Microsoft PL-400 Exam
Microsoft Power Platform Developer (Page 12 )

Updated On: 1-Feb-2026

DRAG DROP (Drag and Drop is not supported)
You are developing a Power Platform app for a school. The school plans to use the app to gather information about classes and students.
You must design a plug-in for the app. You must store data about students in the Contacts table and store data about classes in a custom table.
You need to select the stage in the event pipeline for each function.

Which stages should you use? To answer, drag the appropriate plug-in stages to the correct functions. Each plug-in stage may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.
Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Box 1: PreValidation
For the initial operation, this stage will occur before the main system operation.
This provides an opportunity to include logic to cancel the operation before the database transaction.

Box 2: PreOperation
Occurs before the main system operation and within the database transaction.
If you want to change any values for an entity included in the message, you should do it here.
Avoid cancelling an operation here. Canceling will trigger a rollback of the transaction and have significant performance impact.

Box 3: PostOperation
Occurs after the main system operation and within the database transaction.
Use this stage to modify any properties of the message before it is returned to the caller.


Reference:

https://docs.microsoft.com/en-us/powerapps/developer/data-platform/event-framework



The communication department for a company plans to add a publicly accessible survey page to the company's public website.
You must add the new survey page to the company's public website and capture data from the page to a Common Data Service environment.
Explicit user credentials must not be required to write survey data to Common Data Service.
You need to implement authentication.
Which authentication mechanism should you implement?

  1. ADFS
  2. Azure AD Conditional Access
  3. OAuth 2.0
  4. Client secret

Answer(s): C

Explanation:

The OAuth 2.0 client credentials grant flow permits a web service (confidential client) to use its own credentials, instead of impersonating a user, to authenticate when calling another web service.
Note: OAuth is the preferred means to authenticate because it provides access to both the OData RESTful web services (Web API and OData global Discovery service) as well as to the SOAP web services (Organization service and Discovery service).
OAuth is also required to support:
-Azure Active Directory configurations for conditional access, such as Two-factor Authentication (2FA)
-Use of client secrets to enable server-to-server authentication scenarios.
-Cross-Origin Resource Sharing (CORS) to connect a Single-page Application (SPA)


Reference:

https://docs.microsoft.com/en-us/power-platform/admin/wp-security https://docs.microsoft.com/en-us/powerapps/developer/data-platform/authentication



The communication department for a company plans to add a publicly accessible survey page to the company's public website.
You must add the new survey page to the company's public website and capture data from the page to a Common Data Service environment.
Explicit user credentials must not be required to write survey data to Common Data Service.
You need to implement authentication.
Which authentication mechanism should you implement?

  1. Microsoft 365
  2. X.509 certificate
  3. OAuth 2.0
  4. Claims-based

Answer(s): C

Explanation:

OAuth is the preferred means to authenticate because it provides access to both the OData RESTful web services (Web API and OData global Discovery service) as well as to the SOAP web services (Organization service and Discovery service).
OAuth is also required to support:
-Azure Active Directory configurations for conditional access, such as Two-factor Authentication (2FA)
-Use of client secrets to enable server-to-server authentication scenarios.
-Cross-Origin Resource Sharing (CORS) to connect a Single-page Application (SPA)
Incorrect Answers:
A: Using Microsoft 365 authentication does not require that your register your applications as OAuth does. You must simply provide a User Principal Name (UPN) and password for a valid user.


Reference:

https://docs.microsoft.com/en-us/powerapps/developer/data-platform/authentication



DRAG DROP (Drag and Drop is not supported)
You are developing a Power Apps app for a company. The app will interact with the company's enterprise resource planning (ERP) system. The app allows users to create quotes for customers. You are creating a plug-in for the app.

The solution must meet the following requirements:

•Display an error message if there is no account associated with a quote and prevent changes to the quote.
•Synchronize quotes with the external ERP system.

You need configure the plug-in execution pipeline.

Which pipeline stages should you use? To answer, drag the appropriate pipeline stages to the correct requirements. Each pipeline stage may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

  1. See Explanation section for answer.

Answer(s): A

Explanation:



HOTSPOT (Drag and Drop is not supported)
You are developing a new model-driven app.
You must create a custom connector to connect the app to the Microsoft Graph API.
You need to configure the environment before creating the custom connector.

Which actions should you use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Viewing page 12 of 80
Viewing questions 56 - 60 out of 429 questions



Post your Comments and Discuss Microsoft PL-400 exam prep with other Community members:

Join the PL-400 Discussion