PL-300 Manage and secure Power BI Practice Test 10 — 15 Questions

Question 1

A data analyst publishes a Power BI dataset to a Premium workspace and grants 'Build' permission to a group of report creators. One report creator complains that they cannot see certain tables in the dataset when building a new report. What is the most likely cause?

Accepted Answer

Row-level security (RLS) is configured on the dataset, hiding some tables.. Option C is correct. Row-level security (RLS) filters the data a user can see, but it does not hide tables from the data model view. Option A is wrong because 'Build' permission allows users to build reports from the dataset. Option B is wrong because data source credentials are managed at the dataset level, not per user. Option D is wrong because the dataset is in a Premium workspace; service principal access is not required for report creation.

Answer

The user lacks direct query permissions to the underlying data source.

Answer

The user does not have 'Build' permission on the dataset.

Answer

The dataset is configured with service principal authentication, and the user is not using a service principal.

Question 2

Your organization uses Microsoft Purview to catalog Power BI assets. You need to ensure that all published reports and dashboards are automatically scanned and added to the catalog. What should you do?

Accepted Answer

Register the Power BI tenant as a data source in Microsoft Purview.. Option B is correct. Registering a Power BI tenant as a data source in Purview enables automatic scanning of all Power BI assets. Option A is wrong because sensitivity labels help with classification but do not automatically add assets to the catalog. Option C is wrong because enabling 'Allow Azure Active Directory (now Microsoft Entra ID) authentication' is not required for scanning. Option D is wrong because creating a new workspace does not trigger scanning.

Answer

Enable 'Allow Azure Active Directory authentication' in the Power BI admin portal.

Answer

Apply sensitivity labels to all assets.

Answer

Create a new workspace in Power BI and assign the catalog admin role.

Question 3

A Power BI report uses a DirectQuery dataset connected to an Azure SQL Database. Users report that the report takes over 30 seconds to load. You need to improve performance without changing the data model. What should you recommend?

Accepted Answer

Enable 'Reduce cardinality by using aggregation' in the dataset settings.. Option B is correct. Enabling 'Reduce cardinality by using aggregation' can improve DirectQuery performance by pre-aggregating data. Option A is wrong because Import mode changes the data model approach. Option C is wrong because disabling 'Cross-report data binding' affects report interactivity but not query performance. Option D is wrong because increasing the max connections per user might help concurrency but not single query latency.

Answer

Increase the 'Maximum connections per user' setting in the Premium capacity.

Answer

Convert the dataset to Import mode.

Answer

Disable 'Cross-report data binding' in the report settings.

Question 4

You manage a Power BI environment where users frequently share reports by sending the URL from the browser. However, external recipients often receive an error saying they cannot access the report. What is the most likely reason?

Accepted Answer

The 'Share content with external users' setting is disabled in the tenant.. Option D is correct. By default, sharing with external users requires the 'Share with external users' setting to be enabled in the Power BI admin portal. Option A is wrong because external users do not need a Power BI Pro license if the report is shared to them; they can view it if the setting is enabled. Option B is wrong because external users can access the report even if they are not in the same tenant. Option C is wrong because the report is already published to the service.

Answer

External users do not have a Power BI Pro license.

Answer

External users are not part of the same Microsoft Entra tenant.

Answer

The report is not published to the Power BI service.

Question 5

You need to audit which users have accessed a specific Power BI dashboard in the last 30 days. What should you use?

Accepted Answer

Power BI Activity Log (audit log) in the Microsoft 365 admin center.. Option A is correct. The Power BI Activity Log (available via the admin portal or PowerShell) records user access events. Option B is wrong because the Power BI REST API can retrieve activity logs but is not the primary tool. Option C is wrong because Microsoft Purview compliance portal provides broader auditing but requires integration. Option D is wrong because Microsoft Sentinel is a SIEM tool that can ingest logs but is not the direct source.

Answer

Microsoft Sentinel.

Answer

Microsoft Purview compliance portal.

Answer

Power BI REST API 'Get Datasets' endpoint.

Question 6

Refer to the exhibit. A Power BI dataset has the scheduled refresh configuration shown in the JSON. The refresh fails on Monday, March 2, 2026. Who will be notified?

