Microsoft Power BI Data Analyst PL-300 Practice Test 37
Question 360
Two teams have nearly identical semantic models and IT wants users to identify the trusted reviewed model through the service content list. A pilot instead implemented the following proposed change: Rename the model Official without an endorsement. The business requirement was not met. Which technical limitation MOST DIRECTLY explains the result?
- A name is not the controlled certification designation
- Indiscriminate certification removes the trust meaning of governed endorsement
- Bookmarks are personal report state and do not endorse the model
- Certification denotes vetted trusted content and helps discovery under governance rules
Explanation
Correct Answer
A:A name is not the controlled certification designation This specifically addresses the deployed or proposed alternative: Rename the model Official without an endorsement.
Incorrect Answers
B:Indiscriminate certification removes the trust meaning of governed endorsement That limitation applies to a different alternative (Mark every semantic model in the tenant Certified automatically), not the one here.
C:Bookmarks are personal report state and do not endorse the model That limitation describes Create a personal bookmark labeled Approved, not the specified approach.
D:Certification denotes vetted trusted content and helps discovery under governance rules This supports the recommended design but does not diagnose why the specified alternative fails.
Question 361
An analyst created an RLS role in Desktop but a Viewer cannot access the intended filtered report because the user has not been assigned to the published role in the service. A design reviewer proposes this alternative: Add a report visual filter on the territory. Which objection BEST explains why it would not satisfy the stated requirement?
- A separate model does not apply the existing role membership
- RLS definitions require role membership for consumers to receive the specified row filter
- Renaming does not assign identities to the role
- A visual filter does not replace membership of a security model role
Explanation
Correct Answer
D:A visual filter does not replace membership of a security model role This specifically addresses the deployed or proposed alternative: Add a report visual filter on the territory.
Incorrect Answers
A:A separate model does not apply the existing role membership That limitation describes Create another unrelated semantic model copy, not the specified approach.
B:RLS definitions require role membership for consumers to receive the specified row filter This supports the recommended design but does not diagnose why the specified alternative fails.
C:Renaming does not assign identities to the role That limitation applies to a different alternative (Rename the RLS role to Restricted), not the one here.
Question 362
An executive needs a single at-a-glance surface showing pinned metrics from several separate Power BI reports. After the correct solution is implemented, which result provides the MOST DIRECT evidence that the requirement actually works?
- The workspace lists the item, but cross-workspace lineage and intended permission scope were not verified
- A workspace Admin can view the report, but the intended app audience or Viewer account was not tested
- The service settings show a saved schedule or app update, but the operation has not executed
- The service dashboard shows tiles originating from the selected reports and links to their source views
Explanation
Correct Answer
D:The service dashboard shows tiles originating from the selected reports and links to their source views This exercises the requested business outcome and the necessary positive or negative boundary.
Incorrect Answers
A:An item inventory entry does not establish that intended consumers see the right governed content.
B:Admin access does not prove consumer permissions or app distribution are configured correctly.
C:A saved setting is not a successful refresh, distribution or alert result.
Question 363
A semantic model using Import mode should load new orders each business morning and the service currently never refreshes after initial publication. After the correct solution is implemented, which result provides the MOST DIRECT evidence that the requirement actually works?
- The service settings show a saved schedule or app update, but the operation has not executed
- The workspace lists the item, but cross-workspace lineage and intended permission scope were not verified
- A workspace Admin can view the report, but the intended app audience or Viewer account was not tested
- Refresh history shows successful runs and new orders appear in the imported model at the scheduled interval
Explanation
Correct Answer
D:Refresh history shows successful runs and new orders appear in the imported model at the scheduled interval This exercises the requested business outcome and the necessary positive or negative boundary.
Incorrect Answers
A:A saved setting is not a successful refresh, distribution or alert result.
B:An item inventory entry does not establish that intended consumers see the right governed content.
C:Admin access does not prove consumer permissions or app distribution are configured correctly.
Question 364
A regulated dataset must display its Confidential sensitivity classification in Power BI items and in supported downstream use. A pilot instead implemented the following proposed change: Rename the report Confidential without applying a label. The business requirement was not met. Which technical limitation MOST DIRECTLY explains the result?
- A title is not a policy-governed sensitivity label
- Field hiding does not apply the requested classification to the item
- Visual colors cannot replace sensitivity and governance metadata
- Sensitivity labels classify governed content and can carry protection behaviors under supported settings
Explanation
Correct Answer
A:A title is not a policy-governed sensitivity label This specifically addresses the deployed or proposed alternative: Rename the report Confidential without applying a label.
Incorrect Answers
B:Field hiding does not apply the requested classification to the item That limitation applies to a different alternative (Hide a column and call the full dataset encrypted), not the one here.
C:Visual colors cannot replace sensitivity and governance metadata That limitation describes Create a red-colored report theme, not the specified approach.
D:Sensitivity labels classify governed content and can carry protection behaviors under supported settings This supports the recommended design but does not diagnose why the specified alternative fails.
Question 365
A published semantic model has sensitive salary columns that ordinary consumers must not query through shared model access. A pilot instead implemented the following proposed change: Hide salary fields in report view and consider them secured. The business requirement was not met. Which technical limitation MOST DIRECTLY explains the result?
- Column or table-level protection is distinct from RLS row filtering and report-level hiding
- Bookmark display state is not a semantic model security restriction
- Slicer defaults do not prevent direct querying of protected columns
- Hidden model fields may remain accessible to users with sufficient Build permission
Explanation
Correct Answer
D:Hidden model fields may remain accessible to users with sufficient Build permission This specifically addresses the deployed or proposed alternative: Hide salary fields in report view and consider them secured.
