Question 490
A Microsoft Fabric analytics team faces 2 concurrent, independent needs in the same workstream: (1) A fact table includes a verbose description repeated across millions of rows. (2) A model creates hundreds of calculated columns for values that can be computed in source SQL. Which action bundle addresses ALL 2 needs without replacing a required control with a different one?
- (1) Move stable descriptions to an appropriate dimension when relationships support it. | (2) Consider source-side materialization or reusable measures based on intended semantics.
- (1) Remove unneeded high-cardinality columns from the model. | (2) Consider source-side materialization or reusable measures based on intended semantics.
- (1) Move stable descriptions to an appropriate dimension when relationships support it. | (2) Simplify to a clear star schema with controlled filter directions.
- (1) Profile model tables, cardinality and capacity usage before sizing or redesigning. | (2) Consider source-side materialization or reusable measures based on intended semantics.
Explanation
Correct Answer
A:Requirement 1: Dimensional normalization can reduce repeated text and improve compression. Requirement 2: Model size and refresh work may fall when unnecessary calculated columns are removed. Each action is needed for its corresponding requirement; the bundle covers all stated needs.
Incorrect Answers
B:Misses requirement 1: Dimensional normalization can reduce repeated text and improve compression. The substituted action, Remove unneeded high-cardinality columns from the model., is suited to a different situation: A semantic model stores transaction GUIDs in multiple high-cardinality string columns that reports never use. It does not satisfy the specified requirement 1.
C:Misses requirement 2: Model size and refresh work may fall when unnecessary calculated columns are removed. The substituted action, Simplify to a clear star schema with controlled filter directions., is suited to a different situation: A model uses bidirectional filters on every relationship and reports contain ambiguous results. It does not satisfy the specified requirement 2.
D:Misses requirement 1: Dimensional normalization can reduce repeated text and improve compression. The substituted action, Profile model tables, cardinality and capacity usage before sizing or redesigning., is suited to a different situation: A model consumes high memory during refresh and the team assumes adding a second report page will solve it. It does not satisfy the specified requirement 1.
Question 491
A Microsoft Fabric analytics team faces 2 concurrent, independent needs in the same workstream: (1) An engineer creates pipelines and notebooks but should not manage other users' workspace membership. (2) An auditor wants to explain why an analyst can edit a model despite no direct item sharing invitation. Which action bundle addresses ALL 2 needs without replacing a required control with a different one?
- (1) Assign the Viewer workspace role and verify item-level data permissions. | (2) Check inherited access through the user's Fabric workspace role.
- (1) Use the Contributor workspace role when its authoring capabilities match the duty. | (2) Assign a suitable workspace Admin or Member role after reviewing its management privileges.
- (1) Remove or adjust the guest's workspace membership and recheck direct item grants. | (2) Check inherited access through the user's Fabric workspace role.
- (1) Use the Contributor workspace role when its authoring capabilities match the duty. | (2) Check inherited access through the user's Fabric workspace role.
Explanation
Correct Answer
D:Requirement 1: Contributor permits eligible item authoring without the full access administration powers of higher roles. Requirement 2: Workspace-level permissions can confer capabilities across multiple items independent of direct shares. Each action is needed for its corresponding requirement; the bundle covers all stated needs.
Incorrect Answers
A:Misses requirement 1: Contributor permits eligible item authoring without the full access administration powers of higher roles. The substituted action, Assign the Viewer workspace role and verify item-level data permissions., is suited to a different situation: A finance viewer should browse approved reports but must not edit workspace items. It does not satisfy the specified requirement 1.
B:Misses requirement 2: Workspace-level permissions can confer capabilities across multiple items independent of direct shares. The substituted action, Assign a suitable workspace Admin or Member role after reviewing its management privileges., is suited to a different situation: A model owner must manage workspace content and access settings on behalf of the analytics team. It does not satisfy the specified requirement 2.
C:Misses requirement 1: Contributor permits eligible item authoring without the full access administration powers of higher roles. The substituted action, Remove or adjust the guest's workspace membership and recheck direct item grants., is suited to a different situation: A guest loses an approved contract role, but previously authorized workspace access remains. It does not satisfy the specified requirement 1.
Question 492
A Microsoft Fabric analytics team faces 2 concurrent, independent needs in the same workstream: (1) An engineer gives a colleague read access to a lakehouse and assumes it also authorizes unrestricted table-file reads. (2) A published model is shared to a broad organization-wide link despite containing restricted financial metrics. Which action bundle addresses ALL 2 needs without replacing a required control with a different one?
