This post is a part of the PL-300: Microsoft Power BI Data Analyst Exam Prep Hub; and this topic falls under these sections:
Manage and secure Power BI (15–20%)
--> Secure and govern Power BI items
--> Apply sensitivity labels
Below are 10 practice questions (with answers and explanations) for this topic of the exam.
There are also 2 practice tests for the PL-300 exam with 60 questions each (with answers) available on the hub.
Practice Questions
Question 1
What is the primary purpose of sensitivity labels in Power BI?
A. To restrict which rows of data users can see
B. To control workspace access
C. To classify and protect sensitive data
D. To improve report performance
Correct Answer: C
Explanation:
Sensitivity labels are used to classify data based on sensitivity and enable protection and governance—not to control access or filter data.
Question 2
Where are sensitivity labels created and managed?
A. Power BI Desktop
B. Power BI Service
C. Microsoft Purview (Microsoft 365 compliance portal)
D. Microsoft Entra ID
Correct Answer: C
Explanation:
Sensitivity labels are centrally defined and managed in Microsoft Purview. Power BI only consumes and applies them.
Question 3
Which Power BI items can have sensitivity labels applied? (Select all that apply)
A. Semantic models
B. Reports
C. Dashboards
D. Measures
Correct Answer: A, B, C
Explanation:
Labels can be applied to semantic models, reports, and dashboards, but not to individual measures or columns.
Question 4
What happens when a report is created using a labeled semantic model?
A. The report ignores the label
B. The report automatically inherits the label
C. The report applies Row-Level Security
D. The report requires Admin approval
Correct Answer: B
Explanation:
Sensitivity labels inherit and propagate to downstream content such as reports.
Question 5
Which statement about sensitivity labels is true?
A. Sensitivity labels filter data at query time
B. Sensitivity labels replace Row-Level Security
C. Sensitivity labels classify content but do not restrict row visibility
D. Sensitivity labels control workspace membership
Correct Answer: C
Explanation:
Sensitivity labels classify data and support protection but do not filter rows or control access.
Question 6
A user exports data from a labeled Power BI report to Excel. What is the expected behavior?
A. The label is removed
B. The label remains and is applied to the Excel file
C. Export is blocked automatically
D. RLS is disabled
Correct Answer: B
Explanation:
Sensitivity labels propagate to exported files, helping protect data outside Power BI.
Question 7
Which scenario best demonstrates the value of sensitivity labels?
A. Limiting data visibility by region
B. Preventing users from editing reports
C. Ensuring confidential data remains protected when shared or exported
D. Reducing dataset refresh times
Correct Answer: C
Explanation:
Sensitivity labels help protect data beyond Power BI by enforcing classification and downstream protections.
Question 8
Which Power BI security feature should be used instead of sensitivity labels to restrict rows of data?
A. Workspace roles
B. Object-Level Security
C. Row-Level Security
D. Build permission
Correct Answer: C
Explanation:
Row-Level Security (RLS) restricts which rows users can see. Sensitivity labels do not.
Question 9
Where can sensitivity labels be applied by a user?
A. Only in Power BI Desktop
B. Only in the Power BI Service
C. In both Power BI Desktop and Power BI Service
D. Only by Power BI Admins
Correct Answer: C
Explanation:
Sensitivity labels can be applied or updated in both Desktop and the Service, depending on permissions.
Question 10
Which statement best describes how sensitivity labels fit into Power BI security?
A. They replace workspace roles and RLS
B. They are optional and unrelated to governance
C. They complement other security features by supporting data classification
D. They are only used for auditing
Correct Answer: C
Explanation:
Sensitivity labels are part of a layered security and governance approach, complementing permissions, RLS, and workspace roles.
Final PL-300 Exam Reminders
- Sensitivity labels are about classification and protection, not access control
- Labels are created in Microsoft Purview, applied in Power BI
- Labels propagate to reports and exported files
- Labels work alongside RLS and permissions—not instead of them
Go back to the PL-300 Exam Prep Hub main page
