nerdexam
Microsoft

DP-600 · Question #132

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets…

The correct answer is A. Yes. The scenario describes an environment where on-premises AD DS identities are synchronized to Microsoft Entra ID, and a Fabric semantic model has dynamic row-level security (RLS) enabled.

Submitted by miguelv· Apr 18, 2026Implement and manage semantic models

Question

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. Your network contains an on-premises Active Directory Domain Services (AD DS) domain named contoso.com that syncs with a Microsoft Entra tenant by using Microsoft Entra Connect. You have a Fabric tenant that contains a semantic model. You enable dynamic row-level security (RLS) for the model and deploy the model to the Fabric service. You query a measure that includes the USERNAME() function, and the query returns a blank result. You need to ensure that the measure returns the user principal name (UPN) of a user. Solution: You update the measure to use the USERPRINCIPALNAME() function. Does this meet the goal?

Options

  • AYes
  • BNo

How the community answered

(41 responses)
  • A
    76% (31)
  • B
    24% (10)

Why each option

The scenario describes an environment where on-premises AD DS identities are synchronized to Microsoft Entra ID, and a Fabric semantic model has dynamic row-level security (RLS) enabled.

AYesCorrect

Dynamic RLS often uses the USERNAME() or USERPRINCIPALNAME() DAX functions to filter data based on the authenticated user's identity. Since on-premises AD DS users are synchronized to Microsoft Entra ID via Microsoft Entra Connect, their identities (including UPNs) are available and can be used to enforce dynamic RLS in Fabric/Power BI, allowing for seamless security enforcement based on corporate identities.

BNo

Concept tested: Dynamic RLS with hybrid identities

Source: https://learn.microsoft.com/en-us/power-bi/enterprise/service-security-rls

Topics

#DAX Functions#Row-Level Security (RLS)#User Principal Name (UPN)#Semantic Model Security

Community Discussion

No community discussion yet for this question.

Full DP-600 Practice