PL-400: Power Platform Developer Practice Exam

What the PL-400 exam covers

• Create a technical design28 questions
• Build Power Platform solutions19 questions
• Implement Power Apps improvements33 questions
• Extend the user experience186 questions
• Extend the platform287 questions
• Develop integrations184 questions

Free PL-400 practice test questions

A sample of 10 questions with answers and explanations. Sign up free to practice all 737.

1. Question 1Create a technical design

   When should a developer extend Power Platform with PRO-code (e.g., plug-ins) versus low-code?

   • AWhenever a canvas app needs a new screen, since screens can only be added through custom C# plug-in code
   • BFor every field validation, because business rules and Power Fx cannot validate any data on their own
   • COnly when the maker lacks a Power Apps license, since low-code features are entirely license-gated
   • DWhen requirements exceed low-code capabilities (complex server-side logic, integrations, performance needs)Correct
   ✓ Correct answer: D

   Power Platform is designed to maximize productivity through low-code development, which provides faster time-to-market, easier maintenance, and better supportability. PRO-code extensions with plug-ins should only be used when low-code capabilities cannot satisfy specific requirements, such as implementing complex server-side business logic, integrating with external systems that require custom authentication or transformation, or addressing performance challenges that demand code-level optimization.

   Why the other options are wrong

   • AAdding canvas screens is pure low-code configuration and never requires plug-in or custom C# code.
   • BBusiness rules and Power Fx validate fields declaratively, so pro-code is not required just for validation.
   • CPro-code versus low-code is driven by requirements, not by which Power Apps license a maker holds.
2. Question 2Create a technical design

   To control cost and avoid duplicate licensing in non-production work, which environment type is appropriate for short-lived development that auto-cleans up?

   • AA production environment with system backups disabled to reduce its storage cost
   • BThe tenant default environment shared by every maker across the whole organization
   • CA managed solution imported into an existing shared production environment
   • DA developer (trial-style) environment that can be deleted when no longer neededCorrect
   ✓ Correct answer: D

   Developer environments are trial-style, time-limited environments designed for short-lived development and testing work. They automatically expire and are cleaned up after a period of inactivity, require no separate licensing, and can be recreated on demand. This approach minimizes costs by avoiding long-term provisioning and eliminates the need for manual cleanup, making it ideal for non-production experimentation.

   Why the other options are wrong

   • AProduction environments are licensed, long-lived, and not meant for disposable dev work.
   • BThe shared default environment is not disposable and mixing dev work there harms governance.
   • CA managed solution is a deployment artifact, not an environment type for short-lived development.
3. Question 3Extend the user experience

   You need a reusable grid control that renders custom visuals and is shared by several model-driven and canvas apps. Which is the best choice?

   • ABuild a PCF code component and add it to a solution for reuseCorrect
   • BRecreate the control's JavaScript in each app separately
   • CUse a single web resource pasted into each form's HTML
   • DEmbed a screenshot image of the desired grid
   ✓ Correct answer: A

   PCF (Power Apps Component Framework) code components are reusable, packaged UI controls that can be added to a solution and deployed across multiple model-driven apps, canvas apps, and other environments. A PCF component encapsulates custom rendering logic (HTML/CSS/JavaScript/React, etc.), supports data binding, and is versioned as part of the solution, making it the ideal choice for shared UI elements. Once packaged, the same component can be referenced from any app in the organization.

   Why the other options are wrong

   • BRecreate the control's JavaScript in each app separately is incorrect because duplicating code across apps violates the DRY principle, increases maintenance burden, and causes inconsistency when updates are needed.
   • CUse a single web resource pasted into each form's HTML is incorrect because embedding the same web resource JavaScript into each form's HTML creates duplicated markup and defeats the purpose of centralized control versioning.
   • DEmbed a screenshot image of the desired grid is incorrect because a static image is not a functional control and does not render dynamic data or respond to user interactions.
4. Question 4Implement Power Apps improvements

   Which built-in canvas app capability helps you monitor and replay errors users encountered at runtime?