Accepted Answer

The dataset owner.. Option B is correct. The 'notifyOption' is set to 'MailOnFailure', which sends a notification to the dataset owner when a refresh fails. Option A is wrong because the failure is on a scheduled day, but the notification is not sent to workspace admins. Option C is wrong because the tenant admin is not automatically notified. Option D is wrong because the notification is sent to the owner, not to all users.

Answer

All workspace admins.

Answer

The Power BI tenant admin.

Answer

All users with access to the dataset.

Question 7

A company uses Power BI Premium with a capacity-based license. The capacity is frequently reaching its memory limit, causing reports to be evicted. You need to reduce memory pressure on the capacity. What should you do?

Accepted Answer

Implement row-level security (RLS) to limit data loaded per user.. Option D is correct. Implementing RLS can reduce the amount of data loaded into memory for each user, thus reducing memory pressure. Option A is wrong because increasing the refresh frequency can increase memory usage. Option B is wrong because enabling 'Large dataset storage format' increases memory usage. Option C is wrong because moving datasets to a shared capacity does not help if the problem is capacity overload.

Answer

Enable the 'Large dataset storage format' for all datasets.

Answer

Move all datasets to a shared capacity.

Answer

Increase the scheduled refresh frequency to every hour.

Question 8

You need to ensure that a Power BI report containing sensitive financial data is not accessible to users outside your organization. The report is published to a workspace in the Power BI service. What should you do?

Accepted Answer

Disable 'Allow external sharing' in the Power BI admin portal.. Option C is correct. Disabling 'Allow external sharing' at the tenant level prevents sharing with external users. Option A is wrong because sensitivity labels classify data but do not block external access by default. Option B is wrong because the report is already in the service. Option D is wrong because disabling 'Publish to web' prevents embedding, but external users could still be explicitly shared to.

Answer

Remove the report from the Power BI service and distribute it via email.

Answer

Apply a sensitivity label of 'Highly Confidential' to the report.

Answer

Disable 'Publish to web' in the tenant settings.

Question 9

Your organization uses Microsoft Entra ID for identity management. You have a Power BI dataset that uses DirectQuery to an Azure Analysis Services (AAS) model. The AAS model is configured to use service principal authentication. Users report that when they open a report connected to this dataset, they see an error: 'Cannot connect to the data source. The credentials provided are invalid.' What is the most likely cause?

Accepted Answer

The service principal secret or certificate used for authentication has expired.. Option A is correct. The service principal credentials may have expired or been revoked. Option B is wrong because the dataset uses DirectQuery, not Import mode. Option C is wrong because RLS is configured on the Power BI dataset, not on AAS. Option D is wrong because the service principal is configured for authentication, but the error indicates invalid credentials, not lack of permissions.

Answer

Row-level security (RLS) on the AAS model is not configured correctly.

Answer

The service principal does not have 'Read' permission on the AAS model.

Answer

The dataset is in Import mode and requires a scheduled refresh.

Question 10

Which TWO of the following are required to configure a Power BI deployment pipeline?

Accepted Answer

The user must be a workspace admin.. Options A and C are correct. A Premium workspace is required because deployment pipelines are a Premium feature. The user must have admin privileges on the workspace to create and manage pipelines. Option B is wrong because a Pro license is not required; a Premium per user or capacity license is needed. Option D is wrong because Power BI Desktop is not required; pipelines are managed in the service. Option E is wrong because pipelines can be used with Pro users if the workspace is Premium.

Answer

Power BI Desktop installed on the admin's machine.

Answer

A Power BI Pro license for all users.

Answer

Users must have 'Build' permission on the dataset.

Question 11

Which THREE of the following are valid methods to secure a Power BI dataset at the row level?

Accepted Answer

Row-level security using the USERPRINCIPALNAME() DAX function.. Options A, C, and E are correct. Static RLS uses roles defined in Power BI Desktop. Dynamic RLS uses USERNAME() or USERPRINCIPALNAME() to filter data based on the logged-in user. Object-level security (OLS) is for table/column security, not row-level. Option D is wrong because Azure RBAC is for managing access to Azure resources, not for Power BI row-level security.

Answer

Azure role-based access control (Azure RBAC) on the data source.

Answer

Object-level security (OLS) to restrict access to specific columns.

Question 12

Which TWO of the following actions can be performed by a user who has the 'Contributor' role on a Power BI workspace?

