DP-500 · Question #123
DP-500 Question #123: Real Exam Question with Answer & Explanation
This question tests knowledge of Power BI tenant-level security controls for managing external data sharing, specifically using Microsoft Purview sensitivity labels and Power BI Admin portal settings to enforce data governance policies.
Question
Hotspot Question You need to recommend a security solution for the Power BI tenant to control external data sharing. The solution must meet the technical requirements. What should you recommend? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
Explanation
This question tests knowledge of Power BI tenant-level security controls for managing external data sharing, specifically using Microsoft Purview sensitivity labels and Power BI Admin portal settings to enforce data governance policies.
Approach. The correct approach combines two layers: (1) Enable Microsoft Purview Information Protection sensitivity labels in the Power BI tenant (via Admin portal > Tenant settings > Information protection) and apply label policies that restrict or block external sharing based on data classification (e.g., Confidential, Highly Confidential). (2) Configure Power BI Admin portal Tenant Settings under 'Export and sharing settings' to control capabilities such as 'Allow Azure AD guest users to access Power BI', 'Invite external users to your organization', and 'Publish to web' - enabling or restricting these based on security requirements. Sensitivity labels are the preferred enterprise-grade control because they travel with the data artifact (reports, datasets, dashboards) and can automatically enforce downstream export/sharing restrictions via Microsoft Purview Data Loss Prevention (DLP) policies. Together, these controls provide both preventive (label-enforced) and administrative (tenant-setting) layers of external sharing governance.
Concept tested. Power BI external data sharing governance using Microsoft Purview sensitivity labels and Power BI Admin portal tenant settings (Export and sharing settings, Azure AD B2B guest access controls, and Information Protection integration).
Reference. Microsoft Learn: 'Sensitivity labels in Power BI' and 'Power BI tenant settings - Export and sharing settings' - docs.microsoft.com/power-bi/admin/service-admin-portal-export-sharing
Topics
Community Discussion
No community discussion yet for this question.