Microsoft PL-300 Practice Test 76
Question 750
The BI department wants viewers to find a trusted sales semantic model for self-service reports. A colleague proposes: Create several unlabelled duplicate models with different definitions. Which explanation BEST identifies the defect in that proposal?
- Duplicate ungoverned assets make the authoritative dataset unclear
- Findability plus governance helps users select approved reusable data models
- The suggested approach is safe merely because its product name is familiar.
- Admin rights expose excessive management authority and can reveal unrelated items
Explanation
Correct Answer
A:Duplicate ungoverned assets make the authoritative dataset unclear. This directly explains why the proposal 'Create several unlabelled duplicate models with different definitions' should not be used.
Incorrect Answers
B:This is reasoning supporting the preferred solution 'Set appropriate discovery and endorsement options and document its owner', but it does not directly name the defect in the proposed shortcut.
C:Product familiarity is not evidence of suitability. The actual defect in this proposal is: Duplicate ungoverned assets make the authoritative dataset unclear.
D:This addresses a different case: A regional company releases one Power BI app to Sales and a different content selection to Finance. It is not the specific defect in 'Create several unlabelled duplicate models with different definitions'.
Question 751
The BI department wants viewers to find a trusted sales semantic model for self-service reports. After implementing Set appropriate discovery and endorsement options and document its owner, which observation BEST demonstrates that the intended result is actually working?
- The team schedules a future check of whether Users locate the endorsed model and can identify its steward, but has not observed a result.
- Sales and Finance users see their correct approved app content
- The report owner approves Set appropriate discovery and endorsement options and document its owner without testing the resulting behavior.
- Users locate the endorsed model and can identify its steward
Explanation
Correct Answer
D:The observation 'Users locate the endorsed model and can identify its steward' directly tests the intended result. Findability plus governance helps users select approved reusable data models.
Incorrect Answers
A:A future test is not yet observed operational evidence. The verification must establish: Users locate the endorsed model and can identify its steward.
B:This belongs to a different case: A regional company releases one Power BI app to Sales and a different content selection to Finance. It does not validate the current change.
C:Approval of a proposed design is not evidence of working behavior. The required observation is: Users locate the endorsed model and can identify its steward.
Question 752
The original scenario was: The BI department wants viewers to find a trusted sales semantic model for self-service reports. The initial solution is already in place. Now this new requirement arises: A formal governance panel verifies the model. Which ADDITIONAL action BEST meets the changed condition?
- Set appropriate discovery and endorsement options and document its owner
- Apply certification through its authorized workflow
- Users locate the endorsed model and can identify its steward
- Create several unlabelled duplicate models with different definitions
Explanation
Correct Answer
B:The changed requirement is 'A formal governance panel verifies the model'. The additional response is 'Apply certification through its authorized workflow'.
Incorrect Answers
A:This is the already implemented original solution: Set appropriate discovery and endorsement options and document its owner. Findability plus governance helps users select approved reusable data models. It does not itself solve the new requirement.
C:This observes the original approach but is not an additional action: Users locate the endorsed model and can identify its steward.
D:This remains unsuitable for the original situation: Duplicate ungoverned assets make the authoritative dataset unclear. It also does not meet the changed need.
Question 753
A national sales team must see only rows where Region equals the viewing user's assigned region. Which approach BEST meets the stated Microsoft Power BI requirement?
- Create a separate ungoverned copy of the report for each region
- Implement dynamic row-level security using an entitlement table and USERPRINCIPALNAME
- Review semantic model and workspace permissions, retaining read/build only where needed
- Model many-to-many entitlement mappings with validated filter propagation
Explanation
Correct Answer
B:Dynamic RLS applies row filters from user identity to a governed mapping table. For the stated case, Implement dynamic row-level security using an entitlement table and USERPRINCIPALNAME.
Incorrect Answers
A:Report copies are not a scalable replacement for centralized row security. The proposed shortcut 'Create a separate ungoverned copy of the report for each region' fails the documented need.
