Question 350
An engineer needs to choose the most defensible Fabric solution for this condition: A model consumes high memory during refresh and the team assumes adding a second report page will solve it. What should the engineer do?
- Move stable descriptions to an appropriate dimension when relationships support it.
- Consider source-side materialization or reusable measures based on intended semantics.
- Profile model tables, cardinality and capacity usage before sizing or redesigning.
- Remove unneeded high-cardinality columns from the model.
Explanation
Correct Answer
C:Data model memory pressure cannot be fixed by a cosmetic change to report layout. The recommended action directly addresses the stated requirement.
Incorrect Answers
A:This action is appropriate when a fact table includes a verbose description repeated across millions of rows. Dimensional normalization can reduce repeated text and improve compression. However, the question instead requires Profile model tables, cardinality and capacity usage before sizing or redesigning. because data model memory pressure cannot be fixed by a cosmetic change to report layout.
B:This action is appropriate when a model creates hundreds of calculated columns for values that can be computed in source SQL. Model size and refresh work may fall when unnecessary calculated columns are removed. However, the question instead requires Profile model tables, cardinality and capacity usage before sizing or redesigning. because data model memory pressure cannot be fixed by a cosmetic change to report layout.
D:This action is appropriate when a semantic model stores transaction GUIDs in multiple high-cardinality string columns that reports never use. Wide high-cardinality data can consume memory without adding analytical value. However, the question instead requires Profile model tables, cardinality and capacity usage before sizing or redesigning. because data model memory pressure cannot be fixed by a cosmetic change to report layout.
Question 351
A Microsoft Fabric analytics team faces 2 concurrent, independent needs in the same workstream: (1) A finance viewer should browse approved reports but must not edit workspace items. (2) A model owner must manage workspace content and access settings on behalf of the analytics team. Which action bundle addresses ALL 2 needs without replacing a required control with a different one?
- (1) Remove or adjust the guest's workspace membership and recheck direct item grants. | (2) Assign a suitable workspace Admin or Member role after reviewing its management privileges.
- (1) Assign the Viewer workspace role and verify item-level data permissions. | (2) Assign a suitable workspace Admin or Member role after reviewing its management privileges.
- (1) Use the Contributor workspace role when its authoring capabilities match the duty. | (2) Assign a suitable workspace Admin or Member role after reviewing its management privileges.
- (1) Assign the Viewer workspace role and verify item-level data permissions. | (2) Check inherited access through the user's Fabric workspace role.
Explanation
Correct Answer
B:Requirement 1: Viewer is the least powerful standard workspace role, and viewing a report may still require data access. Requirement 2: Administrative operations require broader workspace capabilities than ordinary report consumption. Each action is needed for its corresponding requirement; the bundle covers all stated needs.
Incorrect Answers
A:Misses requirement 1: Viewer is the least powerful standard workspace role, and viewing a report may still require data access. The substituted action, Remove or adjust the guest's workspace membership and recheck direct item grants., is suited to a different situation: A guest loses an approved contract role, but previously authorized workspace access remains. It does not satisfy the specified requirement 1.
C:Misses requirement 1: Viewer is the least powerful standard workspace role, and viewing a report may still require data access. The substituted action, Use the Contributor workspace role when its authoring capabilities match the duty., is suited to a different situation: An engineer creates pipelines and notebooks but should not manage other users' workspace membership. It does not satisfy the specified requirement 1.
D:Misses requirement 2: Administrative operations require broader workspace capabilities than ordinary report consumption. The substituted action, Check inherited access through the user's Fabric workspace role., is suited to a different situation: An auditor wants to explain why an analyst can edit a model despite no direct item sharing invitation. It does not satisfy the specified requirement 2.
Question 352
A Microsoft Fabric analytics team faces 2 concurrent, independent needs in the same workstream: (1) A partner must view one approved report without editing unrelated workspace assets. (2) A report viewer can open the report but cannot create their own report from its underlying model. Which action bundle addresses ALL 2 needs without replacing a required control with a different one?
- (1) Review separate item permissions and applicable OneLake data permissions. | (2) Review whether the user needs the semantic model Build permission.
- (1) Grant scoped item sharing and necessary read or build permissions rather than broad workspace authoring. | (2) Revoke the overbroad share and grant access to an approved security group.
- (1) Inspect the item's permissions and the applicable data-level access rules. | (2) Review whether the user needs the semantic model Build permission.