Accepted Answer

Create new reports and dashboards in the workspace.. Options B and C are correct. Contributors can create and edit content in the workspace, and they can share items (like reports) with others if sharing is enabled by the admin. Option A is wrong because only admins can update the workspace description. Option D is wrong because only admins can add members to the workspace. Option E is wrong because only admins can delete the workspace.

Answer

Update the workspace description.

Answer

Delete the workspace.

Answer

Add new members to the workspace.

Question 13

You are a Power BI administrator for a large enterprise. The company has a Premium capacity (P3) that hosts over 200 datasets and 500 reports. Recently, users have reported that some reports take a long time to load, and the capacity metrics show high CPU usage during business hours. You need to optimize the capacity performance without adding additional capacity. The business requires that all reports remain available during business hours (9 AM to 5 PM). You have the following options:

A. Enable 'Autoscale' on the Premium capacity to automatically add additional v-cores during peak times.
B. Implement a 'Query caching' policy for frequently used datasets.
C. Move all datasets to shared capacity to reduce Premium load.
D. Schedule dataset refreshes to occur only during business hours.

Which option should you choose?

Accepted Answer

Implement a 'Query caching' policy for frequently used datasets.. Option B is correct. Query caching can improve report load times by caching query results for frequently used datasets, reducing CPU usage. Option A is wrong because Autoscale adds capacity but increases cost; the requirement is to optimize without adding capacity. Option C is wrong because shared capacity has lower performance limits and may not support the workload. Option D is wrong because scheduling refreshes during business hours would increase CPU usage during peak times.

Answer

Move all datasets to shared capacity to reduce Premium load.

Answer

Schedule dataset refreshes to occur only during business hours.

Answer

Enable 'Autoscale' on the Premium capacity to automatically add additional v-cores during peak times.

Question 14

You are a Power BI data analyst at a financial services company. You have created a Power BI dataset that uses a live connection to an Azure Analysis Services (AAS) tabular model. The AAS model contains sensitive financial data. You need to implement row-level security (RLS) such that each user can only see data for their assigned region. The user's region is stored in a SQL Server database table called 'UserRegion' that maps user principal names (UPNs) to region IDs. The AAS model already has a 'Region' dimension table with a 'RegionID' column. You are not allowed to modify the AAS model. What should you do?

Accepted Answer

In Power BI Desktop, import the 'UserRegion' table from SQL Server and define an RLS role that filters the 'Region' table using the USERPRINCIPALNAME() function.. Option C is correct. You can implement RLS in Power BI Desktop by defining a role that uses the USERPRINCIPALNAME() function to filter the 'Region' table based on the 'UserRegion' table imported into the Power BI dataset. Option A is wrong because you cannot modify the AAS model. Option B is wrong because RLS in AAS requires modifying the model. Option D is wrong because the 'Region' table is in AAS, not in the SQL database.

Answer

Use Power Query to filter the 'Region' table based on the current user's region stored in the SQL database.

Answer

Define RLS roles directly in the AAS model using the USERNAME() function.

Answer

Modify the AAS model to include the 'UserRegion' table and define RLS roles in AAS.

Question 15

You are a Power BI administrator for a small business. The company uses Power BI Pro licenses for all users. You need to ensure that all data sources used in Power BI reports are documented and that sensitive data is classified. You have been asked to set up a process that automatically scans Power BI datasets for sensitive data and adds classification labels. You have the following options:

A. Use Microsoft Purview to scan Power BI datasets and apply sensitivity labels.
B. Use Power BI's built-in data classification feature to manually label datasets.
C. Use Microsoft Sentinel to monitor data access and apply labels.
D. Use Azure Policy to enforce labeling on Power BI datasets.

Which option should you choose?

Accepted Answer

Use Microsoft Purview to scan Power BI datasets and apply sensitivity labels.. Option A is correct. Microsoft Purview can automatically scan Power BI datasets for sensitive data and apply sensitivity labels based on classification rules. Option B is wrong because manual labeling is not automatic. Option C is wrong because Microsoft Sentinel is a SIEM, not a data classification tool. Option D is wrong because Azure Policy does not directly integrate with Power BI for labeling.

Answer

Use Power BI's built-in data classification feature to manually label datasets.

Answer

Use Azure Policy to enforce labeling on Power BI datasets.

Answer

Use Microsoft Sentinel to monitor data access and apply labels.