PL-300 Manage and secure Power BI Practice Test 5 — 15 Questions

Question 1

Your organization uses Microsoft Entra ID for identity management. You have created a Power BI app workspace and assigned users to the Viewer role. However, some viewers report that they cannot export report data to Excel. What is the most likely reason?

Accepted Answer

The 'Allow viewers to export data' setting is disabled in the workspace.. Option B is correct because the 'Export data' permission is controlled by the app workspace setting 'Allow viewers to export data', which is disabled by default. Option A is wrong because Viewer role can generally view reports. Option C is wrong because licensing affects creation, not basic export. Option D is wrong because Entra ID settings do not block export at the workspace level.

Answer

Viewers do not have a Power BI Pro license.

Answer

The Viewer role does not have permission to view reports.

Answer

Microsoft Entra ID conditional access policies block data export.

Question 2

You are managing a Power BI deployment that uses Premium capacity. Users report that reports are loading slowly during peak hours. You need to identify whether the capacity is being overused. Which metric should you monitor?

Accepted Answer

CPU high time percentage.. Option C is correct because CPU over-utilization is a key indicator of capacity stress in Premium. The 'CPU high' metric directly reflects processing load. Option A is wrong because query execution time is a result, not a direct capacity metric. Option B is wrong because memory usage is important but CPU is more directly tied to responsiveness. Option D is wrong because dataset size is a design factor, not a real-time capacity metric.

Answer

Memory usage percentage.

Answer

Total dataset size in the workspace.

Answer

Average query execution time.

Question 3

You need to grant a user the ability to manage permissions, add members, and edit content in a Power BI workspace, but not delete the workspace. Which role should you assign?

Accepted Answer

Member. Option B is correct because the Member role can edit content and manage members, but cannot delete the workspace. Option A is wrong because Admin can delete the workspace. Option C is wrong because Contributor can only edit content, not manage members. Option D is wrong because Viewer has read-only access.

Answer

Admin

Answer

Contributor

Answer

Viewer

Question 4

Your organization is implementing a data sensitivity labeling strategy for Power BI. You have created labels in Microsoft Purview Compliance Portal. After publishing a report, you notice that some labels are not available for selection in Power BI. What is the most likely cause?

Accepted Answer

The labels are not included in a label policy that applies to Power BI.. Option D is correct because sensitivity labels must be published in a label policy that includes Power BI as a target. Option A is wrong because label creation does not require Premium. Option B is wrong because labels are configured centrally, not per workspace. Option C is wrong because user licenses affect consumption, not label availability.

Answer

The labels were created in the wrong workspace.

Answer

The Power BI tenant does not have Premium capacity.

Answer

Users do not have Power BI Pro licenses.

Question 5

You are troubleshooting a Power BI DirectQuery model connected to Azure Synapse Analytics. The report shows stale data even though the underlying database is updated hourly. What should you check first?

Accepted Answer

Whether the report has 'Disable caching' enabled in the dataset settings.. Option A is correct because DirectQuery does not cache data; each query goes to the source. However, Power BI may cache query results at the report level. The 'Disable caching' option ensures fresh data. Option B is wrong because scheduled refresh is for import models. Option C is wrong because RLS does not affect data freshness. Option D is wrong because storage mode is import; DirectQuery is a separate mode.

Answer

Whether the dataset is using Import mode instead of DirectQuery.

Answer

Whether the user has RLS permissions that filter data incorrectly.

Answer

Whether the dataset is configured for scheduled refresh.

Question 6

You need to share a Power BI dashboard with a large group of users in your organization. The users should not be able to edit the dashboard or share it with others. What is the most efficient method?

Accepted Answer

Create a workspace app and grant the group Viewer access.. Option D is correct because creating a workspace app and granting Viewer access to the group is the most scalable and manageable approach. Option A is wrong because sharing via email is not scalable. Option B is wrong because publish to web is public. Option C is wrong because granting Member role allows editing and sharing.

Answer

Add all users as Members of the workspace.

Answer

Share the dashboard directly with each user's email address.

Answer

Publish the dashboard to the web.

Question 7

Which TWO actions can help enforce data security in Power BI when using Microsoft Entra ID?

Accepted Answer

Apply Conditional Access policies to require multi-factor authentication.. Options A and D are correct. Conditional Access policies can enforce MFA. RLS restricts data access at the row level. Option B is wrong because app management policies are for app governance, not direct security. Option C is wrong because sensitivity labels classify data but do not enforce access. Option E is wrong because sharing via link is a distribution method, not security.

Answer

Configure sensitivity labels to restrict access to reports.

Answer

Share reports via direct link with specific users.

Answer

Use Microsoft Intune app protection policies to prevent data leakage.

Question 8

Which THREE settings should you verify in the Power BI tenant admin portal to ensure that external users (guests) can access a published app?

Accepted Answer

Invite external users to your organization via Microsoft Entra ID.. Options A, C, and D are correct. 'Invite external users to your organization' must be enabled. 'Allow external users to edit and manage content in the organization' allows guest contributions. 'Allow Azure Active Directory (Microsoft Entra ID) external identities to access the Power BI service' enables guest access. Option B is wrong because sharing with external users is a separate setting, but not specifically for app access. Option E is wrong because that setting controls whether external users can see other external users.

