Microsoft Power BI Data Analyst PL-300 Practice Test 35
Question 340
The report team must share a single report with one auditor while preventing that auditor from editing unrelated workspace content. After the correct solution is implemented, which result provides the MOST DIRECT evidence that the requirement actually works?
- A role name or label appears in settings, but its effective permissions and downstream model access were not inspected
- The auditor can open the one authorized report while unrelated workspace items remain inaccessible
- A workspace Member can view the report, but the intended Viewer or RLS test identity was not used
- An allowed user can see their data, but an excluded user was not tested for unauthorized access
Explanation
Correct Answer
B:The auditor can open the one authorized report while unrelated workspace items remain inaccessible This exercises the requested business outcome and the necessary positive or negative boundary.
Incorrect Answers
A:A policy label alone is not evidence of actual semantic-model security enforcement.
C:Elevated workspace roles can have different security behavior from restricted consumers.
D:Positive access alone does not prove the required exclusion or row-level boundary.
Question 341
An executive needs a single at-a-glance surface showing pinned metrics from several separate Power BI reports. Which Power BI or Power Query action BEST meets the stated requirement?
- Create a Power Query query called Dashboard
- Use one Tooltip page as the enterprise summary
- Pin supported report visuals to a Power BI dashboard
- Export all source reports to one static Excel file
Explanation
Correct Answer
C:A dashboard can combine pinned tiles from multiple reports in one service canvas This addresses the specific requirement: an executive needs a single at-a-glance surface showing pinned metrics from several separate Power BI reports.
Incorrect Answers
A:Query names do not create service dashboards or pinned tiles This alternative therefore fails an explicit scenario constraint.
B:Tooltips are contextual page overlays rather than a multi-report dashboard This alternative therefore fails an explicit scenario constraint.
D:A static export is not the requested navigable cross-report dashboard This alternative therefore fails an explicit scenario constraint.
Question 342
A large workspace has separate analysts who maintain reports and engineers who manage underlying models; the team needs to limit permissions to each role. A design reviewer proposes this alternative: Make reports accessible to Anyone with the link. Which objection BEST explains why it would not satisfy the stated requirement?
- Shared identities prevent reliable per-user authorization and audit tracing
- Global admin rights exceed report authoring needs and widen accidental changes
- Broad anonymous sharing undermines controlled organizational distribution
- Role-based access separates editing, administration, and consumption capabilities
Explanation
Correct Answer
C:Broad anonymous sharing undermines controlled organizational distribution This specifically addresses the deployed or proposed alternative: Make reports accessible to Anyone with the link.
Incorrect Answers
A:Shared identities prevent reliable per-user authorization and audit tracing That limitation describes Use one shared admin account for every contributor, not the specified approach.
B:Global admin rights exceed report authoring needs and widen accidental changes That limitation applies to a different alternative (Grant Admin to every analyst to avoid permission requests), not the one here.
D:Role-based access separates editing, administration, and consumption capabilities This supports the recommended design but does not diagnose why the specified alternative fails.
Question 343
The report team must share a single report with one auditor while preventing that auditor from editing unrelated workspace content. A design reviewer proposes this alternative: Place the auditor in a global tenant administrator group. Which objection BEST explains why it would not satisfy the stated requirement?
- Tenant admin rights are vastly broader than a single report review
- Item-level sharing grants access to the intended content without broad workspace editing
- Contributor permissions allow edits to workspace content beyond the shared report
- The report still needs appropriate downstream data permissions
Explanation
Correct Answer
A:Tenant admin rights are vastly broader than a single report review This specifically addresses the deployed or proposed alternative: Place the auditor in a global tenant administrator group.
Incorrect Answers
B:Item-level sharing grants access to the intended content without broad workspace editing This supports the recommended design but does not diagnose why the specified alternative fails.
C:Contributor permissions allow edits to workspace content beyond the shared report That limitation applies to a different alternative (Invite the auditor as workspace Contributor), not the one here.
D:The report still needs appropriate downstream data permissions That limitation describes Remove all semantic model access while expecting report queries to work, not the specified approach.
Question 344
A team shares a model using direct report access and users cannot create another report from it; the organization wants governed self-service reuse. After the correct solution is implemented, which result provides the MOST DIRECT evidence that the requirement actually works?
- A workspace Member can view the report, but the intended Viewer or RLS test identity was not used
- An allowed user can see their data, but an excluded user was not tested for unauthorized access
- A role name or label appears in settings, but its effective permissions and downstream model access were not inspected
- Authorized analysts create downstream reports using the same governed model without receiving model edit rights
Explanation
Correct Answer
D:Authorized analysts create downstream reports using the same governed model without receiving model edit rights This exercises the requested business outcome and the necessary positive or negative boundary.
Incorrect Answers
A:Elevated workspace roles can have different security behavior from restricted consumers.
B:Positive access alone does not prove the required exclusion or row-level boundary.
C:A policy label alone is not evidence of actual semantic-model security enforcement.
Question 345
A data analyst must publish a report for a department while allowing business users to view but not edit the workspace's semantic models. A design reviewer proposes this alternative: Assign every user the Contributor role. Which objection BEST explains why it would not satisfy the stated requirement?
- Viewer access allows consumption without granting workspace editing privileges
- Contributors can create and edit workspace content, violating the view-only requirement
- Admins can change workspace settings and content beyond the consumer requirement
- Credential sharing defeats individual access control and auditability
Explanation
Correct Answer
B:Contributors can create and edit workspace content, violating the view-only requirement This specifically addresses the deployed or proposed alternative: Assign every user the Contributor role.
