55 questions

• A requirements workshop for a field-inspection solution produced three items: inspectors capture results on tablets with no connectivity at remote sites, roughly 200,000 product rows arrive from an ERP system every night, and each failed inspection needs a two-stage manager approval with notifications. Which mapping of requirement to component type is the most appropriate design?
• A solution validates that a discount column never exceeds 30 percent by using a JavaScript web resource registered on the main form's OnSave event. An integration that creates rows through the Dataverse Web API keeps loading discounts above 30 percent without any error. What change gives the architecture the enforcement it needs?
• An Azure Functions app must read and update Dataverse rows every 15 minutes with no signed-in user. Security requires that the service not use any person's account, not consume a user license, and not store a user password. Which authentication design meets these requirements?
• A developer is building a custom connector for an internal REST API that is protected by Microsoft Entra ID. Auditors require every call to run with the identity of the person using the app or flow so that the API can apply that user's own permissions. Which security configuration should the connector use?
• A team configured server-to-server authentication: the Microsoft Entra ID app registration issues tokens for the correct environment URL, and an application user linked to the app exists in the environment. Every Web API request now returns an error stating that the principal is missing a privilege. What is the most likely fix?
• A requirement states that the Contract End Date column must have a value whenever a contract's status is Approved. The rule must apply on model-driven forms and must also stop rows that arrive through the Web API or data imports, and the team wants no custom code. Which design meets the requirement out of the box?
• A parent Project table must display the total of the Amount column across its related Expense rows. A developer proposes a plug-in on Expense create, update and delete to maintain the total. The business accepts that the total can lag by a few hours, and the team wants to avoid custom code. What should the developer use instead?
• A rule says a purchase order cannot be saved with a supplier that is on a blocked list. The rule must apply to users on forms, to integrations calling the Web API, and to bulk imports, and a violating save must leave no partial changes behind. Where should this logic be implemented?
• When a new support case is created, a message must be posted to a Teams channel and a ticket must be opened in an external service desk through its REST API. The user's save must not wait for either call, and citizen developers on the support team must be able to maintain the logic. Which approach fits best?
• Users of a model-driven app ask that the Competitor Name column appear only when the Lost Reason column is set to Competitor, and that it update instantly while they fill out the form. Which implementation approach is appropriate for this requirement?
• A manufacturer streams device telemetry into Dataverse, producing millions of short-lived rows per day. Ingestion must scale horizontally without slowing the transactional tables, and each row must disappear automatically a set number of days after its last change, without any scheduled cleanup job. Which table design fits?
• Customer order history must remain in an existing external SQL Server database, which stays the system of record. Users still need to see these orders as rows in model-driven views, open them on forms and select them in lookups, without copying the data into Dataverse. Which option meets the requirement?
• A solution cloud flow uses the Microsoft Dataverse connector and the HTTP connector. After a tenant administrator publishes a new data policy, the flow is suspended and can no longer be saved. What is the most likely cause?
• A plug-in registered to run in the context of the calling user retrieves open opportunities for a report. For some users the plug-in returns all open opportunities in the company, while for others it returns only those they own or those in their own business unit. What explains the difference?
• A cross-business-unit project team of eight people needs to read and update twelve specific account rows owned by another business unit. Their security roles must stay unchanged, and no one should gain access to any other accounts. Which approach meets the requirement?
• A finance solution calculates tax on invoices. Auditors require that the same invoice inputs always produce exactly the same tax amount and that the logic behind each result can be reviewed line by line. How should the developer implement the calculation?
• Incoming customer emails arrive in many languages and writing styles. Each must be summarized and assigned to one category from a fixed list of eight before a cloud flow routes it to a queue. Which design is most appropriate?
• A team owns a mature React single-page application with its own Vite build, component library and unit tests. They want it to run on Power Platform, call Dataverse and other connectors, and be governed by the platform's sharing and data policy controls, without rewriting the UI. Which option should they choose?
• A rich slider-and-gauge input must replace the standard number control for a Risk Score column on many model-driven forms across several tables. It must bind to the column, raise changes like a native control, and be configurable per form through properties. Which component type is the right fit?
• A maker wants to describe a complete page in natural language, for example a page that lists overdue invoices with filters and a summary panel, and have Power Apps produce that page inside an existing model-driven app for further refinement. Which capability matches this request?
• An HR team of business makers must build a question-and-answer agent over their policy documents, publish it to Microsoft Teams, and maintain its topics and knowledge sources themselves with minimal code. Which platform should they build the agent on?
• A pro-code engineering team is building an agent that must use a specific model deployment they choose, run custom orchestration logic written in Python, and be hosted and scaled under their own Azure governance. Power Platform data will be reached later through tools. Which platform best fits?
• An address-entry experience that shows suggestions in a dropdown as the user types is implemented as JavaScript copied onto twelve forms. The copies have drifted apart, and one copy injects its dropdown by editing the form's HTML. How should the developer redesign it as a reusable component?
• Several tables' forms need the same helper functions for formatting phone numbers and validating postal codes. The developer wants one maintainable client-scripting design that avoids global name collisions with other solutions' scripts. Which design should the developer use?
• Two requirements arrive for the same model-driven app: a full dashboard-style page that summarizes open work across several tables, and a star-rating control for the Satisfaction column on the case form. Which pairing of component types best matches the scope of each requirement?
• Makers across several departments need to call an internal REST API, which has an OpenAPI definition, from canvas apps and cloud flows. IT wants authentication configured once, the integration shipped in solutions, and its use governed by data policies. Which integration design should the developer deliver?