- (1) Grant scoped item sharing and necessary read or build permissions rather than broad workspace authoring. | (2) Review whether the user needs the semantic model Build permission.
Explanation
Correct Answer
D:Requirement 1: Item sharing narrows exposure when a user only needs one published asset. Requirement 2: Viewing a report and authoring new content on the model are different permission paths. Each action is needed for its corresponding requirement; the bundle covers all stated needs.
Incorrect Answers
A:Misses requirement 1: Item sharing narrows exposure when a user only needs one published asset. The substituted action, Review separate item permissions and applicable OneLake data permissions., is suited to a different situation: An engineer gives a colleague read access to a lakehouse and assumes it also authorizes unrestricted table-file reads. It does not satisfy the specified requirement 1.
B:Misses requirement 2: Viewing a report and authoring new content on the model are different permission paths. The substituted action, Revoke the overbroad share and grant access to an approved security group., is suited to a different situation: A published model is shared to a broad organization-wide link despite containing restricted financial metrics. It does not satisfy the specified requirement 2.
C:Misses requirement 1: Item sharing narrows exposure when a user only needs one published asset. The substituted action, Inspect the item's permissions and the applicable data-level access rules., is suited to a different situation: An analyst has a workspace Viewer role but still cannot query a particular restricted dataset. It does not satisfy the specified requirement 1.
Question 353
A Microsoft Fabric analytics team faces 2 concurrent, independent needs in the same workstream: (1) Regional sales users should each see only sales records for their assigned territory in one semantic model. (2) A manager can access two territories and a hard-coded RLS role displays only one. Which action bundle addresses ALL 2 needs without replacing a required control with a different one?
- (1) Use the supported View as role or equivalent role-testing workflow. | (2) Model an approved user-to-territory security mapping for dynamic RLS.
- (1) Define a semantic-model row-level security role filtering sales by the authorized territory. | (2) Model an approved user-to-territory security mapping for dynamic RLS.
- (1) Test effective RLS as the actual consuming identity and inspect its model-role assignments. | (2) Model an approved user-to-territory security mapping for dynamic RLS.
- (1) Define a semantic-model row-level security role filtering sales by the authorized territory. | (2) Use appropriate workspace and model management permissions in addition to RLS.
Explanation
Correct Answer
B:Requirement 1: RLS limits the rows returned to a user without maintaining duplicated models per region. Requirement 2: Identity-driven mappings support more than one authorized region without rewriting static role expressions. Each action is needed for its corresponding requirement; the bundle covers all stated needs.
Incorrect Answers
A:Misses requirement 1: RLS limits the rows returned to a user without maintaining duplicated models per region. The substituted action, Use the supported View as role or equivalent role-testing workflow., is suited to a different situation: A reviewer needs to validate how a role filters rows without changing production user membership. It does not satisfy the specified requirement 1.
C:Misses requirement 1: RLS limits the rows returned to a user without maintaining duplicated models per region. The substituted action, Test effective RLS as the actual consuming identity and inspect its model-role assignments., is suited to a different situation: A report passes desktop testing but a non-admin user sees all rows after publication. It does not satisfy the specified requirement 1.
D:Misses requirement 2: Identity-driven mappings support more than one authorized region without rewriting static role expressions. The substituted action, Use appropriate workspace and model management permissions in addition to RLS., is suited to a different situation: A team thinks an RLS predicate will prevent a dataset administrator from changing model permissions. It does not satisfy the specified requirement 2.
Question 354
A Microsoft Fabric analytics team faces 2 concurrent, independent needs in the same workstream: (1) A compliance role may see a customer table but not the national-identifier column. (2) A partner should not discover a confidential compensation table through a semantic model at all. Which action bundle addresses ALL 2 needs without replacing a required control with a different one?
- (1) Define scoped OneLake security roles for the approved file paths. | (2) Configure object-level security on the restricted model table or supported data object.
- (1) Apply column-level data security or a restricted projection at the supported OneLake or model layer. | (2) Narrow the OneLake security role to the approved table objects.
- (1) Review cumulative effective role grants and any overly broad DefaultReader assignment. | (2) Configure object-level security on the restricted model table or supported data object.
- (1) Apply column-level data security or a restricted projection at the supported OneLake or model layer. | (2) Configure object-level security on the restricted model table or supported data object.
Explanation
Correct Answer
D:Requirement 1: CLS prevents sensitive columns from being exposed through an otherwise authorized table. Requirement 2: OLS hides a table or column rather than merely filtering its rows. Each action is needed for its corresponding requirement; the bundle covers all stated needs.
