PL-300 Manage and secure Power BI Practice Test 4 — 15 Questions

Question 1

Refer to the exhibit. The Power BI admin settings are shown. A user reports that they cannot share a dashboard with an external partner. What is the most likely reason?

Accepted Answer

The 'externalSharingEnabled' setting is disabled.. The 'externalSharingEnabled' setting is disabled, which prevents users from sharing dashboards with external partners. Option A is incorrect because 'exportDataEnabled' controls data export, not sharing. Option B is incorrect because 'publishToWebEnabled' controls publishing to the web, not external sharing. Option C is incorrect because 'workspaceCreationEnabled' controls workspace creation, not sharing.

Answer

The 'exportDataEnabled' setting is disabled.

Answer

The 'publishToWebEnabled' setting is disabled.

Answer

The 'workspaceCreationEnabled' setting is disabled.

Question 2

Your organization uses Power BI in a shared capacity model. A report developer complains that a new report published to a workspace does not appear in the 'My workspace' area. They have the Contributor role on the workspace. What is the most likely cause?

Accepted Answer

Reports published to a workspace do not appear in 'My workspace' unless the user manually saves a copy there.. Reports published to a workspace appear only in that workspace, not in 'My workspace'. 'My workspace' is a personal workspace for each user, and content must be manually saved there if desired. The Contributor role on a workspace allows publishing to that workspace, but the report will reside there, not in the user's personal 'My workspace'. Option A is incorrect because the Contributor role does have permission to publish. Option B is incorrect because there is no automatic addition to 'My workspace'. Option D is incorrect because a Power BI Pro license is not required to view reports in a workspace if the workspace is in Premium capacity, but even with a Pro license, the report would not appear in 'My workspace' automatically.

Answer

The Contributor role does not have permission to publish reports to the workspace.

Answer

The report was automatically added to 'My workspace' but was deleted by an administrator.

Answer

The user does not have a Power BI Pro license.

Question 3

You are configuring row-level security (RLS) for a Power BI dataset. The sales data includes a 'Region' column. You want users in the 'Sales Managers' group to see data only for their assigned region, which is stored in a separate mapping table. You create the following DAX filter: [Region] = LOOKUPVALUE(EmployeeRegion[Region], EmployeeRegion[UserPrincipalName], USERPRINCIPALNAME()). When testing, a user in 'Sales Managers' sees no data. What is the most likely issue?

Accepted Answer

The LOOKUPVALUE function returns multiple values for the user, causing an error.. LOOKUPVALUE returns an error if it finds multiple values for the same user (e.g., duplicate entries in the EmployeeRegion table), causing the filter to fail and return no data. Option B is wrong because USERPRINCIPALNAME() is supported in RLS filters in Power BI Service. Option C is wrong because the syntax is valid; CALCULATE is not required for RLS filters. Option D is wrong because RLS is available in Power BI Pro, not just Premium.

Answer

The USERPRINCIPALNAME function is not supported in RLS filters.

Answer

The DAX filter syntax is incorrect; it should use CALCULATE.

Answer

RLS requires a Premium capacity license.

Question 4

A Power BI report in a shared workspace needs to be embedded in a SharePoint Online page. Users accessing the page must see the report without signing in again. Which capability is required?

Accepted Answer

Use the 'Embed for SharePoint' option in Power BI.. 'Embed for SharePoint' generates a secure embed code that leverages Azure AD authentication, allowing users to view the report in SharePoint Online without signing in again. Option B is incorrect: 'Embed for your organization' is designed for embedding in custom applications using Power BI Embedded, not for direct SharePoint integration. Option C is incorrect: Sharing the report via email sends a link that requires each user to sign in, even if they are already authenticated in SharePoint. Option D is incorrect: 'Publish to web' makes the report publicly accessible without authentication, which violates security requirements for a shared workspace.

Answer

Use the 'Embed for your organization' option.

Answer

Share the report directly with each user via email.

Answer

Publish the report to the web and embed the iframe.

Question 5

Your organization uses Microsoft Entra ID for identity management. You have created a Power BI app workspace and assigned users to the Viewer role. However, some viewers report that they cannot export report data to Excel. What is the most likely reason?