• An internal inventory API must be usable as tools by agents built in Microsoft Copilot Studio and by agents built in Microsoft Foundry. The team wants agents to discover the available operations and their inputs through a standard protocol rather than custom integration code in each agent. What should the team design?
• A new MCP server exposes six tools for order management. During testing, the Copilot Studio agent connected to it keeps calling the get-order-status tool when users ask to cancel an order, even though a cancel tool exists. What should the developer change first?
• A pricing operation must be callable from canvas apps, from cloud flows through the Dataverse connector, and from the Dataverse Web API as a named message with typed inputs and outputs. The developers want to define it in code, ship it in solutions, and prevent other solutions from registering steps that alter it. What should they design?
• A custom API recalculates the credit limit of exactly one account each time it runs, and callers always know which account they are targeting. The developer wants the Web API call to address that account directly and wants the plug-in to receive it without defining an extra parameter. Which binding should the developer choose?
• A custom API returns a risk summary for a supplier and never changes any data. It will be called only from TypeScript through the Dataverse Web API, and testers want to call it from a browser address bar. How should the developer define it?
• When a capital request row in Dataverse changes to Submitted, a two-stage approval must start: the department head approves first, then finance. Approvers must be notified in Microsoft Teams and Outlook, and the process can take several days. Which automation design should the developer use?
• A Copilot Studio agent helps employees request equipment. Fulfilment always follows the same five steps: check budget, create the order, reserve stock, notify the manager, and log the request. The business wants these steps to run identically every time the agent invokes them. How should the developer design this?
• Account changes in Dataverse must be delivered to three independent Azure consumers: a billing service, a data warehouse loader and an audit service. Each consumer must receive every change, even if it is offline for several hours, without slowing users' saves. Which outbound integration design meets this?
• Every night an external system delivers about 300,000 product price updates. The current design runs one cloud flow per record, which takes hours and regularly hits service protection limits. Which redesign best addresses throughput and reliability?
• A development team is deciding whether to run its new internal web interface as a Power Apps code app or to host it independently in Azure App Service. Which benefit does the code app option provide that independent hosting would not provide on its own?
• A developer has an existing TypeScript web app with its own component library. It must now read and write Dataverse rows and look up users through the Office 365 Users connector, and it must run on Power Platform under the environment's governance. What is the appropriate approach?
• A Copilot Studio agent must let employees update the status of their own Dataverse opportunity rows. Security requires that the agent never change a row the employee could not change in the model-driven app. How should the developer configure the agent's Dataverse action?
• A Copilot Studio agent tells sales staff the current stock level and price of products, but its answers come from facts pasted into its instructions months ago and are now wrong. The live values are maintained in Dataverse tables. What should the developer do?
• An operations team wants a single place to analyse telemetry from a production environment's model-driven apps, Dataverse plug-in executions and cloud flow runs, with their own retention and custom queries. The environment is a managed environment. What should the developer design?
• A support team wants an email when a production cloud flow's daily run success rate falls below 95 percent. The environment is a managed environment, the team has no Azure subscription, and they want to set this up as environment administrators. Which approach meets the requirement?
• A code app sends client-side telemetry to an Application Insights resource, and page views and dependency calls appear as expected. However, the same resource contains no Dataverse diagnostics or plug-in data for that environment. What is the most likely reason?
• Importing a managed solution into the test environment fails with a message that a required component is missing: a custom column on the account table that one of the solution's forms references. The column exists in the development environment. How should the developer resolve this?
• Before deleting a custom column from a table, a developer must know which forms, views and other solution components reference it, so that nothing breaks after the deletion. Which approach should the developer use?
• A large solution is being split into a core solution containing shared tables and security roles, and three feature solutions whose forms, views and flows use those tables. All solutions are deployed as managed. Which deployment rule must the team follow?
• A solution cloud flow calls an external API whose base URL is different in development, test and production. The URL must change per environment during deployment, without editing the flow, and the deployment tooling should prompt for or supply the value at import. What should the developer use?
• A developer updated an environment variable's default value from an old API URL to a new one and imported the updated managed solution into test. A flow in test still calls the old URL. The variable already had a value set in test from an earlier deployment. What is the cause?
• A custom connector needs an API secret that differs in each environment. The secret must not be stored in the solution, in the connector definition or as plain text in Dataverse, and it already lives in Azure Key Vault in the same tenant. What should the developer use?
• A bug fix to a form was shipped in an updated managed solution and imported into production without errors, but users still see the old form behaviour. Someone had previously edited that form directly in production. What should the developer do?
• Two managed solutions from different vendors are installed in an environment, and both change the maximum length of the same text column on the account table. Solution A was installed first and Solution B second, and nobody has made unmanaged changes. Which maximum length does the column use at run time?
• A team is setting up Power Platform Pipelines to move a solution from a development environment through test to production. The solution contains connection references and environment variables, and each target environment needs its own connection and variable values. Which setup meets the requirement?
• An organization uses Power Platform Pipelines. Every deployment to the production stage must pause after it is approved so that a change-management ticket can be validated by custom logic and a final approval collected before the solution is imported. How should a developer implement this?
• A developer is building an Azure DevOps pipeline with Microsoft Power Platform Build Tools that captures a solution from the development environment into a Git repository after each change. Which task order produces source-controlled solution files?
• A release pipeline in Azure DevOps uses Microsoft Power Platform Build Tools to import solutions into a production environment that enforces multifactor authentication for all interactive users. Which authentication approach should the pipeline's service connection use?
• A company wants its Azure DevOps release pipeline built with Microsoft Power Platform Build Tools to stop automatically when a solution contains code or configuration issues above an agreed severity, and to deploy only managed solutions to test and production. What should the developer configure?