The correct answer is to create RLS roles in Power BI Desktop and remove the SSN and Name columns in Power Query before loading. For HIPAA compliance, Row-Level Security (RLS) restricts row access by user identity—for example, filtering by Diagnosis—so unauthorized users never see patient data, while removing sensitive columns like SSN and Name in Power Query enforces data minimization by reducing the model’s PII footprint before it even reaches the dataset. On the PL-300 exam, this question tests your understanding that RLS alone isn’t sufficient for HIPAA; you must also strip unnecessary sensitive columns at the source to avoid exposing them in underlying table scans or exports. A common trap is thinking RLS fully protects all data, but it only controls row visibility, not column-level access. Remember the mnemonic: “Rows by roles, columns by queries” to recall that RLS handles row filtering, while Power Query handles column removal.
PL-300 Prepare the data Practice Question
This PL-300 practice question tests your understanding of prepare the data. Match the stated requirement to the specific cloud service, access model, or configuration option — many options are valid in isolation but not for this scenario. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
You are a Power BI developer at a healthcare organization. You are building a report that must comply with HIPAA regulations. You need to ensure that patient data is not exposed to unauthorized users. You plan to use Row-Level Security (RLS) with roles defined in Power BI Desktop. However, you also need to limit the data imported into the model to only necessary columns. The source is an Azure SQL Database with a table 'Patients' containing columns: PatientID, Name, SSN, Diagnosis, AdmissionDate, DischargeDate. Which two actions should you take? (Choose TWO)
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create RLS roles to restrict access by Diagnosis.
Option A is correct because creating RLS roles in Power BI Desktop allows you to restrict data access based on the user's identity, ensuring that only authorized users can view specific rows (e.g., by Diagnosis). This is a key requirement for HIPAA compliance, as it prevents unauthorized exposure of patient data. Option E is correct because removing sensitive columns like SSN and Name in Power Query before loading into the model minimizes the data footprint and reduces the risk of exposing personally identifiable information (PII), aligning with the principle of data minimization.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✓
Create RLS roles to restrict access by Diagnosis.
Why this is correct
Limits what users see based on role.
Related concept
Read the scenario before looking for a memorised answer.
✗
Store data source credentials in the Power BI service.
Why it's wrong here
Does not protect data from unauthorized users.
✗
Disable query caching for the dataset.
Why it's wrong here
Does not affect data exposure.
✗
Use encrypted connection to the database.
Why it's wrong here
Encrypts data in transit, but not access control.
✓
Remove the SSN and Name columns in Power Query before loading.
Why this is correct
Minimizes sensitive data in the model.
Related concept
Read the scenario before looking for a memorised answer.
Common exam traps
Common exam trap: answer the scenario, not the keyword
The trap here is that candidates may confuse data security measures (like encrypted connections or credential storage) with data minimization and access control, leading them to select options that protect data in transit or enable refresh but do not directly limit imported columns or enforce row-level filtering.
Detailed technical explanation
How to think about this question
Row-Level Security in Power BI uses DAX filter expressions evaluated at query time against the user's identity (via USERNAME() or USERPRINCIPALNAME()), dynamically filtering rows without duplicating data. Removing columns in Power Query (e.g., using Table.SelectColumns) reduces the model size and memory footprint, which is critical for large healthcare datasets, and ensures that sensitive data never enters the VertiPaq engine, providing a stronger security boundary than post-load masking.
KKey Concepts to Remember
Read the scenario before looking for a memorised answer.
Find the constraint that changes the correct option.
Eliminate answers that are true in general but not in this case.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A company's IT admin needs to give a contractor read-only access to production logs without sharing account credentials. Using role-based access control (RBAC) and temporary scoped permissions — not a permanent shared password — is the correct pattern. Questions like this test whether you can apply least-privilege access across cloud identity services.
What to study next
Got this wrong? Here's your next step.
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Prepare the data — This question tests Prepare the data — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: Create RLS roles to restrict access by Diagnosis. — Option A is correct because creating RLS roles in Power BI Desktop allows you to restrict data access based on the user's identity, ensuring that only authorized users can view specific rows (e.g., by Diagnosis). This is a key requirement for HIPAA compliance, as it prevents unauthorized exposure of patient data. Option E is correct because removing sensitive columns like SSN and Name in Power Query before loading into the model minimizes the data footprint and reduces the risk of exposing personally identifiable information (PII), aligning with the principle of data minimization.
What should I do if I get this PL-300 question wrong?
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This PL-300 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-300 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.