PL-300 Manage and secure Power BI Practice Question
You are a Power BI administrator. Your organization uses Microsoft Purview to manage sensitivity labels. You need to ensure that when a report is exported to PDF, the sensitivity label is automatically applied to the PDF file. What should you configure?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable the tenant setting 'Apply sensitivity labels to exported data' in the Power BI admin portal.
Option A is correct because the Power BI tenant setting 'Apply sensitivity labels to exported data' (in the Power BI admin portal) is specifically what causes the sensitivity label on a report to be inherited by exported files such as PDF, PPTX, and XLSX. When this setting is enabled, Power BI propagates the report's label to the exported artifact so the PDF carries the same protection. Option B is incorrect because Purview Information Protection encryption settings govern encryption behavior, not the propagation of labels to Power BI exports. Option C is incorrect because setting a workspace default label only assigns labels to new items in that workspace; it does not control label inheritance on exported PDFs. Option D is incorrect because a Purview auto-labeling policy applies labels based on content inspection and does not govern the export-labeling behavior of Power BI reports.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Enable the tenant setting 'Apply sensitivity labels to exported data' in the Power BI admin portal.
Why this is correct
The tenant-level admin setting named 'Apply sensitivity labels to exported data' directly controls whether an export carries the source report's sensitivity label. When enabled, files exported from labeled items in the Power BI service receive the corresponding label, which preserves data classification and protection outside the service. Without this setting, exported content loses the label even if the original report is labeled.
- ✗
Enable 'Microsoft Purview Information Protection' file encryption settings.
Why it's wrong here
Microsoft Purview Information Protection file encryption settings govern encryption of files via Azure Information Protection, but they operate independently of Power BI's export pipeline. These settings protect Office and line-of-business document encryption rules, not the metadata stamping that occurs during a Power BI export. Enabling them alone does not cause a Power BI report's sensitivity label to appear in the resulting Excel, PowerPoint, or PDF file.
- ✗
Set the default sensitivity label for the workspace to 'Confidential'.
Why it's wrong here
Workspace default sensitivity labels only apply to newly created items within that workspace, such as reports or dashboards, and do not retroactively label exports. At export time, Power BI uses the label on the underlying report item; if that item has no label, the exported file is unlabeled regardless of the workspace default. Therefore, this action has no direct effect on the exported file's protection.
- ✗
Configure a Microsoft Purview auto-labeling policy for Power BI reports.
Why it's wrong here
A Microsoft Purview auto-labeling policy scans and recommends or applies sensitivity labels to items stored in SharePoint, OneDrive, and Power BI when they are created or modified. This occurs inside the online service and is triggered by content inspection, not by a user's explicit export action. As such, it can ensure reports are labeled in the service, but it does not apply labels to files being exported outside of Power BI.
Go deeper
Related to this question
About these practice questions
One of 524 original PL-300 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PL-300 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-300 exam.