A company has a Power BI semantic model with a table named 'Sales' that includes a 'SalespersonEmail' column. You need to implement row-level security so that each salesperson only sees their own sales data. You have created a role with the following DAX expression: [SalespersonEmail] = USERNAME(). Which additional step is required for this to work?

Publish the semantic model to a workspace and share the report with the salespeople.

Set the semantic model to use the 'Viewer' role in the workspace.

Change the DAX expression to use USERPRINCIPALNAME() instead of USERNAME().

Add each salesperson as a member of the role.

Your organization requires that all reports in a specific workspace have a 'Confidential' sensitivity label. You have set a default label on the workspace. However, a user creates a new report and the label is not applied. What is the most likely reason?

The user is a Member of the workspace, and default labels only apply to Viewers.

The user created the report in a different workspace.

The user's tenant has not enabled sensitivity labels for Power BI.

The user does not have a Power BI Pro license.

A report in a Power BI workspace is shared with a user who needs access to that specific report only, without access to other items in the workspace. What is the most appropriate way to grant access?

Share the report directly with the user

Add the user to the workspace as a Contributor

Add the user to the workspace as an Admin

Add the user to the workspace as a Viewer

A Power BI semantic model has a row-level security role named 'Sales Managers' that filters data by region. The sales manager for the West region has left the company, and a new manager has been hired. You need to ensure the new manager sees only West region data. What should you do?

Grant the new manager the Viewer role in the workspace.

Create a new role for the new manager and assign the West region filter.

Update the DAX expression of the 'Sales Managers' role to include the new manager's email.

Add the new manager to the 'Sales Managers' role in the semantic model.

A user has 'Read' permission on a semantic model but not 'Build' permission. What can the user do with the semantic model?

Create new reports based on the semantic model

View data in existing reports that use the semantic model

Edit the semantic model structure

Share the semantic model with other users

Microsoft Certified:Power BI Data Analyst Associate

Domain 4Objective 2

Secure and Govern Power BI Items PL-300 Practice Questions (Page 4)

Part of the Manage and secure Power BI domain, which accounts for 15–20% of the PL-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 3–7 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

6concepts

15–20%of the exam

Questions 16–20

16application · medium
A company has a Power BI semantic model with a table named 'Sales' that includes a 'SalespersonEmail' column. You need to implement row-level security so that each salesperson only sees their own sales data. You have created a role with the following DAX expression: [SalespersonEmail] = USERNAME(). Which additional step is required for this to work?
Select an answer first
17expert · hard
Your organization requires that all reports in a specific workspace have a 'Confidential' sensitivity label. You have set a default label on the workspace. However, a user creates a new report and the label is not applied. What is the most likely reason?
Select an answer first
18foundation · easy
A report in a Power BI workspace is shared with a user who needs access to that specific report only, without access to other items in the workspace. What is the most appropriate way to grant access?
Select an answer first
19application · medium
A Power BI semantic model has a row-level security role named 'Sales Managers' that filters data by region. The sales manager for the West region has left the company, and a new manager has been hired. You need to ensure the new manager sees only West region data. What should you do?
Select an answer first
20foundation · easy
A user has 'Read' permission on a semantic model but not 'Build' permission. What can the user do with the semantic model?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to PL-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “PL-300” is a trademark of its owner, used for identification only.