Q01 - Question
You need to provide executives with high-level insights and a streamlined way to access multiple related reports and dashboards. Which two components should you use?
Domain: Manage and secure Power BI (15–20%) Type: Multiple choice
- A. My Workspace
- B. Power BI apps
- C. Power BI Desktop
- D. Dashboards
B and D are correct.
Explanation: Power BI apps provide a streamlined way to share multiple reports and dashboards with larger audiences. Dashboards are utilized to provide high-level insights.
A is incorrect: My Workspace is private to an individual user and is not used to share content with executives.
C is incorrect: Power BI Desktop is an authoring tool, not a component used to provide streamlined access to multiple reports for executives.
Q02 - Question
A report contains financial data that your organization classifies as sensitive. You must tag the report with a label such as Confidential or Highly Confidential. Which feature should you use?
Domain: Manage and secure Power BI (15–20%) Type: Single choice
- A. Promotion
- B. Certification
- C. Sensitivity labels
- D. Subscriptions
C is correct.
Explanation: Sensitivity labels are powered by Microsoft Purview Information Protection. They let users tag content with labels such as Confidential or Highly Confidential.
A is incorrect: Promotion highlights content that the owner believes is valuable and ready for broader use. It does not classify content as sensitive.
B is incorrect: Certification signifies that content meets the organization's quality standards and is authoritative. It does not tag content with a sensitivity classification.
D is incorrect: Subscriptions send regular email updates with snapshots or attachments to users. They do not classify content.
Q03 - Question
A semantic model uses imported tables. One table stores the email address of each sales representative next to the sales rows that the representative owns. New representatives are added frequently. You must make sure that each user sees only their own rows, without updating and republishing the semantic model for each new representative. What should you do?
Domain: Manage and secure Power BI (15–20%) Type: Single choice
- A. Create one role with a DAX filter that compares the email address column to USERPRINCIPALNAME().
- B. Create one role for each representative and enter the email address as a fixed value in each filter.
- C. Add an object-level security rule to the email address column.
- D. Enable single sign-on (SSO) in the data source credentials.
A is correct.
Explanation: A dynamic rule works well when a model table stores username or email address values. USERPRINCIPALNAME() returns the email address that the user entered when signing in to Power BI service. The rule compares it with the table value, so the design is data-driven.
B is incorrect: Fixed values create static rules. Static rules require effort and require you to update and republish the semantic model when new users are onboarded.
C is incorrect: Object-level security restricts access to tables and columns and their metadata. It does not filter rows based on the signed-in user.
D is incorrect: SSO applies when the model has DirectQuery tables and the data source supports SSO. This model uses imported tables.
Q04 - Question
Your workspace uses a Fabric or Premium capacity. A semantic model is refreshed infrequently but is accessed often. You plan to use query caching and must explain how it behaves to report owners. Which two statements are accurate? Select two.
Domain: Manage and secure Power BI (15–20%) Type: Multiple select
- A. Caching is performed the first time a user opens the report, and only for the initial page.
- B. Query caching is available to all Power BI users regardless of the capacity type.
- C. Query caching maintains cache results on a user and report basis.
- D. Caching is performed for every page of a report immediately after the semantic model refreshes.
A and C are correct.
Explanation: Query caching is performed the first time a user opens a report, and only for the initial page that they land on. It maintains cache results on a user and report basis, which is highly beneficial for semantic models that are accessed frequently but refreshed infrequently.
B is incorrect: Query caching is only available to users with Microsoft Fabric, Power BI Premium, or Power BI Embedded capacities.
D is incorrect: The service only performs query caching for the initial page a user lands on, not every page. Furthermore, caching occurs when the user opens the report, not automatically when the model refreshes.
Q05 - Question
You build a sales performance report in Power BI Desktop. Leadership and colleagues in several departments need to view and collaborate on the report. You need to prevent version control issues and data inconsistency. What should you do?
Domain: Manage and secure Power BI (15–20%) Type: Single choice
- A. Email the .pbix file to the stakeholders.
- B. Publish the report to the Power BI service.
- C. Rebuild the report for each stakeholder in Power BI Desktop.
- D. Share static screenshots of the report visuals.
B is correct.
Explanation: The Power BI service provides a centralized, web-based environment where users can securely view, interact with, and collaborate on reports.
A is incorrect: Sharing a static .pbix file through email creates version control issues, risks data inconsistency, and makes collaboration difficult.
C is incorrect: Rebuilding the report for each stakeholder does not provide a centralized environment for collaboration.
D is incorrect: Sharing static screenshots does not allow users to interact with the report or drill down into the data.
Q06 - Question
A user has a Power BI Pro license and the Viewer role in a workspace. The Fabric administrator has enabled usage metrics in the admin portal. The user cannot access usage metrics for a report in the workspace. What should you do to meet the remaining requirement?