- (1) Inspect the item's permissions and the applicable data-level access rules. | (2) Revoke the overbroad share and grant access to an approved security group.
- (1) Review separate item permissions and applicable OneLake data permissions. | (2) Revoke the overbroad share and grant access to an approved security group.
- (1) Grant scoped item sharing and necessary read or build permissions rather than broad workspace authoring. | (2) Revoke the overbroad share and grant access to an approved security group.
- (1) Review separate item permissions and applicable OneLake data permissions. | (2) Review whether the user needs the semantic model Build permission.
Explanation
Correct Answer
B:Requirement 1: Control-plane access and underlying data-plane authorization must both be evaluated. Requirement 2: A scoped audience better enforces intended information exposure than an unrestricted sharing link. Each action is needed for its corresponding requirement; the bundle covers all stated needs.
Incorrect Answers
A:Misses requirement 1: Control-plane access and underlying data-plane authorization must both be evaluated. The substituted action, Inspect the item's permissions and the applicable data-level access rules., is suited to a different situation: An analyst has a workspace Viewer role but still cannot query a particular restricted dataset. It does not satisfy the specified requirement 1.
C:Misses requirement 1: Control-plane access and underlying data-plane authorization must both be evaluated. The substituted action, Grant scoped item sharing and necessary read or build permissions rather than broad workspace authoring., is suited to a different situation: A partner must view one approved report without editing unrelated workspace assets. It does not satisfy the specified requirement 1.
D:Misses requirement 2: A scoped audience better enforces intended information exposure than an unrestricted sharing link. The substituted action, Review whether the user needs the semantic model Build permission., is suited to a different situation: A report viewer can open the report but cannot create their own report from its underlying model. It does not satisfy the specified requirement 2.
Question 493
A Microsoft Fabric analytics team faces 2 concurrent, independent needs in the same workstream: (1) A report passes desktop testing but a non-admin user sees all rows after publication. (2) A team thinks an RLS predicate will prevent a dataset administrator from changing model permissions. Which action bundle addresses ALL 2 needs without replacing a required control with a different one?
- (1) Define a semantic-model row-level security role filtering sales by the authorized territory. | (2) Use appropriate workspace and model management permissions in addition to RLS.
- (1) Test effective RLS as the actual consuming identity and inspect its model-role assignments. | (2) Model an approved user-to-territory security mapping for dynamic RLS.
- (1) Use the supported View as role or equivalent role-testing workflow. | (2) Use appropriate workspace and model management permissions in addition to RLS.
- (1) Test effective RLS as the actual consuming identity and inspect its model-role assignments. | (2) Use appropriate workspace and model management permissions in addition to RLS.
Explanation
Correct Answer
D:Requirement 1: Testing as a privileged author can mask the restrictions applied to ordinary viewers. Requirement 2: Row filters restrict query results, not who can administer the data model. Each action is needed for its corresponding requirement; the bundle covers all stated needs.
Incorrect Answers
A:Misses requirement 1: Testing as a privileged author can mask the restrictions applied to ordinary viewers. The substituted action, Define a semantic-model row-level security role filtering sales by the authorized territory., is suited to a different situation: Regional sales users should each see only sales records for their assigned territory in one semantic model. It does not satisfy the specified requirement 1.
B:Misses requirement 2: Row filters restrict query results, not who can administer the data model. The substituted action, Model an approved user-to-territory security mapping for dynamic RLS., is suited to a different situation: A manager can access two territories and a hard-coded RLS role displays only one. It does not satisfy the specified requirement 2.
C:Misses requirement 1: Testing as a privileged author can mask the restrictions applied to ordinary viewers. The substituted action, Use the supported View as role or equivalent role-testing workflow., is suited to a different situation: A reviewer needs to validate how a role filters rows without changing production user membership. It does not satisfy the specified requirement 1.
Question 494
A Microsoft Fabric analytics team faces 2 concurrent, independent needs in the same workstream: (1) Two research groups may read separate folders in one shared lakehouse Files area. (2) A read-only data role accidentally includes both public and restricted Delta tables. Which action bundle addresses ALL 2 needs without replacing a required control with a different one?
- (1) Review cumulative effective role grants and any overly broad DefaultReader assignment. | (2) Narrow the OneLake security role to the approved table objects.
- (1) Define scoped OneLake security roles for the approved file paths. | (2) Narrow the OneLake security role to the approved table objects.
- (1) Apply column-level data security or a restricted projection at the supported OneLake or model layer. | (2) Narrow the OneLake security role to the approved table objects.
