PL-300 Practice Test 46 — 15 Questions

Question 1

You need to ensure that a Power BI report published to the service can be embedded in a secure internal SharePoint Online page. Only authenticated users from your Microsoft Entra ID tenant should be able to view the report. What should you do?

Accepted Answer

Use the 'Embed' option in Power BI service to generate a secure embed code, then add the Power BI web part in SharePoint.. Embedding a report securely requires using the 'embed' option with a secure embed code that respects user permissions, and then adding the report to SharePoint via the Power BI web part. Option C is correct. Option A is wrong because Publish to web is public. Option B is wrong because sharing with specific users without embedding is not embedding. Option D is wrong because allowing all authenticated users is too broad.

Answer

Use the 'Embed in SharePoint Online' option in Power BI service.

Answer

Share the report directly with all users and provide a direct link.

Answer

Use the 'Publish to web (public)' option and embed the iframe in SharePoint.

Question 2

Refer to the exhibit. You are implementing a sensitivity label policy in Microsoft Purview for Power BI. The policy shown is intended to block users in the SalesTeam group from exporting reports with the 'Confidential' label to PDF. However, users in SalesTeam can still export PDF. What is the most likely issue?

Accepted Answer

The sensitivity label 'Confidential' has not been applied to the reports.. The policy syntax is incorrect; the 'Action' should be 'Block' but the condition needs to be structured correctly. However, the likely issue is that the sensitivity label 'Confidential' is not applied to the reports, or the policy is not published. Option D is correct. Option A is wrong because the condition is valid. Option B is wrong because 'ExportReportToPDF' is a valid activity. Option C is wrong because the group membership is not necessarily the issue.

Answer

The 'ExportReportToPDF' activity name is incorrect; it should be 'ExportToPDF'.

Answer

The SalesTeam group does not contain the users.

Answer

The 'Action' should be 'Deny' instead of 'Block'.

Question 3

You manage a Power BI environment. A user wants to share a dashboard with an external partner. You need to ensure the partner cannot export data or share the dashboard further. What should you do?

Accepted Answer

Add the partner as a guest user in Microsoft Entra ID and share the dashboard directly, ensuring the 'Allow recipients to share' and 'Allow users to export data' options are unchecked.. Option C is correct because sharing with an external user as a guest restricts them based on their guest permissions; you can disable export and resharing in the sharing dialog. Option A is wrong because Publish to web makes it public. Option B is wrong because building a composite model is not a sharing method. Option D is wrong because the partner would need to be a guest anyway.

Answer

Create a composite model on top of the dataset and share the report as an app.

Answer

Create a new workspace and add the partner as a Viewer.

Answer

Publish the dashboard to a public website using 'Publish to web'.

Question 4

Your organization uses Microsoft Purview to catalog Power BI assets. You need to ensure that all published reports and dashboards are automatically scanned and added to the catalog. What should you do?

Accepted Answer

Register the Power BI tenant as a data source in Microsoft Purview.. Option B is correct. Registering a Power BI tenant as a data source in Purview enables automatic scanning of all Power BI assets. Option A is wrong because sensitivity labels help with classification but do not automatically add assets to the catalog. Option C is wrong because enabling 'Allow Azure Active Directory (now Microsoft Entra ID) authentication' is not required for scanning. Option D is wrong because creating a new workspace does not trigger scanning.

Answer

Enable 'Allow Azure Active Directory authentication' in the Power BI admin portal.

Answer

Apply sensitivity labels to all assets.

Answer

Create a new workspace in Power BI and assign the catalog admin role.

Question 5

Which TWO of the following actions can be performed by a user who has the 'Contributor' role on a Power BI workspace?

Accepted Answer

Create new reports and dashboards in the workspace.. Options B and C are correct. Contributors can create and edit content in the workspace, and they can share items (like reports) with others if sharing is enabled by the admin. Option A is wrong because only admins can update the workspace description. Option D is wrong because only admins can add members to the workspace. Option E is wrong because only admins can delete the workspace.

Answer

Update the workspace description.

Answer

Delete the workspace.