Incorrect Answers
A:Viewer access allows consumption without granting workspace editing privileges This supports the recommended design but does not diagnose why the specified alternative fails.
C:Admins can change workspace settings and content beyond the consumer requirement That limitation applies to a different alternative (Give every consumer the workspace Admin role), not the one here.
D:Credential sharing defeats individual access control and auditability That limitation describes Share the workspace's owner credentials with all employees, not the specified approach.
Question 346
A published semantic model has sensitive salary columns that ordinary consumers must not query through shared model access. A design reviewer proposes this alternative: Create a slicer that defaults to non-salary fields. Which objection BEST explains why it would not satisfy the stated requirement?
- Column or table-level protection is distinct from RLS row filtering and report-level hiding
- Hidden model fields may remain accessible to users with sufficient Build permission
- Slicer defaults do not prevent direct querying of protected columns
- Bookmark display state is not a semantic model security restriction
Explanation
Correct Answer
C:Slicer defaults do not prevent direct querying of protected columns This specifically addresses the deployed or proposed alternative: Create a slicer that defaults to non-salary fields.
Incorrect Answers
A:Column or table-level protection is distinct from RLS row filtering and report-level hiding This supports the recommended design but does not diagnose why the specified alternative fails.
B:Hidden model fields may remain accessible to users with sufficient Build permission That limitation applies to a different alternative (Hide salary fields in report view and consider them secured), not the one here.
D:Bookmark display state is not a semantic model security restriction That limitation describes Apply a report bookmark that collapses the salary table, not the specified approach.
Question 347
A revenue scorecard must notify its owner when a supported dashboard numeric tile exceeds a specified threshold. Which Power BI or Power Query action BEST meets the stated requirement?
- Create a subscription alone and assume it checks the threshold
- Change conditional formatting of the underlying visual
- Publish a paginated report and assume it sends the alert
- Set a dashboard data alert on an eligible numeric tile
Explanation
Correct Answer
D:Data alerts can notify a user when a tile's numeric value crosses a defined condition This addresses the specific requirement: a revenue scorecard must notify its owner when a supported dashboard numeric tile exceeds a specified threshold.
Incorrect Answers
A:Subscriptions deliver scheduled views but do not independently test the specified threshold This alternative therefore fails an explicit scenario constraint.
B:Color formatting does not send threshold notifications This alternative therefore fails an explicit scenario constraint.
C:A paginated report does not automatically provide the dashboard tile alert This alternative therefore fails an explicit scenario constraint.
Question 348
A user is a workspace Member and sees all rows although the model has RLS rules; the team is testing whether the rules work for consumers. A design reviewer proposes this alternative: Add a visual-level page filter to hide unwanted rows. Which objection BEST explains why it would not satisfy the stated requirement?
- RLS applies to Viewer consumers; workspace Admin Member and Contributor permissions are not constrained the same way
- Administrative privilege can bypass RLS behavior for that workspace
- A presentation filter is not equivalent to tested semantic model RLS
- Removing RLS would weaken protection based on an invalid author-context test
Explanation
Correct Answer
C:A presentation filter is not equivalent to tested semantic model RLS This specifically addresses the deployed or proposed alternative: Add a visual-level page filter to hide unwanted rows.
Incorrect Answers
A:RLS applies to Viewer consumers; workspace Admin Member and Contributor permissions are not constrained the same way This supports the recommended design but does not diagnose why the specified alternative fails.
B:Administrative privilege can bypass RLS behavior for that workspace That limitation applies to a different alternative (Assume an Admin view proves RLS is broken for all consumers), not the one here.
D:Removing RLS would weaken protection based on an invalid author-context test That limitation describes Delete the RLS role because the author can see the full table, not the specified approach.
Question 349
A team shares a model using direct report access and users cannot create another report from it; the organization wants governed self-service reuse. Which Power BI or Power Query action BEST meets the stated requirement?
- Review the model's Build permission and grant it to authorized analysts
- Turn off sharing and copy all source data into personal Excel files
- Assign users to an unrelated RLS role only
- Grant all users workspace Admin
Explanation
Correct Answer
A:Report viewing and creating new content from a semantic model are distinct permission needs This addresses the specific requirement: a team shares a model using direct report access and users cannot create another report from it; the organization wants governed self-service reuse.
Incorrect Answers
B:Uncontrolled copies undermine governed model reuse This alternative therefore fails an explicit scenario constraint.
C:RLS controls row access and does not alone grant authorization to build new content This alternative therefore fails an explicit scenario constraint.
D:Administration grants excessive rights for self-service report authoring This alternative therefore fails an explicit scenario constraint.
Question 350
An analyst created an RLS role in Desktop but a Viewer cannot access the intended filtered report because the user has not been assigned to the published role in the service. After the correct solution is implemented, which result provides the MOST DIRECT evidence that the requirement actually works?
- A role name or label appears in settings, but its effective permissions and downstream model access were not inspected
- A workspace Member can view the report, but the intended Viewer or RLS test identity was not used
- An assigned Viewer test user is filtered while an unassigned test user does not silently receive that role
- An allowed user can see their data, but an excluded user was not tested for unauthorized access
Explanation
Correct Answer
C:An assigned Viewer test user is filtered while an unassigned test user does not silently receive that role This exercises the requested business outcome and the necessary positive or negative boundary.
Incorrect Answers
A:A policy label alone is not evidence of actual semantic-model security enforcement.
B:Elevated workspace roles can have different security behavior from restricted consumers.
D:Positive access alone does not prove the required exclusion or row-level boundary.