Answer

Allow sharing with external users.

Answer

Show external users in lists of suggested people.

Question 9

Which TWO are valid Power BI workspace roles?

Accepted Answer

Viewer. Options A and D are correct. Admin and Viewer are standard workspace roles. Option B is wrong because 'Editor' is not a Power BI workspace role; the equivalent is 'Contributor' or 'Member'. Option C is wrong because 'Owner' is the same as Admin. Option E is wrong because 'Reader' is not a role; 'Viewer' is the correct term.

Answer

Owner

Answer

Reader

Answer

Editor

Question 10

Refer to the exhibit. You are setting up row-level security (RLS) for a Power BI dataset. The JSON snippet shows the role definition. A user reports that they see no data when they view the report. What is the most likely cause?

Accepted Answer

The LOOKUPVALUE function requires a relationship between tables.. Option D is correct because the LOOKUPVALUE function is used without a relationship between the Sales and EmployeeRegion tables. LOOKUPVALUE does not create a relationship; it performs a lookup based on the current row context, which may not work correctly. In RLS, you typically use a filter that references a related table via a relationship. Option A is wrong because the role name can be any string. Option B is wrong because the syntax is valid. Option C is wrong because the column definitions are fine.

Answer

The filter syntax is incorrect; it should use CALCULATE.

Answer

The role name 'RegionManager' is reserved.

Answer

The 'SalesPerson' column should be used in the filter.

Question 11

Refer to the exhibit. A Power BI administrator runs a PowerShell script to get an access token for the Power BI API. The output shows a token with claims. Based on the token, which authentication method was used?

Accepted Answer

Password-based authentication. Option B is correct because the 'amr' claim contains 'pwd', which indicates password-based authentication. Option A is wrong because MFA would show 'mfa' in amr. Option C is wrong because certificate-based authentication would show 'cert'. Option D is wrong because device code flow would show 'device_authentication'.

Answer

Multi-factor authentication (MFA)

Answer

Device code flow

Answer

Certificate-based authentication

Question 12

Refer to the exhibit. You are reviewing a DAX expression used in a Power BI measure. You need to ensure that only users in the 'West' region see data for that region. Which approach should you use?

Accepted Answer

Implement row-level security (RLS) in the dataset with a role filter.. Option C is correct because the DAX expression is a measure that calculates the sum for the 'West' region, but it does not restrict data for other users. To enforce security, you need to implement row-level security (RLS) by adding a filter in the dataset roles. Option A is wrong because you cannot restrict the measure to specific users directly. Option B is wrong because the measure itself calculates for West only, but RLS is needed for security. Option D is wrong because the measure is already specific to West.

Answer

Use the CALCULATE function with a filter on the report page.

Answer

Modify the measure to include a conditional statement that checks the user's email.

Answer

Create a calculated column with the same logic.

Question 13

A company uses Power BI Premium per capacity. A report developer needs to share a report with external users who do not have Power BI licenses. The report uses a live connection to an Azure Analysis Services model. What should the admin configure to allow external access?

Accepted Answer

Configure Bring Your Own Tenant (BYOT) with Azure B2B.. Option B is correct because Bring Your Own Tenant (BYOT) with Azure B2B allows external users to access content via their own organization's tenant. Option A is wrong because guest users in the same tenant require licenses. Option C is wrong because Publish to web makes data public. Option D is wrong because sharing requires internal licenses.

Answer

Enable Publish to web for the report.

Answer

Configure Azure B2B guest users in the same tenant.

Answer

Share the report directly with external email addresses.

Question 14

A Power BI admin receives a support ticket that a user cannot see any data in a report that uses row-level security (RLS). The report is based on a dataset with a single table 'Sales' and RLS roles defined. The user is assigned to the role 'SalesManager' which filters Sales[Region] = 'West'. The dataset uses Import mode. The user can see the report but all visuals show blank. What is the most likely cause?

Accepted Answer

The RLS filter removes all rows for the user's role.. Option D is correct because RLS in Import mode filters at the dataset level; if the user's role filters out all data (e.g., no rows match 'West'), visuals will appear blank. Option A is wrong because RLS does not affect the report page layout. Option B is wrong because RLS is applied regardless of dashboard tiles. Option C is wrong because RLS is applied after data refresh, so the data load includes all rows but RLS filters query results.

Answer

The user does not have permission to view the report page.

Answer

The user is viewing a dashboard tile instead of the report.

Answer

The dataset was refreshed using an RLS bypass account.

Question 15

A data analyst needs to ensure that a Power BI dataset used in a shared workspace is refreshed daily at 6 AM. The data source is an Azure SQL Database. The analyst's account has database permissions. What should the analyst configure?

Accepted Answer

Configure scheduled refresh in the dataset settings.. Option B is correct because a scheduled refresh in the dataset settings allows configuring refresh frequency and time. Option A is wrong because Gateway is needed only for on-premises sources. Option C is wrong because XMLA endpoints are for advanced management, not scheduling refresh. Option D is wrong because the refresh is scheduled on the dataset, not the report.

Answer

Enable XMLA endpoints for the workspace.

Answer

Install an on-premises data gateway.

Answer

Configure refresh in the report settings.