Answer

Add new members to the workspace.

Question 6

Your Power BI tenant has a capacity-based license (Premium). You want to enforce that only reports with a specific sensitivity label from Microsoft Purview can be exported to PDF. What feature should you use?

Accepted Answer

Sensitivity labels from Microsoft Purview. Sensitivity labels in Power BI can be used to control export actions. Option B is correct because sensitivity labels can restrict exporting based on label. Option A is wrong because data loss prevention (DLP) policies in Power BI are for preventing data exfiltration but not specifically tied to export formats. Option C is wrong because app protection policies are for mobile devices. Option D is wrong because conditional access policies control access, not export.

Answer

Microsoft Intune app protection policies

Answer

Data loss prevention (DLP) policies for Power BI

Answer

Conditional Access policies in Microsoft Entra ID

Question 7

Refer to the exhibit. You define an RLS role in Power BI Desktop as shown. You publish the dataset and assign the user 'user@contoso.com' to the role. When the user views a report that uses this dataset, they see no data. What is the most likely cause?

Accepted Answer

The Region values in the data have leading spaces or are not exactly 'North' (e.g., 'North ').. The filter expression uses a string comparison that might not match due to case sensitivity or leading/trailing spaces. Option A is correct. Option B is wrong because the role name is valid. Option C is wrong because the user is assigned to the role. Option D is wrong because RLS works in the service.

Answer

The role name is invalid; it must not contain spaces.

Answer

RLS is not applied in Power BI service for tables with less than 100 rows.

Answer

The user is not assigned to the role correctly.

Question 8

Your organization uses Power BI and has deployed Microsoft Purview Data Loss Prevention (DLP) policies. You want to prevent users from exporting data from Power BI reports that contain credit card numbers. What should you configure?

Accepted Answer

Create a DLP policy in Microsoft Purview that detects credit card numbers in Power BI and set the action to block export.. Option D is correct because DLP policies in Power BI can be applied to datasets and reports, and they can block export of data that matches sensitive info types like credit card numbers. Option A is wrong because sensitivity labels alone do not block export. Option B is wrong because RLS restricts data visibility, not export. Option C is wrong because tenant settings control general export capabilities but not based on content.

Answer

Configure row-level security (RLS) to hide the credit card column from users.

Answer

Apply a Microsoft Purview sensitivity label 'Highly Confidential' to the dataset and configure the label to prevent export.

Answer

Disable the 'Export to Excel' and 'Export to CSV' settings in the Power BI admin portal.

Question 9

A Power BI report uses a DirectQuery dataset connected to an Azure SQL Database. Users report that the report takes over 30 seconds to load. You need to improve performance without changing the data model. What should you recommend?

Accepted Answer

Enable 'Reduce cardinality by using aggregation' in the dataset settings.. Option B is correct. Enabling 'Reduce cardinality by using aggregation' can improve DirectQuery performance by pre-aggregating data. Option A is wrong because Import mode changes the data model approach. Option C is wrong because disabling 'Cross-report data binding' affects report interactivity but not query performance. Option D is wrong because increasing the max connections per user might help concurrency but not single query latency.

Answer

Increase the 'Maximum connections per user' setting in the Premium capacity.

Answer

Convert the dataset to Import mode.

Answer

Disable 'Cross-report data binding' in the report settings.

Question 10

Which TWO actions should you take to ensure that sensitive columns (e.g., customer names) are not visible to certain users in a Power BI report? (Select exactly two.)

Accepted Answer

Use object-level security (OLS) to hide the columns for specific roles.. Object-level security (OLS) can hide entire columns from roles. Row-level security (RLS) filters rows but cannot hide columns. Building separate datasets is one way but not efficient. Option A and B are correct. Option C is wrong because RLS does not hide columns. Option D is wrong because that controls access to the report, not column visibility. Option E is wrong because masking is not available in Power BI.

Answer

Apply dynamic data masking on the dataset in Power BI service.

Answer

Use row-level security (RLS) to filter out rows containing sensitive data.

Answer

Set the report to not allow users with certain roles to view the report.

