Free Demo Questions

Test Online Free Microsoft PL-400 Exam Questions and Answers

Practice a live sample before buying full access. This page keeps the free PL-400 question set organized by page so visitors and search engines can reach the canonical -questions.html URL directly.

Updated Feb 10, 2026 93 Questions 7 Pages
Page 5 of 7
Question 61 Selectable Answer
You plan to create a canvas app to manage large sets of records. Users will filter and sort the data.
You must implement delegation in the canvas app to mitigate potential performance issues.
You need to recommend data sources for the app.
Which two data sources should you recommend? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Answer:
Explanation:
When you are creating reports from large data sources (perhaps millions of records), you want to minimize network traffic.
Working with large data sets requires using data sources and formulas that can be delegated. It's the only way to keep your app performing well and ensure users can access all the information they need. Delegation is supported for certain tabular data sources only.
These tabular data sources are the most popular, and they support delegation:
✑ Common Data Service
✑ SharePoint
✑ SQL Server
Reference: https://docs.microsoft.com/en-us/powerapps/maker/canvas-apps/delegation-overview
Question 62 Selectable Answer
You are creating a Power Automate flow.
You create an Azure Service Bus listener app that receives requests from a third-party application.
When the flow calls the message queue, it must delete the message as soon as it is read.
You need to ensure that the queue is cleared properly.
Which method or class should you use?

Answer:
Explanation:
ReceiveMode enumerates the values for the receive mode. The default is PeekLock.
Fields:
PeekLock: Specifies the PeekLock receive mode. This is the default value for ReceiveMode.
ReceiveAndDelete: Specifies the ReceiveAndDelete receive mode.
Note: You can specify two different modes in which Service Bus receives messages.
Receive and delete. In this mode, when Service Bus receives the request from the
consumer, it marks the message as being consumed and returns it to the consumer
application.
Peek lock.
Reference:
https://docs.microsoft.com/en-us/azure/service-bus-messaging/service-bus-queues-topics-subscriptions
https://docs.microsoft.com/en-us/dotnet/api/microsoft.servicebus.messaging.receivemode
Question 63 Written Answer
DRAG DROP
A company has a Common Data Service (CDS) environment.
All accounts in the system with a relationship type of Customer set must have an account number. A plug-in has been developed.
When a Customer is updated with a relationship type, the plug-in sets the account number if not provided by the user.
You need to register the plug-in.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.


Answer:


Explanation:
Timeline
Description automatically generated with medium confidence
Step 1: In the Plug-in Registration tool, select Register New Assembly.
You use the Plug-in Registration tool (PRT) to register your plug-in assemblies and steps.
Registering an assembly is the process of uploading the assembly to the Dataverse database.
Step 2: In the Plug-in Registration tool, Select Register New Step,..PreOperation PreOperation occurs before the main system operation and within the database transaction.
If you want to change any values for an entity included in the message, you should do it here.
Step 3: In the Plug-in Registration tool, Select Register New Image, change the Image type to be a PreImage, and..
If your plug-in step is registered in the PreValidation or PreOperation stages of the execution pipeline, you could use the Organization service to retrieve the current value of the property, but this is not a good practice for performance. A better practice is to define a pre-entity image with your plug-in step registration.
Question 64 Written Answer
DRAG DROP
You need to set up security to meet the requirements.
How should you configure security? To answer, drag the appropriate security mechanisms to the correct users. Each security mechanism may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.


Answer:


Explanation:
Box 1: Field level security
Only supervisors must be able to view phone numbers in the Accounts form.
You use field security tables to apply field-level security, which restricts field access to specified users and teams. The scope of field-level security is global, which means that it applies to all records within the organization, regardless of the business unit hierarchical level to which the record or the user belongs. Field security works in all Microsoft Dataverse clients, including the Web client, Dynamics 365 for Outlook, and Dynamics. It applies to all components, such as the Dataverse web services, reports, search, offline, filtered views, auditing, and duplicate detection.
Box 2: Team Security
Sales users must only have access to their own records.
Owner team: An owner team owns records and has security roles assigned to the team. A user's privileges can come from their individual security roles, those of the teams that they're part of or the ones they inherit. A team has full access rights on the records that the team owns. Team members are added manually to the owner team.
Box 3: Environment security
Developers must be able to create new apps for all users.
Environment maker: Can create new resources associated with an environment, including apps, connections, custom APIs, gateways, and flows using Microsoft Power Automate. However, this role doesn't have any privileges to access data within an environment.
Question 65 Written Answer
DRAG DROP
A company implements Dynamics 365 Sales.
Only sales managers must be able to perform the approval to move high value sales on in the opportunity qualification process. A new field must be created to capture the approval.
You need to create and secure the new field.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.