C:This addresses a separate source situation: A certified customer semantic model is shared widely and the steward must prevent accidental broad Write access. It does not directly satisfy this case's priority.
D:This might be appropriate after a different requirement arises: Regional managers may legitimately oversee several territories. It is not the best initial response to the stated case.
Question 754
A national sales team must see only rows where Region equals the viewing user's assigned region. A colleague proposes: Create a separate ungoverned copy of the report for each region. Which explanation BEST identifies the defect in that proposal?
- Certification does not justify granting everyone edit privileges
- Dynamic RLS applies row filters from user identity to a governed mapping table
- Report copies are not a scalable replacement for centralized row security
- The suggested approach is safe merely because its product name is familiar.
Explanation
Correct Answer
C:Report copies are not a scalable replacement for centralized row security. This directly explains why the proposal 'Create a separate ungoverned copy of the report for each region' should not be used.
Incorrect Answers
A:This addresses a different case: A certified customer semantic model is shared widely and the steward must prevent accidental broad Write access. It is not the specific defect in 'Create a separate ungoverned copy of the report for each region'.
B:This is reasoning supporting the preferred solution 'Implement dynamic row-level security using an entitlement table and USERPRINCIPALNAME', but it does not directly name the defect in the proposed shortcut.
D:Product familiarity is not evidence of suitability. The actual defect in this proposal is: Report copies are not a scalable replacement for centralized row security.
Question 755
A national sales team must see only rows where Region equals the viewing user's assigned region. After implementing Implement dynamic row-level security using an entitlement table and USERPRINCIPALNAME, which observation BEST demonstrates that the intended result is actually working?
- The report owner approves Implement dynamic row-level security using an entitlement table and USERPRINCIPALNAME without testing the resulting behavior.
- Two test accounts see only their permitted region sales
- The team schedules a future check of whether Two test accounts see only their permitted region sales, but has not observed a result.
- A permissions audit shows restricted edit access and expected viewer/build rights
Explanation
Correct Answer
B:The observation 'Two test accounts see only their permitted region sales' directly tests the intended result. Dynamic RLS applies row filters from user identity to a governed mapping table.
Incorrect Answers
A:Approval of a proposed design is not evidence of working behavior. The required observation is: Two test accounts see only their permitted region sales.
C:A future test is not yet observed operational evidence. The verification must establish: Two test accounts see only their permitted region sales.
D:This belongs to a different case: A certified customer semantic model is shared widely and the steward must prevent accidental broad Write access. It does not validate the current change.
Question 756
The original scenario was: A national sales team must see only rows where Region equals the viewing user's assigned region. The initial solution is already in place. Now this new requirement arises: Regional managers may legitimately oversee several territories. Which ADDITIONAL action BEST meets the changed condition?
- Create a separate ungoverned copy of the report for each region
- Implement dynamic row-level security using an entitlement table and USERPRINCIPALNAME
- Two test accounts see only their permitted region sales
- Model many-to-many entitlement mappings with validated filter propagation
Explanation
Correct Answer
D:The changed requirement is 'Regional managers may legitimately oversee several territories'. The additional response is 'Model many-to-many entitlement mappings with validated filter propagation'.
Incorrect Answers
A:This remains unsuitable for the original situation: Report copies are not a scalable replacement for centralized row security. It also does not meet the changed need.
B:This is the already implemented original solution: Implement dynamic row-level security using an entitlement table and USERPRINCIPALNAME. Dynamic RLS applies row filters from user identity to a governed mapping table. It does not itself solve the new requirement.
C:This observes the original approach but is not an additional action: Two test accounts see only their permitted region sales.
Question 757
An administrator is testing an RLS role but sees all rows while holding workspace Admin permissions. Which approach BEST meets the stated Microsoft Power BI requirement?
- Assume the RLS expression is broken solely because an Admin sees all rows
- Test using that user's effective identity and membership
- Test the role using View As and a viewer-context account
- Assign Members or Admins to those responsible for app publication, and Contributors only where appropriate
Explanation
Correct Answer
C:Workspace edit roles can bypass RLS restrictions that apply to viewers. For the stated case, Test the role using View As and a viewer-context account.