Domain: Manage and secure Power BI (15–20%) Type: Single choice
- A. Share the report with the user by using item-level sharing.
- B. Assign the user at least the Contributor role in the workspace.
- C. Apply a sensitivity label to the report.
- D. Request certification for the report.
B is correct.
Explanation: To access usage metrics, a user needs a Power BI Pro or Premium Per User (PPU) license, at least the Contributor role in the workspace, and usage metrics enabled by the Fabric administrator. The user has the license and the administrator has enabled the feature. The Viewer role is below Contributor, so the role requirement is not met.
A is incorrect: Item-level sharing grants access to a specific item. It does not meet the workspace role requirement for usage metrics.
C is incorrect: A sensitivity label classifies and protects content. It does not grant access to usage metrics.
D is incorrect: Certification signifies that content meets the organization's quality standards. It is not a requirement for usage metrics.
Q07 - Question
Many users in your organization can access various semantic models. Some semantic models are already promoted. You want a highly selective designation so that only reliable and authoritative semantic models are used across the organization. Which endorsement should you request for the best semantic models?
Domain: Manage and secure Power BI (15–20%) Type: Single choice
- A. Promotion
- B. Master data
- C. Certification
- D. Incremental refresh
C is correct.
Explanation: You can request certification for a promoted semantic model. Certification is a highly selective process that ensures only truly reliable and authoritative semantic models are used across the organization.
A is incorrect: Promotion highlights content that is valuable and ready for others to use, but it is not the highly selective process used to mark models as authoritative.
B is incorrect: Master data labels a data item as core, single-source-of-truth data. Certification is the specific endorsement requested to mark a model as reliable and authoritative.
D is incorrect: Incremental refresh is a feature used to optimize data loads. It is not an endorsement.
Q08 - Question
An employee table contains a column with sensitive personal data. You must restrict access to that column and its metadata for report consumers who are assigned the Viewer role in the workspace. Which two actions should you take?
Domain: Manage and secure Power BI (15–20%) Type: Multi-select
- A. Create the roles in Power BI Desktop in the same way you create roles for RLS.
- B. Add the object-level security rules by using the Power BI Desktop graphical modeling experience.
- C. Add the object-level security rules to the roles by using TMDL view.
- D. Rely on object-level security to restrict users who are assigned the Contributor role.
A and C are correct.
Explanation: Object-level security (OLS) can restrict access to specific tables and columns and their metadata. You start by creating roles in Power BI Desktop, in the same way you do for RLS. You then add OLS rules to the roles. One option for adding the rules is TMDL view.
B is incorrect: Adding OLS rules isn't supported by Power BI Desktop graphical modeling.
D is incorrect: OLS only applies to users who are assigned the Viewer role in a workspace. It is not a way to restrict users in other roles.
Q09 - Question
A DirectQuery model uses a data source that supports SSO. You set the data source credentials in Power BI service to enable SSO, and the database enforces RLS. You must verify that data permissions are applied correctly for report consumers. What should you do?
Domain: Manage and secure Power BI (15–20%) Type: Single choice
- A. Use Test as role in Power BI Desktop and select the role that you want to verify.
- B. Sign in as an actual user who is assigned the Viewer role and open the report directly.
- C. Replace the data source rules with a DAX filter that uses a fixed value.
- D. Remove the SSO setting so that you can use Test as role.
B is correct.
Explanation: With SSO, Power BI passes the identity of the report consumer to the data source, and the data source enforces RLS. To verify the permissions, sign in as an actual user who is assigned the Viewer role and open the report directly.
A is incorrect: The Test as role feature doesn't work for DirectQuery models with SSO enabled.
C is incorrect: A fixed-value DAX filter is a static model rule. It does not verify the permissions that the data source enforces, and it changes the security design.
D is incorrect: Removing SSO changes how security is enforced. It does not verify the existing data source permissions.
Q10 - Question
An analytics team needs a collaborative environment to create and manage reports and dashboards. The team must apply role-based access control and plans to create a Power BI app. Which environment should the team use?
Domain: Manage and secure Power BI (15–20%) Type: Single choice
- A. A shared workspace
- B. My Workspace
- C. Power BI Desktop
- D. A semantic model
A is correct.
Explanation: Shared workspaces allow multiple users with assigned roles to access content. They allow you to organize content, apply role-based access control, and create Power BI apps.
B is incorrect: My Workspace is private to an individual user and does not support multiple users with assigned roles.
C is incorrect: Power BI Desktop is an application used to build reports, not a collaborative environment for applying role-based access control and creating apps.
D is incorrect: A semantic model is a dataset, not a collaborative workspace environment.