   • AThe Dataverse Plug-in Trace Log captured for server-side plug-in steps in the environment
   • BThe Power Automate cloud flow's run history for each individual flow execution instance
   • CApp monitoring with Monitor (and the App.OnError handler for capturing errors)Correct
   • DThe Dataverse audit log that records data changes made to individual table rows
   ✓ Correct answer: C

   Canvas apps provide built-in monitoring capabilities through the Monitor feature, which displays detailed logs of app execution, formula evaluation, and network calls in real-time. Additionally, the App.OnError handler allows developers to capture and log unhandled errors that occur during app runtime. Together, these features enable you to replay user sessions, understand exactly what actions led to errors, and diagnose issues that users encountered in production environments without requiring direct reproduction.

   Why the other options are wrong

   • AThe Plug-in Trace Log records server-side plug-in output, not canvas app runtime user errors.
   • BFlow run history shows cloud flow runs, not errors users hit inside a canvas app.
   • DThe audit log tracks data changes, not canvas app runtime errors or their replay.
5. Question 5Build Power Platform solutions

   What restricts access to specific sensitive columns (such as a salary field) for users who can otherwise read the row?

   • AA record sharing entry that grants a user extra access to the row
   • BA pre-operation plug-in image captured on the update step
   • CA shared canvas app component library used across apps
   • DColumn-level (field) security with a column security profileCorrect
   ✓ Correct answer: D

   Column-level security in Dataverse allows organizations to restrict read or write access to specific columns regardless of whether a user can access the record itself. Administrators create a column security profile that specifies which columns are secured, then assign that profile to specific security roles or teams. Users with those roles who can otherwise read a record will be prevented from accessing the secured columns, making this ideal for protecting sensitive data like salary information, social security numbers, or other personally identifiable information at the field level.

   Why the other options are wrong

   • ARecord sharing grants access to whole rows, not a way to restrict individual sensitive columns.
   • BA plug-in image supplies attribute values to code; it does not restrict column visibility to users.
   • CA component library shares UI building blocks and has no role in securing sensitive columns.
6. Question 6Extend the user experienceSelect all that apply

   A developer builds a Power Apps Component Framework (PCF) control that must render a filtered, sortable set of related rows bound to a subgrid on a model-driven form, and it must page through results and refresh when the user requests more records. Which TWO PCF capabilities should the developer use? (Choose two.)

   • AField (property-set) control binding
   • BDataset control bindingCorrect
   • Ccontext.parameters dataset paging.loadNextPageCorrect
   • DNotification API (Xrm.App)
   • ENavigation API (openForm)
   ✓ Correct answer: B, C

   A dataset (grid) control binding lets the PCF component receive a collection of records and their columns from the subgrid, which is exactly what is needed to render a filtered, sortable set of related rows. The dataset paging object, accessed through context.parameters, exposes loadNextPage (and related paging members) so the control can fetch additional pages and refresh when the user asks for more. Together they satisfy the requirement.

   Why the other options are wrong

   • AA field (property-set) control binds to a single column value, so it cannot render or page a collection of related rows.
   • DThe Notification API surfaces app-level messages to the user; it does not bind or page grid data.
   • EThe Navigation API opens forms and dialogs; it plays no role in rendering or paging a bound dataset.
7. Question 7Develop integrationsSelect all that apply

   An administrator at Adatum Corporation is planning to use authentication for connectors. Which two of the following are requirements or features of this solution? (Choose two.)

   • APower Automate custom connectors
   • BAlternate keysCorrect
   • CDataverse Web API
   • DConnectors for authentication
   • EUpsert operationsCorrect
   ✓ Correct answer: B, E

   Connector authentication requires supporting mechanisms for data matching and intelligent record updates. Alternate keys enable systems to identify records in Dataverse using business-meaningful attributes rather than requiring knowledge of GUIDs, allowing external systems to match data during authentication token validation and authorization checks. Upsert operations work in conjunction with connector authentication by allowing external systems to create or update records in a single authenticated transaction, reducing the number of API calls needed and maintaining data consistency during integration operations.