Answer:


Explanation:
Step 1: Enable field security in the Approval field.
✑ Enable field security on one or more fields for a given entity.
✑ Associate one more existing security profiles, or create one or more new security profiles to grant the appropriate access to specific users or teams (step 2 and step 3 below).
Step 2: Create a new field security profile.
Create a new field security profile for the sales manager.
Step 3: Set the field permissions…security profile
Step 2 and step 3, example:
Configure the security profiles.
✑ Create the field security profile for sales managers.
✑ Go to Settings > Security.
✑ Click Field Security Profiles.
✑ Click New, enter a name, such as Sales Manager access contact mobile phone, and click Save.
✑ Click Users, click Add, select the users that you want to grant read access to the mobile phone number on the contact form, and then click Add.
✑ Click Field Permissions, click mobilephone, click Edit, select Yes next to Allow Read, and then click OK.
Question 66 Written Answer
HOTSPOT
A manufacturing company takes online orders.
The company requires automatic validation of order changes.
Requirements are as follows:
✑ If validation is successful, the order is submitted.
✑ If exceptions are encountered, a message must be shown to the customer.
You need to set up and deploy a plug-in that encapsulates the rules.
Which options should you use? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.


Answer:


Explanation:
Box 1: PreValidation
PreValidation: For the initial operation, this stage will occur before the main system operation.
This provides an opportunity to include logic to cancel the operation before the database transaction.
Box 2: Synchronous
Ideally, you should only cancel operations using synchronous plug-ins registered in the PreValidation stage.
Box 3: Pre Image
Box 4: throw ..
When you throw an InvalidPluginExecutionException exception within a synchronous plug-in an error dialog with your message will be displayed to the user.
Question 67 Selectable Answer
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than once correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are developing a model-driven app for a company.
When you create a new Account record, you must automatically display a form to collect data that is needed to create a Contact record. The form must switch to the appropriate form layout based on the contact type.
You open the Contact form by using JavaScript. You pass the contact type information to the form by using the Xrm.Navigation.openForm function. An OnLoad event handler in the Contact form processes the data and shows only the appropriate sections of the form for the given contact type.
You need to configure the receiving form to accept the data parameter.
Solution: In the form editor, add an event handler for the data parameter.
Does the solution meet the goal?

Answer:
Explanation:
By default, model-driven apps allows a specified set of query string parameters to be passed to a form. You use these parameters to set default values when you create a new record in the application. Each parameter must use a standard naming convention that includes a reference to the column logical name.
There are two ways to specify which query string parameters will be accepted by the form:
✑ Edit form properties
✑ Edit form XML
Reference: https://docs.microsoft.com/en-us/powerapps/developer/model-driven-apps/configure-form-accept-custom-querystring-parameters
Question 68 Selectable Answer
You need to modify Microsoft flow to resolve CustornerCs issue.
What should you do?

Answer:
Explanation:
Scenario: CustomerC requested additional information from the parts department through the customer survey and has not received a response one week later.
Imagine having a process where you want to give someone a couple of days to reply to an approval. If that someone doesn't respond in time, you want to assign a new approval to another person or group of people. To achieve this you can set the timeout in the action settings.
Reference: https://www.o365dude.com/2018/06/02/timeout-flow-approvals/
Question 69 Selectable Answer
You need to configure the system to support automation for referrals.
What are two possible ways to achieve the goal? Each correct selection presents a complete solution. NOTE: Each correct selection is worth one point.

Answer:
Question 70 Selectable Answer
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
An organization has an Azure SQL Database instance that must be synchronized daily with data from Dynamics 365 Sales. A large amount of data might need to be synchronized on some days.
You need to reduce the time required to synchronize data.
Solution:
Enable change tracking for entities that will be synchronized.
Use the Data Export Service to sync data between the database and Dynamics 365 Sales.
Does the solution meet the goal?

Answer:
Explanation:
Large organizations that synchronize their data with external data sources can now enable entities for change tracking. You can export or retrieve a selected set of data, and then keep the external data warehouse in sync.
The Data Export Service is an add-on service made available on Microsoft AppSource that adds the ability to replicate data from Common Data Service database to an Azure SQL Database store in a customer-owned Azure subscription.
The Data Export Service intelligently synchronizes the entire data initially and thereafter synchronizes on a continuous basis as changes occur (delta changes) in the system.
You can use the Data Export Service with model-driven apps in Dynamics 365, such as Dynamics 365 Sales and Dynamics 365 Customer Service.
Reference: https://docs.microsoft.com/en-us/power-platform/admin/enable-change-tracking-control-data-synchronization
https://docs.microsoft.com/en-us/power-platform/admin/replicate-data-microsoft-azure-sql-database
Question 71 Written Answer
HOTSPOT
You are developing a Web API for a company.
You need to implement the appropriate operations to meet the company’s requirements.
What should you implement? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.


