AB-400 Practice Test

Sample AB-400 Practice Questions

10 real questions from the free AB-400bank. Pick an answer in your head, then open “Show answer” for the explanation.

1. 1. A partner web service must call Dataverse without a signed-in user, must not consume a paid Power Apps license, and must be limited to read access on the Account table. What should the architect configure?

   • A. An application user bound to a custom security role that grants read on Account
   • B. A shared maker account that holds the System Administrator security role
   • C. A guest user account that is licensed with Power Apps Premium
   • D. A service account that signs in with a password and multifactor authentication
   Show answer

   Correct answer: A

   Server-to-server authentication uses an unlicensed application user tied to a Microsoft Entra app registration, and a custom security role limits what it can do. A shared administrator account breaks least privilege, a licensed guest user consumes a license, and an interactive account with multifactor authentication cannot run unattended.

2. 2. A small business has no developers. When a support case is escalated in Dataverse, an external ticketing system must be updated within a few minutes, and the team wants to avoid maintaining custom code. What should the architect recommend?

   • A. A synchronous plug-in that posts to the ticketing API
   • B. A custom workflow activity compiled into an assembly
   • C. A PCF component on the case form that calls the API
   • D. A Power Automate cloud flow triggered when the case is escalated
   Show answer

   Correct answer: D

   Power Automate provides low-code triggers and connectors that cover many scenarios once handled by plug-ins, and it does not require a developer to maintain code. The plug-in, the custom workflow activity, and the PCF component all require developer skills and code upkeep.

3. 3. A canvas app must show a shipping estimate immediately as the user changes quantities, and it must use current Dataverse data. Which implementation gives the lowest latency?

   • A. Power Fx formulas evaluated in the app against Dataverse
   • B. A cloud flow that is called from the app and returns the estimate
   • C. A custom connector that calls an Azure Function on each keystroke
   • D. A scheduled flow that writes estimates to a table each hour
   Show answer

   Correct answer: A

   Power Fx evaluates live in the app, so it delivers the lowest latency against current Dataverse data for common scenarios. A called flow adds asynchronous round-trip time, per-keystroke connector calls add cost and delay, and an hourly scheduled flow produces stale data.

4. 4. Users in a matrix organization work across the Sales and Support business units and need access to contact rows owned by both. The environment uses modernized business units. How should access be granted?

   • A. Assign the user a security role in each business unit so the owning business unit grants access
   • B. Move the user into a parent business unit that owns the contact rows
   • C. Create an owner team for each contact row and add the user to it
   • D. Share each contact row individually with the user
   Show answer

   Correct answer: A

   With modernized business units, the owning business unit column of the row decides access, so a user who holds a security role in each relevant business unit can reach rows owned by both. Moving the user, creating per-row teams, and sharing each row are older or manual workarounds that do not scale.

5. 5. A retailer wants store managers to log inspection results from a phone and keep the results in a governed, relational data platform that supports role-based security. Which Power Platform component should store the inspection data?

   • A. Microsoft Dataverse tables secured by security roles
   • B. A Power Automate cloud flow that holds the results in variables
   • C. A Power Apps component library shared across canvas apps
   • D. A Power Fx formula that caches the results on the device
   Show answer

   Correct answer: A

   Dataverse tables provide relational storage with role-based security at the row, column, and table level, which fits governed inspection data. A cloud flow only orchestrates steps and does not persist business data, a component library packages reusable UI controls, and a device cache is neither governed nor shared.