Accepted Answer

The 'Allow viewers to export data' setting is disabled in the workspace.. The 'Export data' permission is controlled by the app workspace setting 'Allow viewers to export data', which is disabled by default. Option A is wrong because Viewer role can generally view reports. Option C is wrong because licensing affects creation, not basic export. Option D is wrong because Entra ID settings do not block export at the workspace level.

Answer

Viewers do not have a Power BI Pro license.

Answer

The Viewer role does not have permission to view reports.

Answer

Microsoft Entra ID conditional access policies block data export.

Question 6

You are managing a Power BI deployment that uses Premium capacity. Users report that reports are loading slowly during peak hours. You need to identify whether the capacity is being overused. Which metric should you monitor?

Accepted Answer

CPU high time percentage.. CPU over-utilization is a key indicator of capacity stress in Premium. The 'CPU high' metric directly reflects processing load. Option A is wrong because query execution time is a result, not a direct capacity metric. Option B is wrong because memory usage is important but CPU is more directly tied to responsiveness. Option D is wrong because dataset size is a design factor, not a real-time capacity metric.

Answer

Memory usage percentage.

Answer

Total dataset size in the workspace.

Answer

Average query execution time.

Question 7

You need to grant a user the ability to manage permissions, add members, and edit content in a Power BI workspace, but not delete the workspace. Which role should you assign?

Accepted Answer

Member. The Member role in Power BI allows users to manage permissions, add members, and edit content in a workspace, but not delete it. Option B is wrong because Admin can delete the workspace. Option C is wrong because Contributor can only edit content, not manage members. Option D is wrong because Viewer has read-only access.

Answer

Admin

Answer

Contributor

Answer

Viewer

Question 8

Your organization is implementing a data sensitivity labeling strategy for Power BI. You have created labels in Microsoft Purview Compliance Portal. After publishing a report, you notice that some labels are not available for selection in Power BI. What is the most likely cause?

Accepted Answer

The labels are not included in a label policy that applies to Power BI.. Sensitivity labels must be included in a label policy that targets Power BI for them to appear in the Power BI service. Option A is wrong because labels are created in the Microsoft Purview Compliance Portal, not workspaces. Option B is wrong because Premium capacity is not a prerequisite for sensitivity labels in Power BI. Option D is wrong because Power BI Pro licenses are required to apply sensitivity labels to content, but the labels themselves will still be available in the user interface regardless of license if the policy is configured correctly.

Answer

The labels were created in the wrong workspace.

Answer

The Power BI tenant does not have Premium capacity.

Answer

Users do not have Power BI Pro licenses.

Question 9

You are troubleshooting a Power BI DirectQuery model connected to Azure Synapse Analytics. The report shows stale data even though the underlying database is updated hourly. What should you check first?

Accepted Answer

Whether the report has 'Disable caching' enabled in the dataset settings.. In a DirectQuery model, data is not stored in Power BI; each query goes to the source. However, Power BI may cache query results at the report level, which can cause stale data. The 'Disable caching' option, when enabled, forces fresh queries to the source, ensuring up-to-date data. Option A is incorrect because Import mode is not used here; DirectQuery mode is specified. Option B is incorrect because RLS permissions affect data visibility, not freshness. Option D is incorrect because scheduled refresh is only applicable to Import models, not DirectQuery.

Answer

Whether the dataset is using Import mode instead of DirectQuery.

Answer

Whether the user has RLS permissions that filter data incorrectly.

Answer

Whether the dataset is configured for scheduled refresh.

Question 10

You need to share a Power BI dashboard with a large group of users in your organization. The users should not be able to edit the dashboard or share it with others. What is the most efficient method?

Accepted Answer

Create a workspace app and grant the group Viewer access.. Creating a workspace app and granting Viewer access to the group is the most scalable and manageable approach. Option A is wrong because adding users as Members of the workspace would give them edit and share permissions. Option B is wrong because sharing directly with each user's email is not scalable for a large group. Option C is wrong because publishing the dashboard to the web makes it publicly accessible, which does not meet the security requirements.

