DP-600 Maintain a Data Analytics Solution Practice Question
Your organization uses a Fabric workspace for sensitive financial reporting. You need to implement Row-Level Security (RLS) to ensure that regional managers only see data from their own regions. Where should you define this security logic?
⚠ Common exam trap
Candidates might mistakenly believe that RLS can be configured at the workspace level or directly on the Lakehouse SQL endpoint, as these are common locations for other types of access control.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Define the RLS in the Power BI semantic model.
Defining RLS within the semantic model is the industry standard for ensuring consistency across all reports that connect to that model. By centralizing security logic, you ensure that no matter which report or dashboard a user accesses, the data filtering is applied uniformly. This provides a robust security layer that is easy to audit and manage, preventing accidental exposure of sensitive financial information.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Define the RLS in each individual Power BI report.
Why it's wrong here
Defining RLS within individual reports is prone to errors, hard to maintain, and difficult to audit. If you have multiple reports connected to the same model, the security logic would need to be replicated in each one, creating significant overhead and increasing the risk of inconsistent security application.
- ✗
Define the RLS in the workspace security settings.
Why it's wrong here
Workspace security controls access to the items, not the data within the semantic model. Attempting to manage RLS through workspace roles is impossible because workspace permissions are designed for administrative tasks and collaboration, not for granular filtering of specific data rows for different users within a dataset.
- ✓
Define the RLS in the Power BI semantic model.
Why this is correct
The semantic model is the centralized location for RLS definitions. Applying security at this level ensures that all reports and tools consuming the model respect the filtering rules. This centralized approach guarantees consistency, simplifies management, and provides a clear audit trail for compliance requirements regarding sensitive data access.
- ✗
Define the RLS at the SQL endpoint of the Lakehouse.
Why it's wrong here
While you can technically apply security at the SQL level, it is not the standard practice for Power BI reports. RLS in the semantic model is specifically optimized for Power BI's DAX engine, providing better performance and native integration with the user identity context when the report is rendered.
About these practice questions
One of 12 original DP-600 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This DP-600 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the DP-600 exam.