   Why the other options are wrong

   • APower Automate custom connectors is incorrect because while custom connectors can implement authentication, they are not a requirement for authentication itself.
   • CDataverse Web API is incorrect because the Web API is an interface for accessing data, not a requirement for implementing connector authentication.
   • Dconnectors for authentication is incorrect because this option is malformed and does not represent a valid technical component.
8. Question 8Extend the platform

   Proseware Inc is evaluating performance profiling. Performance profiling completely replaces the need for HTML web resources in all deployment scenarios.

   • TrueTrue
   • FalseFalseCorrect
   ✓ Correct answer: False

   Performance profiling does not completely replace the need for HTML web resources. While performance profiling helps optimize application performance, HTML web resources serve distinct purposes such as providing custom UI components, styling, and additional client-side logic. Performance profiling is a diagnostic and optimization tool, whereas HTML web resources are functional components that deliver specific features. Organizations often need both capabilities to build complete solutions.

   Why the other options are wrong

   • TrueTrue is incorrect. The statement is false. Performance profiling does not completely replace the need for HTML web resources. While performance profiling helps optimize application performance, HTML web resources serve distinct purposes such as providing custom UI components, styling, and additional client-side logic.
9. Question 9Implement Power Apps improvements

   A maker wants a reusable, parameterized UI element (such as a custom header) shared across many screens within a single canvas app. Which feature should they use?

   • AA canvas app component with custom input/output propertiesCorrect
   • BA separate PCF dataset code control added to the screen
   • CA model-driven form section that is reused across the app
   • DA Dataverse business rule that is applied to the table
   ✓ Correct answer: A

   Canvas app components are self-contained, reusable building blocks defined once and inserted on multiple screens, and they expose custom input and output properties for parameterization and data exchange. For sharing across apps, the component can be promoted to a component library, but within one app a component is the right tool.

   Why the other options are wrong

   • BA PCF dataset control is code-based and binds to data, not a simple reusable parameterized element within one app.
   • CModel-driven form sections do not exist in canvas apps and cannot be shared across canvas screens.
   • DA business rule runs field logic on data; it is not a reusable UI element for canvas screens.
10. Question 10Develop integrationsSelect all that apply

    You are improving a custom connector's resilience and maintainability when calling a metered partner API from many flows. Which TWO practices are recommended? (Choose TWO)

    • ADefine a policy/response that honors Retry-After and backs off on HTTP 429 before retryingCorrect
    • BCache idempotent GET results so repeated identical calls do not re-hit the metered APICorrect
    • CEmbed long-lived static bearer tokens directly in each operation's request headers
    • DDisable connector security so flows can call the API without authentication overhead
    ✓ Correct answer: A, B

    Backing off and retrying after the Retry-After interval on HTTP 429 respects the partner's service-protection limits and recovers gracefully from throttling. Caching results of idempotent GET calls avoids redundant metered requests, lowering cost and load. Both are standard resilience and cost-control patterns for connector-based integrations.

    Why the other options are wrong

    • CHard-coded long-lived tokens are a security risk and break when tokens expire; proper OAuth/token handling should be configured instead.
    • DDisabling authentication exposes the API and is never an acceptable resilience or cost optimization.

Who this PL-400 practice exam is for

This practice set is for anyone preparing for the PL-400: Power Platform Developer exam at the intermediate level - from first-time candidates building a foundation to experienced Microsoft practitioners doing a final review before test day. If you learn best by working through realistic questions and reading why each answer is right or wrong, it is built for you.

How to use this PL-400 practice exam

1. Start with the free sample questions above to gauge your current baseline.
2. Read the full explanation on every question, including why each wrong option is wrong.
3. Track your weak domains and focus your study where you are losing the most marks.
4. Once you are scoring consistently well, take a timed, full-length mock exam.
5. Use your readiness score to decide when you are ready to book the real PL-400 exam.

Related Microsoft resources

• PL-400 study guideKey concepts
• Microsoft practice examsAll Microsoft
• Certification pathWhere this fits
• Certification exam guides & tipsBlog
• Plans & pricingFree & paid
• How these questions are written and reviewedMethodology
• Report a problem with a questionCorrections
• PL-900 practice examRelated
• SC-100 practice examRelated
• SC-200 practice examRelated

PL-400 practice exam FAQ