- (1) Define scoped OneLake security roles for the approved file paths. | (2) Configure object-level security on the restricted model table or supported data object.
Explanation
Correct Answer
B:Requirement 1: File and folder authorization must be set at the data plane, not inferred from folder naming. Requirement 2: Object selection in a role prevents a coarse data grant from exposing unrelated datasets. Each action is needed for its corresponding requirement; the bundle covers all stated needs.
Incorrect Answers
A:Misses requirement 1: File and folder authorization must be set at the data plane, not inferred from folder naming. The substituted action, Review cumulative effective role grants and any overly broad DefaultReader assignment., is suited to a different situation: A user belongs to several OneLake roles and gains more data visibility than the author expected. It does not satisfy the specified requirement 1.
C:Misses requirement 1: File and folder authorization must be set at the data plane, not inferred from folder naming. The substituted action, Apply column-level data security or a restricted projection at the supported OneLake or model layer., is suited to a different situation: A compliance role may see a customer table but not the national-identifier column. It does not satisfy the specified requirement 1.
D:Misses requirement 2: Object selection in a role prevents a coarse data grant from exposing unrelated datasets. The substituted action, Configure object-level security on the restricted model table or supported data object., is suited to a different situation: A partner should not discover a confidential compensation table through a semantic model at all. It does not satisfy the specified requirement 2.
Question 495
A Microsoft Fabric analytics team faces 2 concurrent, independent needs in the same workstream: (1) A report export must retain appropriate information protection when moved into a supported Office format. (2) A tenant has labels defined but workspace authors cannot select them on Fabric items. Which action bundle addresses ALL 2 needs without replacing a required control with a different one?
- (1) Apply the approved sensitivity label to the Fabric item. | (2) Check organization label policies and whether the Fabric labeling feature is enabled for the intended users.
- (1) Review the label's supported downstream protection and export behavior. | (2) Set item access permissions separately from the sensitivity classification.
- (1) Reassess the data classification and update the affected item's label through governance review. | (2) Check organization label policies and whether the Fabric labeling feature is enabled for the intended users.
- (1) Review the label's supported downstream protection and export behavior. | (2) Check organization label policies and whether the Fabric labeling feature is enabled for the intended users.
Explanation
Correct Answer
D:Requirement 1: Sensitivity label effects vary by artifact and export path and should be tested. Requirement 2: Published label definitions are not automatically available to every user and workload. Each action is needed for its corresponding requirement; the bundle covers all stated needs.
Incorrect Answers
A:Misses requirement 1: Sensitivity label effects vary by artifact and export path and should be tested. The substituted action, Apply the approved sensitivity label to the Fabric item., is suited to a different situation: A published profit report contains confidential customer details and needs a visible protection classification. It does not satisfy the specified requirement 1.
B:Misses requirement 2: Published label definitions are not automatically available to every user and workload. The substituted action, Set item access permissions separately from the sensitivity classification., is suited to a different situation: An analyst assumes changing a sensitivity label automatically grants a colleague permission to open an item. It does not satisfy the specified requirement 2.
C:Misses requirement 1: Sensitivity label effects vary by artifact and export path and should be tested. The substituted action, Reassess the data classification and update the affected item's label through governance review., is suited to a different situation: An incident reveals that one workspace's classification label is outdated after its business data became regulated. It does not satisfy the specified requirement 1.
Question 496
A Microsoft Fabric analytics team faces 2 concurrent, independent needs in the same workstream: (1) A recently promoted dataset has stale calculations and analysts assume the badge guarantees accuracy. (2) A report owner cannot certify a shared dataset because they lack the required organizational authority. Which action bundle addresses ALL 2 needs without replacing a required control with a different one?
- (1) Check share permissions and underlying dataset security in addition to endorsement. | (2) Route certification through the designated Fabric certification administrators or approved process.
- (1) Validate freshness and correctness independently of item endorsement. | (2) Route certification through the designated Fabric certification administrators or approved process.
- (1) Promote the trusted Fabric item through the supported endorsement action. | (2) Route certification through the designated Fabric certification administrators or approved process.
- (1) Validate freshness and correctness independently of item endorsement. | (2) Apply certified endorsement only through the organization's authorized certification process.
Explanation
Correct Answer
B:Requirement 1: Endorsement indicates recommended status, not automatic numerical correctness. Requirement 2: The certification privilege can be governed separately from item creation. Each action is needed for its corresponding requirement; the bundle covers all stated needs.
