You have a semantic model with a table that contains a 'Country' column. You need to implement RLS so that users in the 'US' security group see only US rows and users in the 'Canada' security group see only Canada rows. What should you configure?

Create two RLS roles, one with the filter [Country] = "US" and the other with [Country] = "Canada", and add the respective security groups.

Use the 'View as' feature to test the roles and then publish.

Create one RLS role and use the USERPRINCIPALNAME() function to determine the country.

Create one RLS role with the filter [Country] = "US" OR [Country] = "Canada" and add both security groups.

A team of analysts needs to create new reports based on an existing semantic model. The analysts should be able to connect to the model and build reports, but they should NOT be able to modify the model or share it with others. The analysts do not need access to the workspace where the model resides. How should you configure access?

Share the semantic model with the analysts using the Viewer role.

Add the analysts to the workspace as Contributors.

Grant the analysts Read permission on the semantic model.

Grant the analysts Build permission on the semantic model.

A company has a Power BI semantic model with a table that contains sales data for multiple regions. The company has a group of regional managers who should only see data for their own region. The managers are members of a security group in Azure AD. You need to implement row-level security so that the managers see only their region's data. You have created a role with a DAX filter that uses the USERNAME() function. What is the most efficient way to assign the managers to the role?

Add the Azure AD security group to the role.

Create a separate role for each region and add the corresponding manager.

Add each manager individually to the role.

Use the 'Viewer' role in the workspace to restrict data.

A company has a Power BI semantic model with row-level security roles. The roles are defined using a table that maps users to regions. A new user has been added to the mapping table, but they still see all data when they view the report. The user has been added to the appropriate RLS role. What is the most likely reason for this issue?

The report is cached in the user's browser.

The user is a member of multiple RLS roles.

The semantic model has not been refreshed since the mapping table was updated.

The user has been assigned the Viewer role in the workspace.

Microsoft Certified:Power BI Data Analyst Associate

Domain 4Objective 2

Secure and Govern Power BI Items PL-300 Practice Questions (Page 5)

Part of the Manage and secure Power BI domain, which accounts for 15–20% of the PL-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 3–7 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

6concepts

15–20%of the exam

Questions 21–24

21application · medium
You have a semantic model with a table that contains a 'Country' column. You need to implement RLS so that users in the 'US' security group see only US rows and users in the 'Canada' security group see only Canada rows. What should you configure?
Select an answer first
22application · medium
A team of analysts needs to create new reports based on an existing semantic model. The analysts should be able to connect to the model and build reports, but they should NOT be able to modify the model or share it with others. The analysts do not need access to the workspace where the model resides. How should you configure access?
Select an answer first
23expert · hard
A company has a Power BI semantic model with a table that contains sales data for multiple regions. The company has a group of regional managers who should only see data for their own region. The managers are members of a security group in Azure AD. You need to implement row-level security so that the managers see only their region's data. You have created a role with a DAX filter that uses the USERNAME() function. What is the most efficient way to assign the managers to the role?
Select an answer first
24expert · hard
A company has a Power BI semantic model with row-level security roles. The roles are defined using a table that maps users to regions. A new user has been added to the mapping table, but they still see all data when they view the report. The user has been added to the appropriate RLS role. What is the most likely reason for this issue?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to PL-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “PL-300” is a trademark of its owner, used for identification only.

Secure and Govern Power BI Items PL-300 Practice Questions (Page 5)

Questions 21–24

You have a semantic model with a table that contains a 'Country' column. You need to implement RLS so that users in the 'US' security group see only US rows and users in the 'Canada' security group see only Canada rows. What should you configure?

Keep studying — Manage and secure Power BI