Incorrect Answers
A:Column or table-level protection is distinct from RLS row filtering and report-level hiding This supports the recommended design but does not diagnose why the specified alternative fails.
B:Bookmark display state is not a semantic model security restriction That limitation describes Apply a report bookmark that collapses the salary table, not the specified approach.
C:Slicer defaults do not prevent direct querying of protected columns That limitation applies to a different alternative (Create a slicer that defaults to non-salary fields), not the one here.
Question 366
A regional sales report must show each employee only their own territory rows using a mapping table keyed by their signed-in account. Which Power BI or Power Query action BEST meets the stated requirement?
- Hide the Territory column from report view
- Create one static report-page filter and assume it enforces territory security
- Create one common workspace Editor account for all sales employees
- Implement dynamic row-level security using USERPRINCIPALNAME() with a validated account-to-territory mapping
Explanation
Correct Answer
D:Dynamic RLS applies an identity-derived filter to relevant rows for each signed-in user This addresses the specific requirement: a regional sales report must show each employee only their own territory rows using a mapping table keyed by their signed-in account.
Incorrect Answers
A:Hiding fields does not prevent access to underlying rows through permitted queries This alternative therefore fails an explicit scenario constraint.
B:Page filters are user-editable presentation controls, not a security boundary This alternative therefore fails an explicit scenario constraint.
C:Authoring rights can bypass normal consumption restrictions and defeat per-user RLS testing This alternative therefore fails an explicit scenario constraint.
Question 367
A published Import semantic model connects to a SQL Server available only on the corporate network, while the Power BI service cannot access the server directly. Which Power BI or Power Query action BEST meets the stated requirement?
- Publish the PBIX to a different workspace and keep the same network isolation
- Configure an appropriate on-premises data gateway and bind the service connection to it
- Increase the report page refresh rate without a gateway
- Embed the SQL password into a DAX measure
Explanation
Correct Answer
B:A gateway bridges authorized service refresh queries to reachable internal data sources This addresses the specific requirement: a published Import semantic model connects to a SQL Server available only on the corporate network, while the Power BI service cannot access the server directly.
Incorrect Answers
A:Workspace location does not supply a network bridge to the on-premises server This alternative therefore fails an explicit scenario constraint.
C:Page refresh does not create connectivity from the cloud service to private SQL This alternative therefore fails an explicit scenario constraint.
D:Measures cannot establish a secure network route or supply refresh credentials This alternative therefore fails an explicit scenario constraint.
Question 368
A Power BI department has an approved collection of reports and wants to distribute a curated read-only experience to hundreds of users with controlled audiences. A design reviewer proposes this alternative: Email PBIX files individually after each update. Which objection BEST explains why it would not satisfy the stated requirement?
- A tooltip is report content, not a distribution method or permission boundary
- Static files create uncontrolled copies and complicate release management
- Apps package curated workspace content for broad consumer distribution and updates
- Member rights are broader than necessary for report consumption
Explanation
Correct Answer
B:Static files create uncontrolled copies and complicate release management This specifically addresses the deployed or proposed alternative: Email PBIX files individually after each update.
Incorrect Answers
A:A tooltip is report content, not a distribution method or permission boundary That limitation describes Use a report tooltip page as the distribution channel, not the specified approach.
C:Apps package curated workspace content for broad consumer distribution and updates This supports the recommended design but does not diagnose why the specified alternative fails.
D:Member rights are broader than necessary for report consumption That limitation applies to a different alternative (Assign all 300 consumers as workspace Members), not the one here.
Question 369
A team shares a model using direct report access and users cannot create another report from it; the organization wants governed self-service reuse. A pilot instead implemented the following proposed change: Grant all users workspace Admin. The business requirement was not met. Which technical limitation MOST DIRECTLY explains the result?
- Administration grants excessive rights for self-service report authoring
- RLS controls row access and does not alone grant authorization to build new content
- Report viewing and creating new content from a semantic model are distinct permission needs
- Uncontrolled copies undermine governed model reuse
Explanation
Correct Answer
A:Administration grants excessive rights for self-service report authoring This specifically addresses the deployed or proposed alternative: Grant all users workspace Admin.
Incorrect Answers
B:RLS controls row access and does not alone grant authorization to build new content That limitation describes Assign users to an unrelated RLS role only, not the specified approach.
C:Report viewing and creating new content from a semantic model are distinct permission needs This supports the recommended design but does not diagnose why the specified alternative fails.
D:Uncontrolled copies undermine governed model reuse That limitation applies to a different alternative (Turn off sharing and copy all source data into personal Excel files), not the one here.
Question 370
A published semantic model has sensitive salary columns that ordinary consumers must not query through shared model access. After the correct solution is implemented, which result provides the MOST DIRECT evidence that the requirement actually works?
- A workspace Member can view the report, but the intended Viewer or RLS test identity was not used
- Unauthorized consumer queries cannot access the protected salary objects even outside the original report visual
- An allowed user can see their data, but an excluded user was not tested for unauthorized access
- A role name or label appears in settings, but its effective permissions and downstream model access were not inspected
Explanation
Correct Answer
B:Unauthorized consumer queries cannot access the protected salary objects even outside the original report visual This exercises the requested business outcome and the necessary positive or negative boundary.
Incorrect Answers
A:Elevated workspace roles can have different security behavior from restricted consumers.
C:Positive access alone does not prove the required exclusion or row-level boundary.
D:A policy label alone is not evidence of actual semantic-model security enforcement.