Incorrect Answers
A:Misses requirement 1: Endorsement indicates recommended status, not automatic numerical correctness. The substituted action, Check share permissions and underlying dataset security in addition to endorsement., is suited to a different situation: A project shares an endorsed data product but consumers still receive an access denied message. It does not satisfy the specified requirement 1.
C:Misses requirement 1: Endorsement indicates recommended status, not automatic numerical correctness. The substituted action, Promote the trusted Fabric item through the supported endorsement action., is suited to a different situation: Several reports appear in the catalog and consumers need to identify their team's recommended version. It does not satisfy the specified requirement 1.
D:Misses requirement 2: The certification privilege can be governed separately from item creation. The substituted action, Apply certified endorsement only through the organization's authorized certification process., is suited to a different situation: A company requires formally validated shared semantic models to be distinguishable from merely popular drafts. It does not satisfy the specified requirement 2.
Question 497
A Microsoft Fabric analytics team faces 2 concurrent, independent needs in the same workstream: (1) A workspace role gives an engineer item creation rights, but an owner wants to restrict customer rows in all queries. (2) A lakehouse SQL endpoint shows different security behavior when switching from delegated to user identity. Which action bundle addresses ALL 2 needs without replacing a required control with a different one?
- (1) Evaluate item administration and OneLake data role evaluation separately. | (2) Review the SQL endpoint access mode and its governing security policy before changing it.
- (1) Define supported row restrictions at the data plane or semantic model. | (2) Grant scoped OneLake security data access for the table when supported.
- (1) Review effective broad ReadAll grants before relying on restrictive OneLake roles. | (2) Review the SQL endpoint access mode and its governing security policy before changing it.
- (1) Define supported row restrictions at the data plane or semantic model. | (2) Review the SQL endpoint access mode and its governing security policy before changing it.
Explanation
Correct Answer
D:Requirement 1: Workspace creation rights are not a substitute for row-level data filtering. Requirement 2: User identity and delegated identity evaluate permissions through different paths. Each action is needed for its corresponding requirement; the bundle covers all stated needs.
Incorrect Answers
A:Misses requirement 1: Workspace creation rights are not a substitute for row-level data filtering. The substituted action, Evaluate item administration and OneLake data role evaluation separately., is suited to a different situation: A user can manage a lakehouse item but is surprised by a restricted table governed through OneLake security. It does not satisfy the specified requirement 1.
B:Misses requirement 2: User identity and delegated identity evaluate permissions through different paths. The substituted action, Grant scoped OneLake security data access for the table when supported., is suited to a different situation: A data analyst requires read-only access to one governed OneLake table through several Fabric engines. It does not satisfy the specified requirement 2.
C:Misses requirement 1: Workspace creation rights are not a substitute for row-level data filtering. The substituted action, Review effective broad ReadAll grants before relying on restrictive OneLake roles., is suited to a different situation: A data owner grants ReadAll on a restricted lakehouse and assumes a later fine-grained role automatically reduces it. It does not satisfy the specified requirement 1.
Question 498
A Microsoft Fabric analytics team faces 2 concurrent, independent needs in the same workstream: (1) A user shares a dataset to the entire company to avoid handling access requests. (2) An external analyst requests permission to update Power BI semantic measures despite only needing read access. Which action bundle addresses ALL 2 needs without replacing a required control with a different one?
- (1) Audit nonhuman and user principals separately and revoke the no-longer-approved data grants. | (2) Grant read or Build access as needed while withholding edit or workspace-author rights.
- (1) Replace organization-wide sharing with a governed access group and owner approval. | (2) Grant read or Build access as needed while withholding edit or workspace-author rights.
- (1) Create an explicitly time-bound, narrowly scoped external access grant. | (2) Grant read or Build access as needed while withholding edit or workspace-author rights.
- (1) Replace organization-wide sharing with a governed access group and owner approval. | (2) Validate the report and semantic model permission chain for the external principal.
Explanation
Correct Answer
B:Requirement 1: Broad sharing expands the audience beyond the stated business requirement. Requirement 2: The principle of least privilege separates querying a model from changing its definitions. Each action is needed for its corresponding requirement; the bundle covers all stated needs.
Incorrect Answers
A:Misses requirement 1: Broad sharing expands the audience beyond the stated business requirement. The substituted action, Audit nonhuman and user principals separately and revoke the no-longer-approved data grants., is suited to a different situation: A partner's guest account is disabled but an active service principal continues to consume shared data. It does not satisfy the specified requirement 1.
C:Misses requirement 1: Broad sharing expands the audience beyond the stated business requirement. The substituted action, Create an explicitly time-bound, narrowly scoped external access grant., is suited to a different situation: A temporary external consultant needs a single published dashboard for a two-week engagement. It does not satisfy the specified requirement 1.