Question 11

Which THREE of the following are required to configure Microsoft Purview Information Protection sensitivity labels for Power BI? (Choose three.)

Accepted Answer

Users must have appropriate permissions (e.g., Azure Information Protection rights) to apply labels.. Options A, C, and D are correct. Sensitivity labels in Power BI require enabling in the tenant settings, having the labels published in Microsoft 365 Compliance Center, and the user must have the appropriate permissions to apply the labels. Option B is wrong because Power BI Premium is not a requirement; labels work in shared capacity too. Option E is wrong because a Power BI Pro license is required for the user to apply labels, but it's not a configuration step.

Answer

Each user must have a Power BI Pro license.

Answer

Have a Power BI Premium capacity assigned to the workspace.

Question 12

Refer to the exhibit. You are configuring a Microsoft Purview Data Loss Prevention (DLP) policy for Power BI. The policy rule shown is intended to block downloads from datasets that have the 'Confidential' sensitivity label and are sourced from SharePoint or SQL Server. However, users are still able to download data from these datasets. What is the most likely reason?

Accepted Answer

The action 'blockDownload' is not a valid action; the correct action should be 'Block' or 'BlockDownload' might require additional configuration.. Option B is correct because in the Power BI DLP policy, you must specify the action as 'Block' for download to be prevented. The exhibit shows 'blockDownload', but the correct action syntax is likely 'Block' (or the policy is not fully configured). Option A is wrong because the condition uses 'dataSource' which is valid. Option C is wrong because the exhibit shows a single condition with both label and source. Option D is wrong because the target is datasets.

Answer

The target should be 'reports' instead of 'datasets'.

Answer

The condition uses 'dataSource' which is not a valid property in Power BI DLP policies.

Answer

The policy rule is missing the 'and' operator between the two conditions.

Question 13

You need to ensure that a Power BI report containing sensitive financial data is not accessible to users outside your organization. The report is published to a workspace in the Power BI service. What should you do?

Accepted Answer

Disable 'Allow external sharing' in the Power BI admin portal.. Option C is correct. Disabling 'Allow external sharing' at the tenant level prevents sharing with external users. Option A is wrong because sensitivity labels classify data but do not block external access by default. Option B is wrong because the report is already in the service. Option D is wrong because disabling 'Publish to web' prevents embedding, but external users could still be explicitly shared to.

Answer

Remove the report from the Power BI service and distribute it via email.

Answer

Apply a sensitivity label of 'Highly Confidential' to the report.

Answer

Disable 'Publish to web' in the tenant settings.

Question 14

You need to enforce that only users with a specific sensitivity label can access a Power BI report. Which TWO actions should you take?

Accepted Answer

Enable sensitivity labels for Power BI in Microsoft Purview.. Options A and C are correct. Sensitivity labels must be enabled for Power BI via Microsoft Purview, and then you can restrict access using label-based policies. Option B is wrong because row-level security controls data, not access to the report. Option D is wrong because workspace roles do not consider sensitivity labels. Option E is wrong because that setting controls default label, not access restriction.

Answer

Assign users to the Viewer role in the workspace.

Answer

Configure row-level security (RLS) on the dataset.

Answer

Set the default sensitivity label for the workspace.

Question 15

You are a Power BI administrator. A user reports they cannot publish a report to a shared workspace because they receive an error 'You need at least a Contributor role to publish to this workspace.' The user is a member of a security group that has been assigned the Viewer role on the workspace. What should you do to allow the user to publish?

Accepted Answer

Add the user as a Contributor directly to the workspace, or change the security group role to Contributor.. Option C is correct because the Viewer role does not allow publishing; the user needs at least a Contributor role. Adding them directly as a Contributor overrides the group assignment. Option A is wrong because Power BI does not allow granting permissions on individual reports in a workspace. Option B is wrong because Viewer allows viewing only. Option D is wrong because the app workspace already exists.

Answer

Grant the user Read permission on the report in the workspace.

Answer

Change the user's role to Viewer on the workspace and ask them to use the 'Publish to web' option.

Answer

Create a new workspace and add the user as a Member.