Answer

Add all users as Members of the workspace.

Answer

Share the dashboard directly with each user's email address.

Answer

Publish the dashboard to the web.

Question 11

Which TWO actions can help enforce data security in Power BI when using Microsoft Entra ID?

Accepted Answer

Apply Conditional Access policies to require multi-factor authentication.. Conditional Access policies in Microsoft Entra ID can enforce multi-factor authentication (MFA), strengthening authentication security for Power BI access. Option B is correct. Row-level security (RLS) restricts data access at the row level based on user identity, ensuring users only see data they are permitted to see. Option C is incorrect. Sensitivity labels classify and protect data through encryption and marking but do not directly control access to reports. Option D is incorrect. Sharing reports via direct link is a distribution method, not a security enforcement mechanism. Option E is incorrect. Microsoft Intune app protection policies protect data on mobile devices but are not a direct data security measure within Power BI.

Answer

Configure sensitivity labels to restrict access to reports.

Answer

Share reports via direct link with specific users.

Answer

Use Microsoft Intune app protection policies to prevent data leakage.

Question 12

Which TWO are valid Power BI workspace roles?

Accepted Answer

Viewer. Options A (Viewer) and B (Admin) are the valid Power BI workspace roles. Option C (Owner) is incorrect; the equivalent role is Admin. Option D (Reader) is incorrect; the correct read-only role is Viewer. Option E (Editor) is incorrect; the equivalent role is Contributor.

Answer

Owner

Answer

Reader

Answer

Editor

Question 13

Refer to the exhibit. You are setting up row-level security (RLS) for a Power BI dataset. The JSON snippet shows the role definition. A user reports that they see no data when they view the report. What is the most likely cause?

Accepted Answer

The LOOKUPVALUE function requires a relationship between tables.. LOOKUPVALUE is a DAX scalar function that retrieves a value from a column based on search criteria; it does not require (or create) a table relationship. In RLS, a common cause of no data is that the LOOKUPVALUE returns blank (e.g., because the current user's name doesn't match any value in the lookup table), causing the filter condition to evaluate to FALSE for all rows. The role name 'RegionManager' is not reserved, CALCULATE is not required for RLS filter syntax, and using the SalesPerson column is not inherently the issue. Thus, none of the provided options correctly describe the cause, making the question invalid as written.

Answer

The filter syntax is incorrect; it should use CALCULATE.

Answer

The role name 'RegionManager' is reserved.

Answer

The 'SalesPerson' column should be used in the filter.

Question 14

Refer to the exhibit. A Power BI administrator runs a PowerShell script to get an access token for the Power BI API. The output shows a token with claims. Based on the token, which authentication method was used?

Accepted Answer

Password-based authentication. The 'amr' claim contains 'pwd', which indicates password-based authentication. Option A is incorrect because MFA would show 'mfa' in the amr claim. Option B is incorrect because device code flow would show 'device_authentication' in the amr claim. Option D is incorrect because certificate-based authentication would show 'cert' in the amr claim.

Answer

Multi-factor authentication (MFA)

Answer

Device code flow

Answer

Certificate-based authentication

Question 15

Refer to the exhibit. You are reviewing a DAX expression used in a Power BI measure. You need to ensure that only users in the 'West' region see data for that region. Which approach should you use?

Accepted Answer

Implement row-level security (RLS) in the dataset with a role filter.. Row-level security (RLS) in the dataset is the proper method to ensure that users in the 'West' region only see data for that region. RLS uses role filters to restrict data at the row level based on the user's identity. Option B is incorrect because the CALCULATE function with a filter on a report page only affects the measure calculation within that report, not the underlying data security for all reports. Option C is incorrect because modifying a measure to check a user's email is not a supported or secure approach for data restriction in Power BI; RLS should be used instead. Option D is incorrect because a calculated column does not restrict data visibility; it only adds a computed field to the table.

Answer

Use the CALCULATE function with a filter on the report page.

Answer

Modify the measure to include a conditional statement that checks the user's email.

Answer

Create a calculated column with the same logic.