Incorrect Answers
A:Admin privileges are not representative of constrained viewer access. The proposed shortcut 'Assume the RLS expression is broken solely because an Admin sees all rows' fails the documented need.
B:This might be appropriate after a different requirement arises: The administrator must verify a user's specific group assignments. It is not the best initial response to the stated case.
D:This addresses a separate source situation: A finance workspace uses Contributors to edit reports but should reserve app publication to fewer trusted staff. It does not directly satisfy this case's priority.
Question 758
An administrator is testing an RLS role but sees all rows while holding workspace Admin permissions. A colleague proposes: Assume the RLS expression is broken solely because an Admin sees all rows. Which explanation BEST identifies the defect in that proposal?
- Admin privileges are not representative of constrained viewer access
- Broad Admin access is unnecessary for ordinary report editing
- Workspace edit roles can bypass RLS restrictions that apply to viewers
- The suggested approach is safe merely because its product name is familiar.
Explanation
Correct Answer
A:Admin privileges are not representative of constrained viewer access. This directly explains why the proposal 'Assume the RLS expression is broken solely because an Admin sees all rows' should not be used.
Incorrect Answers
B:This addresses a different case: A finance workspace uses Contributors to edit reports but should reserve app publication to fewer trusted staff. It is not the specific defect in 'Assume the RLS expression is broken solely because an Admin sees all rows'.
C:This is reasoning supporting the preferred solution 'Test the role using View As and a viewer-context account', but it does not directly name the defect in the proposed shortcut.
D:Product familiarity is not evidence of suitability. The actual defect in this proposal is: Admin privileges are not representative of constrained viewer access.
Question 759
An administrator is testing an RLS role but sees all rows while holding workspace Admin permissions. After implementing Test the role using View As and a viewer-context account, which observation BEST demonstrates that the intended result is actually working?
- A viewer account is filtered while an Admin retains expected elevated access
- The team schedules a future check of whether A viewer account is filtered while an Admin retains expected elevated access, but has not observed a result.
- Role tests show editors can change reports but only approved staff manage the app
- The report owner approves Test the role using View As and a viewer-context account without testing the resulting behavior.
Explanation
Correct Answer
A:The observation 'A viewer account is filtered while an Admin retains expected elevated access' directly tests the intended result. Workspace edit roles can bypass RLS restrictions that apply to viewers.
Incorrect Answers
B:A future test is not yet observed operational evidence. The verification must establish: A viewer account is filtered while an Admin retains expected elevated access.
C:This belongs to a different case: A finance workspace uses Contributors to edit reports but should reserve app publication to fewer trusted staff. It does not validate the current change.
D:Approval of a proposed design is not evidence of working behavior. The required observation is: A viewer account is filtered while an Admin retains expected elevated access.
Question 760
The original scenario was: An administrator is testing an RLS role but sees all rows while holding workspace Admin permissions. The initial solution is already in place. Now this new requirement arises: The administrator must verify a user's specific group assignments. Which ADDITIONAL action BEST meets the changed condition?
- Test using that user's effective identity and membership
- A viewer account is filtered while an Admin retains expected elevated access
- Assume the RLS expression is broken solely because an Admin sees all rows
- Test the role using View As and a viewer-context account
Explanation
Correct Answer
A:The changed requirement is 'The administrator must verify a user's specific group assignments'. The additional response is 'Test using that user's effective identity and membership'.
Incorrect Answers
B:This observes the original approach but is not an additional action: A viewer account is filtered while an Admin retains expected elevated access.
C:This remains unsuitable for the original situation: Admin privileges are not representative of constrained viewer access. It also does not meet the changed need.
D:This is the already implemented original solution: Test the role using View As and a viewer-context account. Workspace edit roles can bypass RLS restrictions that apply to viewers. It does not itself solve the new requirement.