Microsoft Power BI Data Analyst PL-300 Practice Test 40
Question 390
An analyst created an RLS role in Desktop but a Viewer cannot access the intended filtered report because the user has not been assigned to the published role in the service. Which Power BI or Power Query action BEST meets the stated requirement?
- Assign the intended Entra users or security groups to the published semantic model's RLS role
- Create another unrelated semantic model copy
- Add a report visual filter on the territory
- Rename the RLS role to Restricted
Explanation
Correct Answer
A:RLS definitions require role membership for consumers to receive the specified row filter This addresses the specific requirement: an analyst created an RLS role in Desktop but a Viewer cannot access the intended filtered report because the user has not been assigned to the published role in the service.
Incorrect Answers
B:A separate model does not apply the existing role membership This alternative therefore fails an explicit scenario constraint.
C:A visual filter does not replace membership of a security model role This alternative therefore fails an explicit scenario constraint.
D:Renaming does not assign identities to the role This alternative therefore fails an explicit scenario constraint.
Question 391
A data analyst must publish a report for a department while allowing business users to view but not edit the workspace's semantic models. After the correct solution is implemented, which result provides the MOST DIRECT evidence that the requirement actually works?
- The workspace lists the item, but cross-workspace lineage and intended permission scope were not verified
- The service settings show a saved schedule or app update, but the operation has not executed
- A workspace Admin can view the report, but the intended app audience or Viewer account was not tested
- A test consumer can view the report but cannot edit or republish workspace content
Explanation
Correct Answer
D:A test consumer can view the report but cannot edit or republish workspace content This exercises the requested business outcome and the necessary positive or negative boundary.
Incorrect Answers
A:An item inventory entry does not establish that intended consumers see the right governed content.
B:A saved setting is not a successful refresh, distribution or alert result.
C:Admin access does not prove consumer permissions or app distribution are configured correctly.
Question 392
A user is a workspace Member and sees all rows although the model has RLS rules; the team is testing whether the rules work for consumers. Which Power BI or Power Query action BEST meets the stated requirement?
- Assume an Admin view proves RLS is broken for all consumers
- Add a visual-level page filter to hide unwanted rows
- Delete the RLS role because the author can see the full table
- Test RLS with a Viewer or appropriate consumer context rather than a workspace editor
Explanation
Correct Answer
D:RLS applies to Viewer consumers; workspace Admin Member and Contributor permissions are not constrained the same way This addresses the specific requirement: a user is a workspace Member and sees all rows although the model has RLS rules; the team is testing whether the rules work for consumers.
Incorrect Answers
A:Administrative privilege can bypass RLS behavior for that workspace This alternative therefore fails an explicit scenario constraint.
B:A presentation filter is not equivalent to tested semantic model RLS This alternative therefore fails an explicit scenario constraint.
C:Removing RLS would weaken protection based on an invalid author-context test This alternative therefore fails an explicit scenario constraint.
Question 393
An executive needs a single at-a-glance surface showing pinned metrics from several separate Power BI reports. A pilot instead implemented the following proposed change: Create a Power Query query called Dashboard. The business requirement was not met. Which technical limitation MOST DIRECTLY explains the result?
- Query names do not create service dashboards or pinned tiles
- A static export is not the requested navigable cross-report dashboard
- Tooltips are contextual page overlays rather than a multi-report dashboard
- A dashboard can combine pinned tiles from multiple reports in one service canvas
Explanation
Correct Answer
A:Query names do not create service dashboards or pinned tiles This specifically addresses the deployed or proposed alternative: Create a Power Query query called Dashboard.
Incorrect Answers
B:A static export is not the requested navigable cross-report dashboard That limitation describes Export all source reports to one static Excel file, not the specified approach.
C:Tooltips are contextual page overlays rather than a multi-report dashboard That limitation applies to a different alternative (Use one Tooltip page as the enterprise summary), not the one here.
D:A dashboard can combine pinned tiles from multiple reports in one service canvas This supports the recommended design but does not diagnose why the specified alternative fails.
Question 394
A published Import semantic model connects to a SQL Server available only on the corporate network, while the Power BI service cannot access the server directly. A design reviewer proposes this alternative: Increase the report page refresh rate without a gateway. Which objection BEST explains why it would not satisfy the stated requirement?
- A gateway bridges authorized service refresh queries to reachable internal data sources
- Page refresh does not create connectivity from the cloud service to private SQL
- Workspace location does not supply a network bridge to the on-premises server
- Measures cannot establish a secure network route or supply refresh credentials
Explanation
Correct Answer
B:Page refresh does not create connectivity from the cloud service to private SQL This specifically addresses the deployed or proposed alternative: Increase the report page refresh rate without a gateway.
Incorrect Answers
A:A gateway bridges authorized service refresh queries to reachable internal data sources This supports the recommended design but does not diagnose why the specified alternative fails.
C:Workspace location does not supply a network bridge to the on-premises server That limitation describes Publish the PBIX to a different workspace and keep the same network isolation, not the specified approach.
D:Measures cannot establish a secure network route or supply refresh credentials That limitation applies to a different alternative (Embed the SQL password into a DAX measure), not the one here.
Question 395
Two teams have nearly identical semantic models and IT wants users to identify the trusted reviewed model through the service content list. Which Power BI or Power Query action BEST meets the stated requirement?
- Create a personal bookmark labeled Approved
- Mark every semantic model in the tenant Certified automatically
- Rename the model Official without an endorsement
- Apply the approved endorsement workflow and certify the reviewed semantic model when authorized
Explanation
Correct Answer
D:Certification denotes vetted trusted content and helps discovery under governance rules This addresses the specific requirement: two teams have nearly identical semantic models and IT wants users to identify the trusted reviewed model through the service content list.
