PL-300 Practice Test 44 — 15 Questions

Question 1

Refer to the exhibit. A Power BI dataset has the scheduled refresh configuration shown in the JSON. The refresh fails on Monday, March 2, 2026. Who will be notified?

Accepted Answer

The dataset owner.. Option B is correct. The 'notifyOption' is set to 'MailOnFailure', which sends a notification to the dataset owner when a refresh fails. Option A is wrong because the failure is on a scheduled day, but the notification is not sent to workspace admins. Option C is wrong because the tenant admin is not automatically notified. Option D is wrong because the notification is sent to the owner, not to all users.

Answer

All workspace admins.

Answer

The Power BI tenant admin.

Answer

All users with access to the dataset.

Question 2

You have a Power BI workspace named Sales. You need to ensure that only users in the Finance security group can view reports in this workspace, while members of the Sales team can edit and share content. What should you do?

Accepted Answer

Add Finance as Viewer, Sales as Member.. Option B is correct because workspace roles allow granular permissions: Viewer for Finance, Member for Sales. Option A is wrong because Contributor cannot share content. Option C is wrong because Admin gives full control. Option D is wrong because row-level security does not control workspace access.

Answer

Add Finance as Contributor, Sales as Member.

Answer

Add Finance as Viewer, Sales as Admin.

Answer

Use row-level security to restrict Finance data, add both as Member.

Question 3

Your organization uses Microsoft Teams to collaborate on Power BI reports. You need to ensure that only members of a specific team can view a report embedded in a Teams tab. What should you do?

Accepted Answer

Share the report directly with the team in Microsoft Entra ID.. Option C is correct because sharing the report with the team grants access. Option A is wrong because the report link is publicly accessible. Option B is wrong because app permissions are for workspace access. Option D is wrong because team owners don't automatically get access.

Answer

Assign the team owner as the report owner.

Answer

Set the report to 'Public' in the tenant settings.

Answer

Add the team to the workspace as a 'Member' role.

Question 4

You are configuring a Power BI data gateway for a scheduled refresh. The data source is an on-premises SQL Server database. Which authentication method should you use for the gateway to connect to the SQL Server?

Accepted Answer

Windows authentication (Kerberos). The gateway typically uses Windows authentication (Kerberos) for on-premises SQL Server to support single sign-on and pass-through. Option B is correct. Option A is wrong because OAuth is for cloud services. Option C is wrong because Basic is less secure and not recommended. Option D is wrong because Service Principal is for Azure resources.

Answer

OAuth 2.0

Answer

Service Principal

Answer

Basic authentication with SQL login

Question 5

Refer to the exhibit. You have a Power BI dataset configured with the refresh schedule shown. On Monday at 04:00 UTC, you check the refresh history and see the refresh failed. What is the most likely cause?

Accepted Answer

The service principal used for authentication has expired or lacks permissions.. The connection string uses 'ActiveDirectoryServicePrincipal' which requires a service principal to be registered in Microsoft Entra ID. If the service principal does not have the correct permissions or the secret expired, the refresh will fail. Option B is correct. Option A is wrong because the gateway is not needed for Azure SQL. Option C is wrong because the refresh time is on the hour. Option D is wrong because the refresh schedule is set only on weekdays, but Monday is a weekday, so that's fine.

Answer

The on-premises data gateway is not installed.

Answer

The refresh time is set to 03:00 UTC, but the dataset is in a different time zone.

Answer

The refresh schedule only runs on weekdays, but Monday is considered a weekend in some regions.

Question 6

Your organization uses Power BI Premium and wants to enforce that users can only see data relevant to their department (Sales, Marketing, Finance) using row-level security (RLS). The dataset contains a 'Department' column. You have created three RLS roles, each with a filter like [Department] = "Sales". You publish the dataset and add users to the roles. However, users in the Sales role can see all data. What is the most likely cause?

Accepted Answer

The users are also assigned to workspace roles (e.g., Member) that grant them access to the dataset without RLS restrictions.. Option B is correct because if the users have workspace-level permissions that allow them to see all data (e.g., Admin, Member, Contributor), RLS is bypassed. Option A is wrong because the filter syntax is correct. Option C is wrong because RLS works in Power BI Desktop preview. Option D is wrong because multiple roles don't cause this issue; they are additive.

Answer

The RLS roles were created in the Power BI service, not in Power BI Desktop.

Answer

The users are members of multiple RLS roles, so they see all data.

Answer

The RLS filter uses a string comparison that is case-sensitive and the data contains mixed case.

Question 7

A data analyst publishes a Power BI dataset to a Premium workspace and grants 'Build' permission to a group of report creators. One report creator complains that they cannot see certain tables in the dataset when building a new report. What is the most likely cause?

Accepted Answer

Row-level security (RLS) is configured on the dataset, hiding some tables.. Option C is correct. Row-level security (RLS) filters the data a user can see, but it does not hide tables from the data model view. Option A is wrong because 'Build' permission allows users to build reports from the dataset. Option B is wrong because data source credentials are managed at the dataset level, not per user. Option D is wrong because the dataset is in a Premium workspace; service principal access is not required for report creation.

Answer

The user lacks direct query permissions to the underlying data source.

Answer

The user does not have 'Build' permission on the dataset.

Answer

The dataset is configured with service principal authentication, and the user is not using a service principal.

Question 8

Which THREE of the following are valid methods to secure a Power BI dataset at the row level?

Accepted Answer

Row-level security using the USERPRINCIPALNAME() DAX function.. Options A, C, and E are correct. Static RLS uses roles defined in Power BI Desktop. Dynamic RLS uses USERNAME() or USERPRINCIPALNAME() to filter data based on the logged-in user. Object-level security (OLS) is for table/column security, not row-level. Option D is wrong because Azure RBAC is for managing access to Azure resources, not for Power BI row-level security.