D:Misses requirement 2: The principle of least privilege separates querying a model from changing its definitions. The substituted action, Validate the report and semantic model permission chain for the external principal., is suited to a different situation: An outside collaborator receives a report link but lacks permission to the shared semantic model behind it. It does not satisfy the specified requirement 2.
Question 499
A Microsoft Fabric analytics team faces 2 concurrent, independent needs in the same workstream: (1) A storage owner wants evidence of which security roles currently grant access to a sensitive table. (2) A production report is shared using an unreviewed link and the team needs an access history. Which action bundle addresses ALL 2 needs without replacing a required control with a different one?
- (1) Inspect supported Fabric or Microsoft 365 audit events and version history. | (2) Review sharing changes and relevant audit logs, then document the authorized audience.
- (1) Export and review effective role membership and data permission assignments. | (2) Query the supported inventory or governance catalog filtered by item label.
- (1) Configure applicable governance controls and review compliance rather than relying on naming. | (2) Review sharing changes and relevant audit logs, then document the authorized audience.
- (1) Export and review effective role membership and data permission assignments. | (2) Review sharing changes and relevant audit logs, then document the authorized audience.
Explanation
Correct Answer
D:Requirement 1: Security assessment needs actual grants, not assumptions about item ownership. Requirement 2: Governance review connects a sharing event to traceable ownership and approval. Each action is needed for its corresponding requirement; the bundle covers all stated needs.
Incorrect Answers
A:Misses requirement 1: Security assessment needs actual grants, not assumptions about item ownership. The substituted action, Inspect supported Fabric or Microsoft 365 audit events and version history., is suited to a different situation: A regulated team must demonstrate who changed a semantic model and when. It does not satisfy the specified requirement 1.
B:Misses requirement 2: Governance review connects a sharing event to traceable ownership and approval. The substituted action, Query the supported inventory or governance catalog filtered by item label., is suited to a different situation: A compliance analyst wants to discover all items with a restricted sensitivity classification. It does not satisfy the specified requirement 2.
C:Misses requirement 1: Security assessment needs actual grants, not assumptions about item ownership. The substituted action, Configure applicable governance controls and review compliance rather than relying on naming., is suited to a different situation: A policy team needs to prevent new confidential datasets from being published without classification. It does not satisfy the specified requirement 1.
Question 500
A Microsoft Fabric analytics team faces 2 concurrent, independent needs in the same workstream: (1) A semantic model uses a fixed cloud connection identity and an architect assumes every reader's SQL RLS is applied automatically. (2) A report consumer has Build permission but cannot connect to a protected source lakehouse. Which action bundle addresses ALL 2 needs without replacing a required control with a different one?
- (1) Test the intersection of effective model restrictions and OneLake security for each principal. | (2) Inspect the data source access model and the required model connection identity.
- (1) Verify the effective connection identity and model security before assuming delegated per-user filtering. | (2) Inspect the data source access model and the required model connection identity.
- (1) Check the semantic model's own access permissions and required credentials. | (2) Inspect the data source access model and the required model connection identity.
- (1) Verify the effective connection identity and model security before assuming delegated per-user filtering. | (2) Verify the consuming identity's RLS and OneLake security roles.
Explanation
Correct Answer
B:Requirement 1: Fixed identity and single sign-on yield different security evaluation behavior. Requirement 2: Build authorizes model reuse, not necessarily read rights on separate source items. Each action is needed for its corresponding requirement; the bundle covers all stated needs.
Incorrect Answers
A:Misses requirement 1: Fixed identity and single sign-on yield different security evaluation behavior. The substituted action, Test the intersection of effective model restrictions and OneLake security for each principal., is suited to a different situation: A team combines OneLake table access rules and semantic RLS and sees unexpected effective filters. It does not satisfy the specified requirement 1.
C:Misses requirement 1: Fixed identity and single sign-on yield different security evaluation behavior. The substituted action, Check the semantic model's own access permissions and required credentials., is suited to a different situation: A user can query a warehouse via SQL but receives an error opening its semantic model. It does not satisfy the specified requirement 1.
D:Misses requirement 2: Build authorizes model reuse, not necessarily read rights on separate source items. The substituted action, Verify the consuming identity's RLS and OneLake security roles., is suited to a different situation: A model author sees full data while a Viewer only sees an authorized subset. It does not satisfy the specified requirement 2.
Implementing Analytics Solutions Using Microsoft Fabric (DP-600) Practice Tests