Incorrect Answers
A:Bookmarks are personal report state and do not endorse the model This alternative therefore fails an explicit scenario constraint.
B:Indiscriminate certification removes the trust meaning of governed endorsement This alternative therefore fails an explicit scenario constraint.
C:A name is not the controlled certification designation This alternative therefore fails an explicit scenario constraint.
Question 396
A semantic model has country-specific RLS, but the service test account can read global totals in a derived dashboard tile; the analyst must verify whether the tile uses the intended secure model. A pilot instead implemented the following proposed change: Assume dashboard pinning automatically removes every underlying RLS rule. The business requirement was not met. Which technical limitation MOST DIRECTLY explains the result?
- Security diagnosis must follow the actual tile lineage and authenticated query context
- Granting editing privilege can bypass the RLS perspective being tested
- Cosmetic styling cannot repair a potential access-control mismatch
- Pinning does not generally nullify semantic model RLS semantics
Explanation
Correct Answer
D:Pinning does not generally nullify semantic model RLS semantics This specifically addresses the deployed or proposed alternative: Assume dashboard pinning automatically removes every underlying RLS rule.
Incorrect Answers
A:Security diagnosis must follow the actual tile lineage and authenticated query context This supports the recommended design but does not diagnose why the specified alternative fails.
B:Granting editing privilege can bypass the RLS perspective being tested That limitation describes Give the test consumer workspace Admin so they can inspect the data, not the specified approach.
C:Cosmetic styling cannot repair a potential access-control mismatch That limitation applies to a different alternative (Change the dashboard tile's font color to hide the global total), not the one here.
Question 397
A report author needs permission to build a new report from a shared semantic model but should not be allowed to edit its tables or update model metadata. A design reviewer proposes this alternative: Give access to only the finished report without granting Build on the shared model. Which objection BEST explains why it would not satisfy the stated requirement?
- Report viewing permission by itself does not guarantee that a user can discover and build new reports from a shared semantic model
- An Admin can modify workspace content and permissions beyond the request
- Duplicating the file creates security and lineage risk rather than scoped Build access
- Build enables creating content from a model without authorizing maintenance of the model itself
Explanation
Correct Answer
A:Report viewing permission by itself does not guarantee that a user can discover and build new reports from a shared semantic model This specifically addresses the deployed or proposed alternative: Give access to only the finished report without granting Build on the shared model.
Incorrect Answers
B:An Admin can modify workspace content and permissions beyond the request That limitation applies to a different alternative (Make the author a workspace Admin), not the one here.
C:Duplicating the file creates security and lineage risk rather than scoped Build access That limitation describes Share the PBIX file containing model credentials, not the specified approach.
D:Build enables creating content from a model without authorizing maintenance of the model itself This supports the recommended design but does not diagnose why the specified alternative fails.
Question 398
A regulated dataset must display its Confidential sensitivity classification in Power BI items and in supported downstream use. Which Power BI or Power Query action BEST meets the stated requirement?
- Create a red-colored report theme
- Rename the report Confidential without applying a label
- Hide a column and call the full dataset encrypted
- Apply an appropriate Microsoft Purview sensitivity label to the supported Power BI content
Explanation
Correct Answer
D:Sensitivity labels classify governed content and can carry protection behaviors under supported settings This addresses the specific requirement: a regulated dataset must display its Confidential sensitivity classification in Power BI items and in supported downstream use.
Incorrect Answers
A:Visual colors cannot replace sensitivity and governance metadata This alternative therefore fails an explicit scenario constraint.
B:A title is not a policy-governed sensitivity label This alternative therefore fails an explicit scenario constraint.
C:Field hiding does not apply the requested classification to the item This alternative therefore fails an explicit scenario constraint.
Question 399
A semantic model has country-specific RLS, but the service test account can read global totals in a derived dashboard tile; the analyst must verify whether the tile uses the intended secure model. Which Power BI or Power Query action BEST meets the stated requirement?
- Give the test consumer workspace Admin so they can inspect the data
- Trace the dashboard tile's underlying report and semantic model and retest under the consumer's effective RLS identity
- Assume dashboard pinning automatically removes every underlying RLS rule
- Change the dashboard tile's font color to hide the global total
Explanation
Correct Answer
B:Security diagnosis must follow the actual tile lineage and authenticated query context This addresses the specific requirement: a semantic model has country-specific RLS, but the service test account can read global totals in a derived dashboard tile; the analyst must verify whether the tile uses the intended secure model.
Incorrect Answers
A:Granting editing privilege can bypass the RLS perspective being tested This alternative therefore fails an explicit scenario constraint.
C:Pinning does not generally nullify semantic model RLS semantics This alternative therefore fails an explicit scenario constraint.
D:Cosmetic styling cannot repair a potential access-control mismatch This alternative therefore fails an explicit scenario constraint.
Question 400
A report editor changed a visual in a workspace but app consumers still see the previously published version. A design reviewer proposes this alternative: Rename the semantic model and wait for the app to discover it. Which objection BEST explains why it would not satisfy the stated requirement?
- Renaming model metadata does not update the published app package
- User accounts are unrelated to promoting the changed app version
- Workspace edits do not always propagate to app consumers until the app is updated
- Visual interaction settings do not republish app content
Explanation
Correct Answer
A:Renaming model metadata does not update the published app package This specifically addresses the deployed or proposed alternative: Rename the semantic model and wait for the app to discover it.
Incorrect Answers
B:User accounts are unrelated to promoting the changed app version That limitation applies to a different alternative (Recreate every user's Power BI account), not the one here.
C:Workspace edits do not always propagate to app consumers until the app is updated This supports the recommended design but does not diagnose why the specified alternative fails.
D:Visual interaction settings do not republish app content That limitation describes Disable report page interaction settings, not the specified approach.