Incorrect Answers
A:Misses requirement 1: CLS prevents sensitive columns from being exposed through an otherwise authorized table. The substituted action, Define scoped OneLake security roles for the approved file paths., is suited to a different situation: Two research groups may read separate folders in one shared lakehouse Files area. It does not satisfy the specified requirement 1.
B:Misses requirement 2: OLS hides a table or column rather than merely filtering its rows. The substituted action, Narrow the OneLake security role to the approved table objects., is suited to a different situation: A read-only data role accidentally includes both public and restricted Delta tables. It does not satisfy the specified requirement 2.
C:Misses requirement 1: CLS prevents sensitive columns from being exposed through an otherwise authorized table. The substituted action, Review cumulative effective role grants and any overly broad DefaultReader assignment., is suited to a different situation: A user belongs to several OneLake roles and gains more data visibility than the author expected. It does not satisfy the specified requirement 1.
Question 355
A Microsoft Fabric analytics team faces 2 concurrent, independent needs in the same workstream: (1) A published profit report contains confidential customer details and needs a visible protection classification. (2) An analyst assumes changing a sensitivity label automatically grants a colleague permission to open an item. Which action bundle addresses ALL 2 needs without replacing a required control with a different one?
- (1) Reassess the data classification and update the affected item's label through governance review. | (2) Set item access permissions separately from the sensitivity classification.
- (1) Apply the approved sensitivity label to the Fabric item. | (2) Set item access permissions separately from the sensitivity classification.
- (1) Review the label's supported downstream protection and export behavior. | (2) Set item access permissions separately from the sensitivity classification.
- (1) Apply the approved sensitivity label to the Fabric item. | (2) Check organization label policies and whether the Fabric labeling feature is enabled for the intended users.
Explanation
Correct Answer
B:Requirement 1: Labels communicate and can help enforce organizational information protection policies. Requirement 2: Labels and ACLs are different controls: classification does not create read access. Each action is needed for its corresponding requirement; the bundle covers all stated needs.
Incorrect Answers
A:Misses requirement 1: Labels communicate and can help enforce organizational information protection policies. The substituted action, Reassess the data classification and update the affected item's label through governance review., is suited to a different situation: An incident reveals that one workspace's classification label is outdated after its business data became regulated. It does not satisfy the specified requirement 1.
C:Misses requirement 1: Labels communicate and can help enforce organizational information protection policies. The substituted action, Review the label's supported downstream protection and export behavior., is suited to a different situation: A report export must retain appropriate information protection when moved into a supported Office format. It does not satisfy the specified requirement 1.
D:Misses requirement 2: Labels and ACLs are different controls: classification does not create read access. The substituted action, Check organization label policies and whether the Fabric labeling feature is enabled for the intended users., is suited to a different situation: A tenant has labels defined but workspace authors cannot select them on Fabric items. It does not satisfy the specified requirement 2.
Question 356
A Microsoft Fabric analytics team faces 2 concurrent, independent needs in the same workstream: (1) Several reports appear in the catalog and consumers need to identify their team's recommended version. (2) A company requires formally validated shared semantic models to be distinguishable from merely popular drafts. Which action bundle addresses ALL 2 needs without replacing a required control with a different one?
- (1) Validate freshness and correctness independently of item endorsement. | (2) Apply certified endorsement only through the organization's authorized certification process.
- (1) Promote the trusted Fabric item through the supported endorsement action. | (2) Route certification through the designated Fabric certification administrators or approved process.
- (1) Check share permissions and underlying dataset security in addition to endorsement. | (2) Apply certified endorsement only through the organization's authorized certification process.
- (1) Promote the trusted Fabric item through the supported endorsement action. | (2) Apply certified endorsement only through the organization's authorized certification process.
Explanation
Correct Answer
D:Requirement 1: Promotion signals an owner's recommendation but does not itself grant data access. Requirement 2: Certification is a governed trust mark beyond informal promotion. Each action is needed for its corresponding requirement; the bundle covers all stated needs.
Incorrect Answers
A:Misses requirement 1: Promotion signals an owner's recommendation but does not itself grant data access. The substituted action, Validate freshness and correctness independently of item endorsement., is suited to a different situation: A recently promoted dataset has stale calculations and analysts assume the badge guarantees accuracy. It does not satisfy the specified requirement 1.
