PL-300 Manage and secure Power BI Practice Question
A company is deploying Power BI for the entire organization. They need to prevent users from sharing reports with external email addresses. Which configuration should the Power BI admin use?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Disable 'Share content with external users' in the Power BI admin portal.
The Power BI admin portal provides a tenant-level setting 'Share content with external users' that can be disabled to prevent sharing with external email addresses. Option B is incorrect because Conditional Access policies in Microsoft Entra ID control access based on conditions but do not specifically block external sharing within Power BI. Option C is incorrect because Microsoft Purview sensitivity labels classify and protect data but do not block sharing. Option D is incorrect because workspace sharing settings only control sharing within the workspace and do not prevent external sharing at the tenant level.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Disable 'Share content with external users' in the Power BI admin portal.
Why this is correct
Disabling 'Share content with external users' in the Power BI admin portal is the correct tenant-level control because it directly blocks the ability for any user's shared dashboards, reports, or apps to be accessible to email addresses outside your organization. This setting overrides per-user and per-workspace sharing permissions, acting as the only definitive switch that prevents external email invitations from being accepted or even invited. Without this disabled, users can still share to external identities even if other access policies are in place.
- ✗
Configure a Conditional Access policy in Microsoft Entra ID.
Why it's wrong here
A Conditional Access policy in Microsoft Entra ID is an authentication and access-control layer that evaluates sign-in risk, device compliance, or multi-factor authentication requirements when users attempt to access Power BI. It does not evaluate or alter the sharing permissions that Power BI users have to distribute content to external email addresses. Therefore, while it can govern who can sign in, it cannot stop an authorized user from sharing content externally, so it is not a solution for this requirement.
- ✗
Apply a Microsoft Purview sensitivity label.
Why it's wrong here
Applying a Microsoft Purview sensitivity label introduces classification and optional encryption protections, but the label itself does not mediate the sharing action. Unless the label is configured with encryption scoped to specific users or groups, it will not prevent a user from sharing the report to an external email address—label enforcement applies to content access, not to the distribution or invitation logic in Power BI. A sensitivity label cannot broadly block external sharing across the organization.
- ✗
Set the workspace sharing settings to 'Only existing users'.
Why it's wrong here
Setting workspace sharing to 'Only existing users' is a narrow, per-workspace setting that only specifies which users can access that particular workspace's content. It does not control whether those users, once inside the workspace, can share derived or cloned content to external email addresses. External sharing is a tenant-wide capability governed by the Power BI admin portal, so this workspace-level option cannot prevent external sharing across the organization.
Go deeper
Related to this question
About these practice questions
Courseiva writes every PL-300 question from scratch — 217 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PL-300 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-300 exam.