You need to recommend a security solution for agents in a Microsoft Power Platform environment.

The requirement is to secure agents in a Microsoft Power Platform environment so that they:

use only approved connectors and services

are prevented from accessing sensitive data

The correct recommendation is B. Deploy data loss prevention (DLP) policies in Power Platform.

Why B is correct:

DLP policies in Power Platform are specifically designed to control which connectors can be used together and which services are allowed in an environment. They help administrators classify connectors as business or non-business and restrict unsafe data flows. This directly supports both requirements:

limiting agents to approved connectors/services

preventing data from being exposed through unapproved or risky connector usage

Why the other options are not correct:

A. Enable customer-managed keys in Microsoft Dataverse This helps with encryption control, not with restricting connector usage or preventing data movement through agents.

C. Configure Azure Monitor to capture connector activity logs Monitoring logs is useful for visibility, but it does not enforce connector restrictions or prevent sensitive data access.

D. Enable a Microsoft Dataverse audit Auditing records activity after the fact. It does not proactively block unapproved connectors or sensitive data exposure.