B:Misses requirement 2: Certification is a governed trust mark beyond informal promotion. The substituted action, Route certification through the designated Fabric certification administrators or approved process., is suited to a different situation: A report owner cannot certify a shared dataset because they lack the required organizational authority. It does not satisfy the specified requirement 2.
C:Misses requirement 1: Promotion signals an owner's recommendation but does not itself grant data access. The substituted action, Check share permissions and underlying dataset security in addition to endorsement., is suited to a different situation: A project shares an endorsed data product but consumers still receive an access denied message. It does not satisfy the specified requirement 1.
Question 357
A Microsoft Fabric analytics team faces 2 concurrent, independent needs in the same workstream: (1) A user can manage a lakehouse item but is surprised by a restricted table governed through OneLake security. (2) A data analyst requires read-only access to one governed OneLake table through several Fabric engines. Which action bundle addresses ALL 2 needs without replacing a required control with a different one?
- (1) Review effective broad ReadAll grants before relying on restrictive OneLake roles. | (2) Grant scoped OneLake security data access for the table when supported.
- (1) Evaluate item administration and OneLake data role evaluation separately. | (2) Grant scoped OneLake security data access for the table when supported.
- (1) Define supported row restrictions at the data plane or semantic model. | (2) Grant scoped OneLake security data access for the table when supported.
- (1) Evaluate item administration and OneLake data role evaluation separately. | (2) Review the SQL endpoint access mode and its governing security policy before changing it.
Explanation
Correct Answer
B:Requirement 1: Control-plane management and table-row data visibility are distinct permission scopes. Requirement 2: Data-plane policies can apply consistently across eligible engines without broad workspace edit rights. Each action is needed for its corresponding requirement; the bundle covers all stated needs.
Incorrect Answers
A:Misses requirement 1: Control-plane management and table-row data visibility are distinct permission scopes. The substituted action, Review effective broad ReadAll grants before relying on restrictive OneLake roles., is suited to a different situation: A data owner grants ReadAll on a restricted lakehouse and assumes a later fine-grained role automatically reduces it. It does not satisfy the specified requirement 1.
C:Misses requirement 1: Control-plane management and table-row data visibility are distinct permission scopes. The substituted action, Define supported row restrictions at the data plane or semantic model., is suited to a different situation: A workspace role gives an engineer item creation rights, but an owner wants to restrict customer rows in all queries. It does not satisfy the specified requirement 1.
D:Misses requirement 2: Data-plane policies can apply consistently across eligible engines without broad workspace edit rights. The substituted action, Review the SQL endpoint access mode and its governing security policy before changing it., is suited to a different situation: A lakehouse SQL endpoint shows different security behavior when switching from delegated to user identity. It does not satisfy the specified requirement 2.
Question 358
A Microsoft Fabric analytics team faces 2 concurrent, independent needs in the same workstream: (1) A temporary external consultant needs a single published dashboard for a two-week engagement. (2) An outside collaborator receives a report link but lacks permission to the shared semantic model behind it. Which action bundle addresses ALL 2 needs without replacing a required control with a different one?
- (1) Replace organization-wide sharing with a governed access group and owner approval. | (2) Validate the report and semantic model permission chain for the external principal.
- (1) Create an explicitly time-bound, narrowly scoped external access grant. | (2) Grant read or Build access as needed while withholding edit or workspace-author rights.
- (1) Audit nonhuman and user principals separately and revoke the no-longer-approved data grants. | (2) Validate the report and semantic model permission chain for the external principal.
- (1) Create an explicitly time-bound, narrowly scoped external access grant. | (2) Validate the report and semantic model permission chain for the external principal.
Explanation
Correct Answer
D:Requirement 1: Limited duration and scope reduce exposure beyond the approved engagement. Requirement 2: Successful report access depends on all underlying content permissions. Each action is needed for its corresponding requirement; the bundle covers all stated needs.
Incorrect Answers
A:Misses requirement 1: Limited duration and scope reduce exposure beyond the approved engagement. The substituted action, Replace organization-wide sharing with a governed access group and owner approval., is suited to a different situation: A user shares a dataset to the entire company to avoid handling access requests. It does not satisfy the specified requirement 1.
B:Misses requirement 2: Successful report access depends on all underlying content permissions. The substituted action, Grant read or Build access as needed while withholding edit or workspace-author rights., is suited to a different situation: An external analyst requests permission to update Power BI semantic measures despite only needing read access. It does not satisfy the specified requirement 2.
