Contoso's finance team uses a Fabric workspace shared with sales. The finance manager must see all rows in the 'Revenue' semantic model, but sales reps must only see rows for their own region. The model contains a 'Region' column and the sales reps' Azure AD user principal names are stored in a 'SalesRep' column. You need to configure access so that each sales rep automatically sees only their region's data without manual per-user filters. What should you do?

Create a column-level security rule that hides the 'Region' column from sales reps and share the semantic model with them as Viewers.

Apply a sensitivity label to the semantic model and set the label's permissions to restrict sales reps to their own region.

Create a row-level security role that uses a DAX filter like [SalesRep] = USERPRINCIPALNAME(), add sales reps to the role, and assign the finance manager to the workspace as a Member.

Create a separate semantic model for each sales rep and give each rep Viewer access to only their own model.

Which of the following is an example of item-level access control in Microsoft Fabric?

Assigning a user the 'Contributor' role in a workspace

Setting up a sensitivity label on a report

Granting a user 'Read' permission on a specific semantic model

Configuring a firewall rule for the Fabric tenant

Which of the following is an example of object-level security (OLS) in Microsoft Fabric?

Granting a user 'Viewer' role in a workspace

Applying a sensitivity label to a report

Restricting which rows a user can see in a table

Hiding a specific column from a group of users in a semantic model

In the context of Microsoft Fabric, what does object-level security (OLS) control?

Access to specific tables and columns within a semantic model

Access to the Fabric tenant settings

What is the purpose of endorsing an item in Microsoft Fabric?

To apply a sensitivity label to the item

To signify that the item is of high quality and reliable for use

To move the item to a different workspace

Microsoft Certified:Fabric Analytics Engineer Associate

Domain 1Objective 1

Implement Security and Governance DP-600 Practice Questions (Page 2)

Part of the Maintain a data analytics solution domain, which accounts for 25–30% of the DP-600 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~10–20 in this domain), expect 5–10 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

8concepts

25–30%of the exam

Questions 6–10

6application · medium
Contoso's finance team uses a Fabric workspace shared with sales. The finance manager must see all rows in the 'Revenue' semantic model, but sales reps must only see rows for their own region. The model contains a 'Region' column and the sales reps' Azure AD user principal names are stored in a 'SalesRep' column. You need to configure access so that each sales rep automatically sees only their region's data without manual per-user filters. What should you do?
Select an answer first
7foundation · easy
Which of the following is an example of item-level access control in Microsoft Fabric?
Select an answer first
8foundation · easy
Which of the following is an example of object-level security (OLS) in Microsoft Fabric?
Select an answer first
9foundation · easy
In the context of Microsoft Fabric, what does object-level security (OLS) control?
Select an answer first
10foundation · easy
What is the purpose of endorsing an item in Microsoft Fabric?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to DP-600

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “DP-600” is a trademark of its owner, used for identification only.