PL-300 Question 63

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose AC1

  * Answer: A and C * Explanation: - A. Create a single role that filters Country[Manager_Email] by using the USERNAME() DAX function. This lets you keep one dynamic role so each manager only sees their country’s data: (Best practice is USERPRINCIPALNAME() for email/UPN, but given the options, USERNAME() is the right choice.) - C. For the relationship between Purchase Detail and Purchase, select Apply security filter in both directions. This ensures the RLS filter propagates reliably to the line-level (Purchase Detail) records regardless of current cross-filter setup. Even though filters often flow from Country → Purchase → Purchase Detail with standard single-direction relationships, checking Apply security filter in both directions guarantees that security (not just regular filtering) is enforced across that relationship, preventing any bypass scenarios.

• Chose AC2

  The correct actions are: A. Create a single role that filters Country[Manager_Email] using USERNAME DAX. This creates a dynamic RLS role so each manager only sees their country, minimizing roles. C. For the relationship between Purchase Detail and Purchase, select Apply security filter in both directions. This ensures the RLS filter on Country propagates to related tables, enforcing security throughout the model. Why not the others? B. USEROBJECTID is for Azure AD IDs; USERNAME (email) is simpler. D. Creating one role per country increases roles, breaking the minimize roles goal. E. Single cross-filter can break RLS propagation; bidirectional needed. Explanation for C: Relationships filter one way by default. Bidirectional filtering lets RLS on Country flow to Purchase and Purchase Detail, preventing access to unauthorized data.

• Chose AB1

  Each correct answer presents a complete solution, Therefore it is A and B