Microsoft Power BI Power BI Administration and Security 2 — Questions and Answers
Question 1: What is 'Dynamic Row-Level Security' in Power BI?
- RLS that changes based on the time of day
- RLS where the filter is based on the logged-in user's identity, typically using the USERNAME() or USERPRINCIPALNAME() DAX function (Correct answer)
- RLS applied automatically without DAX configuration
- RLS that adapts to user slicer selections
Correct answer: RLS where the filter is based on the logged-in user's identity, typically using the USERNAME() or USERPRINCIPALNAME() DAX function
Dynamic RLS uses the current user's login (via USERNAME() or USERPRINCIPALNAME()) and a security table to automatically filter data to only what that user is authorized to see.
Question 2: What is the purpose of the 'Endorsement' feature in Power BI Service?
- Approving user access requests to workspaces
- Marking datasets, dataflows, or reports as 'Promoted' or 'Certified' to signal quality and trustworthiness to other users (Correct answer)
- Endorsing payment for Power BI Premium licenses
- Adding digital signatures to published reports
Correct answer: Marking datasets, dataflows, or reports as 'Promoted' or 'Certified' to signal quality and trustworthiness to other users
Endorsement allows dataset owners to promote content as 'Promoted' (self-service) or certify it as 'Certified' (admin-approved) to help users discover trusted, high-quality data assets.
Question 3: What does the 'Private Links' feature in Power BI Premium provide?
- Password-protected report sharing links
- A private network connection between Power BI Service and your Azure resources, bypassing the public internet (Correct answer)
- Links that expire after a set time period
- Encrypted export download links
Correct answer: A private network connection between Power BI Service and your Azure resources, bypassing the public internet
Private Links use Azure Private Link to route all Power BI traffic through private network endpoints, ensuring data never traverses the public internet.
Question 4: What is the 'Microsoft Purview Integration' with Power BI used for?
- Purging unused datasets from Power BI
- Cataloging Power BI datasets and lineage in Microsoft Purview for enterprise data governance and discoverability (Correct answer)
- Purifying data during ETL processes
- Managing Power BI license purview across the tenant
Correct answer: Cataloging Power BI datasets and lineage in Microsoft Purview for enterprise data governance and discoverability
Microsoft Purview integration scans Power BI and registers datasets, reports, and data lineage in the Purview Data Catalog, enabling organization-wide data governance.
Question 5: What is the purpose of the 'Audit Log' retention period setting for Power BI?
- How long deleted workspaces are retained before permanent deletion
- How long Power BI user activity events are retained in the Microsoft 365 audit log (up to 90 days for standard, 1 year for E5) (Correct answer)
- The refresh history retention period for datasets
- How long exported report files are kept in SharePoint
Correct answer: How long Power BI user activity events are retained in the Microsoft 365 audit log (up to 90 days for standard, 1 year for E5)
Power BI activity events stored in the Microsoft 365 Unified Audit Log are retained for 90 days by default (or up to 1 year with E5 licensing or add-ons).
Question 6: What does the 'Block Public Internet Access' setting in Power BI Premium do?
- Prevents users from browsing the internet from Power BI
- Disables all public internet endpoints for the Premium capacity, allowing only private link access (Correct answer)
- Blocks public Power BI embed codes
- Prevents data sources from reaching the internet
Correct answer: Disables all public internet endpoints for the Premium capacity, allowing only private link access
Enabling 'Block Public Internet Access' disables the public-facing HTTPS endpoints for a Premium capacity, requiring all connections to go through Azure Private Link.
What is 'Dynamic Row-Level Security' in Power BI?