C:Misses requirement 1: Limited duration and scope reduce exposure beyond the approved engagement. The substituted action, Audit nonhuman and user principals separately and revoke the no-longer-approved data grants., is suited to a different situation: A partner's guest account is disabled but an active service principal continues to consume shared data. It does not satisfy the specified requirement 1.
Question 359
A Microsoft Fabric analytics team faces 2 concurrent, independent needs in the same workstream: (1) A regulated team must demonstrate who changed a semantic model and when. (2) A compliance analyst wants to discover all items with a restricted sensitivity classification. Which action bundle addresses ALL 2 needs without replacing a required control with a different one?
- (1) Configure applicable governance controls and review compliance rather than relying on naming. | (2) Query the supported inventory or governance catalog filtered by item label.
- (1) Inspect supported Fabric or Microsoft 365 audit events and version history. | (2) Query the supported inventory or governance catalog filtered by item label.
- (1) Export and review effective role membership and data permission assignments. | (2) Query the supported inventory or governance catalog filtered by item label.
- (1) Inspect supported Fabric or Microsoft 365 audit events and version history. | (2) Review sharing changes and relevant audit logs, then document the authorized audience.
Explanation
Correct Answer
B:Requirement 1: Traceable activity records help establish change accountability. Requirement 2: Central inventory allows classification review across workspaces. Each action is needed for its corresponding requirement; the bundle covers all stated needs.
Incorrect Answers
A:Misses requirement 1: Traceable activity records help establish change accountability. The substituted action, Configure applicable governance controls and review compliance rather than relying on naming., is suited to a different situation: A policy team needs to prevent new confidential datasets from being published without classification. It does not satisfy the specified requirement 1.
C:Misses requirement 1: Traceable activity records help establish change accountability. The substituted action, Export and review effective role membership and data permission assignments., is suited to a different situation: A storage owner wants evidence of which security roles currently grant access to a sensitive table. It does not satisfy the specified requirement 1.
D:Misses requirement 2: Central inventory allows classification review across workspaces. The substituted action, Review sharing changes and relevant audit logs, then document the authorized audience., is suited to a different situation: A production report is shared using an unreviewed link and the team needs an access history. It does not satisfy the specified requirement 2.
Question 360
A Microsoft Fabric analytics team faces 2 concurrent, independent needs in the same workstream: (1) A user can query a warehouse via SQL but receives an error opening its semantic model. (2) A model author sees full data while a Viewer only sees an authorized subset. Which action bundle addresses ALL 2 needs without replacing a required control with a different one?
- (1) Verify the effective connection identity and model security before assuming delegated per-user filtering. | (2) Verify the consuming identity's RLS and OneLake security roles.
- (1) Check the semantic model's own access permissions and required credentials. | (2) Inspect the data source access model and the required model connection identity.
- (1) Test the intersection of effective model restrictions and OneLake security for each principal. | (2) Verify the consuming identity's RLS and OneLake security roles.
- (1) Check the semantic model's own access permissions and required credentials. | (2) Verify the consuming identity's RLS and OneLake security roles.
Explanation
Correct Answer
D:Requirement 1: Source SQL permissions do not automatically establish access to a separate semantic model item. Requirement 2: Effective row visibility can differ by principal even on a shared model. Each action is needed for its corresponding requirement; the bundle covers all stated needs.
Incorrect Answers
A:Misses requirement 1: Source SQL permissions do not automatically establish access to a separate semantic model item. The substituted action, Verify the effective connection identity and model security before assuming delegated per-user filtering., is suited to a different situation: A semantic model uses a fixed cloud connection identity and an architect assumes every reader's SQL RLS is applied automatically. It does not satisfy the specified requirement 1.
B:Misses requirement 2: Effective row visibility can differ by principal even on a shared model. The substituted action, Inspect the data source access model and the required model connection identity., is suited to a different situation: A report consumer has Build permission but cannot connect to a protected source lakehouse. It does not satisfy the specified requirement 2.
C:Misses requirement 1: Source SQL permissions do not automatically establish access to a separate semantic model item. The substituted action, Test the intersection of effective model restrictions and OneLake security for each principal., is suited to a different situation: A team combines OneLake table access rules and semantic RLS and sees unexpected effective filters. It does not satisfy the specified requirement 1.
Implementing Analytics Solutions Using Microsoft Fabric (DP-600) Practice Tests