Answer

Azure role-based access control (Azure RBAC) on the data source.

Answer

Object-level security (OLS) to restrict access to specific columns.

Question 9

You have a Power BI dataset that uses a live connection to an Azure Analysis Services (AAS) model. The AAS model has object-level security (OLS) that hides certain measures. Your Power BI report users need to see those measures. What should you do?

Accepted Answer

Modify the object-level security roles in Azure Analysis Services to include the measures.. Option C is correct because Power BI live connection respects AAS security; to show hidden measures, you need to modify OLS in AAS. Option A is wrong because RLS is for rows, not measures. Option B is wrong because OLS in Power BI is only for import mode. Option D is wrong because you cannot override AAS security from Power BI.

Answer

Use Power BI Desktop object-level security to override AAS settings.

Answer

Configure row-level security (RLS) in Power BI to grant access.

Answer

Change the dataset to import mode and then apply OLS in Power BI.

Question 10

Your organization uses Power BI Premium per user. You need to ensure that a specific report is only accessible via a Power BI app and not directly in the workspace. What should you do?

Accepted Answer

In the workspace settings, set 'Allow users to access the workspace content directly' to disabled.. Option D is correct because hiding the report from users in the workspace forces access via the app only. Option A is wrong because sharing still gives direct access. Option B is wrong because removing access entirely prevents app access too. Option C is wrong because it doesn't restrict.

Answer

Remove the users from the workspace role.

Answer

Publish the report to a different workspace.

Answer

Share the report only with the app users.

Question 11

Your organization uses Power BI with Premium capacity. You need to configure a scheduled refresh for a dataset that connects to an Azure SQL Database. The refresh must complete before 6:00 AM every day. The dataset currently takes 45 minutes to refresh. What is the most important consideration?

Accepted Answer

Schedule the refresh to start early enough to complete by 6:00 AM, considering any other scheduled refreshes.. Scheduled refresh times are limited by the number of daily refreshes and the capacity's concurrency limits. Option D is correct because the refresh time must be within the available window and not conflict with other refreshes. Option A is wrong because Premium allows up to 48 refreshes per day. Option B is wrong because incremental refresh is optional, not required. Option C is wrong because gateway is not needed for Azure SQL.

Answer

Use an on-premises data gateway to connect to Azure SQL.

Answer

Configure incremental refresh to reduce the refresh time.

Answer

Ensure the dataset does not exceed the maximum number of daily refreshes (8 for shared, 48 for Premium).

Question 12

Your organization uses Power BI with a shared capacity (no Premium capacity). You need to implement row-level security (RLS) on a dataset that is used by multiple reports. Which of the following is a limitation you must consider?

Accepted Answer

RLS cannot be applied when the dataset uses DirectQuery to a data source that requires single sign-on (SSO) because the user's identity is passed through, and the source must enforce RLS.. Option B is correct because in shared capacity, RLS cannot be applied to datasets that use DirectQuery to Azure Analysis Services or other sources that require single sign-on (SSO) – RLS must be defined in the source. Option A is wrong because RLS works in shared capacity. Option C is wrong because RLS is defined in Power BI Desktop and works with import mode. Option D is wrong because RLS can be defined in Power BI Desktop using DAX.

Answer

RLS is not supported in shared capacity; you need a Premium license.

Answer

RLS roles must be created in the Power BI service after publishing; they cannot be created in Power BI Desktop.

Answer

RLS can only be applied to tables that are imported, not to tables using DirectQuery.

Question 13

You need to ensure that only the Finance team can access a specific Power BI dashboard. What is the most efficient way to accomplish this?

Accepted Answer

Share the dashboard directly with the Finance team security group, granting only 'View' permissions.. Option A is correct because sharing the dashboard directly with the Finance team security group is the simplest and most efficient method. Option B is wrong because it would require moving the dashboard. Option C is wrong because apps are for distributing multiple items. Option D is wrong because it would affect all content in the workspace.

Answer

Create a new workspace, add the Finance team as Members, and move the dashboard to that workspace.

Answer

Add the Finance team as Admins of the workspace containing the dashboard.

Answer

Publish the dashboard as an app and assign the Finance team as the audience.

Question 14

You need to audit which users have accessed a specific Power BI dashboard in the last 30 days. What should you use?

Accepted Answer

Power BI Activity Log (audit log) in the Microsoft 365 admin center.. Option A is correct. The Power BI Activity Log (available via the admin portal or PowerShell) records user access events. Option B is wrong because the Power BI REST API can retrieve activity logs but is not the primary tool. Option C is wrong because Microsoft Purview compliance portal provides broader auditing but requires integration. Option D is wrong because Microsoft Sentinel is a SIEM tool that can ingest logs but is not the direct source.

Answer

Microsoft Sentinel.

Answer

Microsoft Purview compliance portal.

Answer

Power BI REST API 'Get Datasets' endpoint.

Question 15

Refer to the exhibit. An Azure Policy is applied to your subscription. What is the effect of this policy on Power BI workspaces?

Accepted Answer

It denies creation or update of workspaces assigned to Premium capacity.. Option C is correct because the policy denies creation or update of workspaces with SKU 'Premium'. Option A is wrong because it denies Premium, not non-Premium. Option B is wrong because it denies creation of Premium workspaces, not all. Option D is wrong because it applies to Premium, not premium per user.

Answer

It denies creation of any new Power BI workspace.

Answer

It denies creation of workspaces that are not Premium.

Answer

It allows workspaces with Premium per user (PPU) SKU.

PL-300 Practice Test 44 — 15 Questions

Exhibit

PL-300 Practice Test 44 — 15 Questions

Exhibit