Answer:


Explanation:
Box 1: Functions
Box 2: Actions
Box 3: Complex types
Complex types are keyless named structured types consisting of a set of properties. Complex types are commonly used as property values in model entities, or as parameters or return values for operations.
Question 72 Written Answer
HOTSPOT
An online store has a custom web page that allows customers to place their orders against a Microsoft Dataverse database that uses custom products. The custom web page uses Web API patterns to create and update records.
Customers report that orders can be placed for out-of-stock items.
You need to update the page code to ensure that inventory is available before confirming an order.
Which pattern should you use for each step? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.


Answer:


Explanation:
Box 1: IsOptimisticConcurrencyEnabled
On a multi-threaded and multi-user system like Power Apps, operations and data changes often happen in parallel. A problem arises when two or more update or delete operations on the same piece of data happen at the same time. This situation could potentially result in data loss. The optimistic concurrency feature provides the ability for your applications to detect whether a table record has changed on the server in the time between when your application retrieved the record and when it tries to update or delete that record.
Box 2: If-Match: Etag
Use If-Match and If-None-Match headers with ETag values to check whether the current version of a resource matches the one last retrieved, matches any previous version or matches no version. These comparisons form the basis of conditional operation support. Dataverse provides ETags to support conditional retrievals, optimistic concurrency, and limited upsert operations.
Question 73 Selectable Answer
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
A Common Data Service (CDS) environment has two custom entities named Building code and Work item. Building code has a code date custom field and Work item has an elapsed time custom field. Construction workers use a consolidated custom form with data from both entities to fill.in their daily work items.
A JavaScript library is used with these custom entities and fields to apply complex logic.
You need to ensure that the JavaScript library continues to function as originally designed if other developers expand the environment.
Solution: In the JavaScript library, add Building code with Code date and Work item with Elapsed time in the dependencies tab.
Does the solution meet the goal?

Answer:
Explanation:
Within a solution you can define dependencies within solution components. Up until Dynamics 365 for Customer Engagement apps version 9.0 the main purpose of these dependencies was to prevent the deletion of a solution component when another solution component depended on it.
The following image shows the dependencies tab within the web resource form.
Dependencies between web resources are set in the top list.



Reference: https://docs.microsoft.com/en-us/dynamics365/customerengagement/on-premises/developer/web-resource-dependencies
Question 74 Written Answer
DRAG DROP
You need to assign the minimum environmental security role to the appropriate users.
Which security roles should you use? To answer, drag the appropriate security roles to the correct users. Each security role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.


Answer:


Explanation:
Graphical user interface, application
Description automatically generated
Box 1: Environment Maker
UserA must be able to create and publish Power Apps apps.
The Environment Maker role can create resources within an environment including apps,
connections, custom connectors, gateways, and flows using Power Automate.
Box 2: System Administrator
UserB must be the owner of all the systems and be able to provide permissions and create all new environments.
The System Administrator has full permission to customize the system. Can view all data in the system.
Box 3: System Customizer
UserC must be able to create apps connected to the systems and update the security roles and entities.
The System Customizer has full permission to customize the system. Can only view rows for system tables that they create.
The difference between the System Administrator and System Customizer security roles is that a system administrator has read privileges on most rows in the system and can see everything. Assign the System Customizer role to someone who needs to perform customization tasks but shouldn’t see any data in the system tables.
Box 4: Common Data Service User
To stay consistent with our product rebranding effort, the security role Common Data Service User is being changed to Basic User.
The Basic User security role primarily contains Basic privileges for core entities where the user can write, update, and delete records that they created or owned.
Question 75 Written Answer
DRAG DROP
You need to select the appropriate methods using the Azure Event Grid.
Which method should you use for each requirement? To answer, drag the appropriate methods to the correct requirements. Each method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.


Answer:


Explanation:
Box 1: Event handler
Event handlers - The app or service reacting to the event.
Box 2: Event subscriptions
Event subscriptions - The endpoint or built-in mechanism to route events, sometimes to more than one handler. Subscriptions are also used by handlers to intelligently filter incoming events.
Note:
There are five concepts in Azure Event Grid that let you get going:
Events - What happened.
Event sources - Where the event took place.
Topics - The endpoint where publishers send events.
Event subscriptions - The endpoint or built-in mechanism to route events, sometimes to more than one handler. Subscriptions are also used by handlers to intelligently filter incoming events.
Event handlers - The app or service reacting to the event.
Showing page 5 of 7