Power BI 778 Security and Administration 2 — Questions and Answers
Question 1: Which Power BI feature provides audit logs for tracking user activity such as report views and exports?
- Activity log in Admin Portal
- Power BI Audit Log via Microsoft 365 compliance center (Correct answer)
- Dataset refresh history
- Gateway logs
Correct answer: Power BI Audit Log via Microsoft 365 compliance center
Power BI activity events are logged to the Microsoft 365 compliance center, where admins can audit actions like report views, exports, and sharing.
Question 2: What is a service principal in the context of Power BI API access?
- A named database user for Power BI datasets
- An Azure AD application identity used to authenticate API calls to Power BI without user credentials (Correct answer)
- A special Power BI admin account for service operations
- A gateway account used for on-premises connections
Correct answer: An Azure AD application identity used to authenticate API calls to Power BI without user credentials
A service principal is an Azure AD app registration used to authenticate automated processes and applications to the Power BI REST API.
Question 3: What is the purpose of the 'Viewer' role in a Power BI workspace?
- Can create and publish reports in the workspace
- Can view and interact with reports and dashboards but cannot edit or publish (Correct answer)
- Can manage workspace settings and member access
- Can export data from all datasets in the workspace
Correct answer: Can view and interact with reports and dashboards but cannot edit or publish
Viewers can consume (read and interact with) reports and dashboards but have no editing, publishing, or administrative capabilities.
Question 4: What does 'object-level security' (OLS) in Power BI allow administrators to do?
- Hide entire report pages from specific users
- Restrict access to specific tables or columns in a dataset based on user roles (Correct answer)
- Lock visuals from being edited by report editors
- Prevent specific measures from being used in reports
Correct answer: Restrict access to specific tables or columns in a dataset based on user roles
OLS allows dataset owners to restrict access to specific tables or columns so unauthorized users cannot see or query that data.
Question 5: What Power BI feature allows you to test which data a specific user or role would see under RLS?
- Role simulator in Power BI Service
- 'View as role' in Power BI Desktop or Service (Correct answer)
- DAX security debugger
- Gateway role tester
Correct answer: 'View as role' in Power BI Desktop or Service
'View as role' lets you preview the report as if you were a member of a specific RLS role, verifying that filters are applied correctly.
Question 6: What is the difference between Power BI Pro and Power BI Premium Per User (PPU)?
- Pro is for desktop use; PPU is for cloud use only
- PPU includes all Pro features plus advanced capabilities like paginated reports and AI features at the user level (Correct answer)
- Pro supports more data sources than PPU
- PPU is a group license while Pro is individual
Correct answer: PPU includes all Pro features plus advanced capabilities like paginated reports and AI features at the user level
Premium Per User includes all Power BI Pro capabilities plus premium features like paginated reports, AI visuals, and larger dataset sizes at a per-user cost.
Power BI 778 Security and Administration 2
Which Power BI feature provides audit logs for tracking user activity such as report views and exports?