Exam PL-300 topic 5 question 2 discussion

I think it should be: C. DirectQuery that uses a database credential If you used the credentials of the user (D) then all users would need to be created in the database.

The requirements are: - Litware plans to leverage data from an Azure SQL database (not an on-premise SQL Server) - Litware uses Azure Active Directory (Azure AD) to authenticate users (not through gateway) - The maximum allowed latency to include transactions in reports is five minutes (not import and schedule refresh) So the answer is D. DirectQuery that uses the end-user's credentials We will also give the AD group that represents the whole company the read access to the database so all users can run direct queries on the database.

The correct answer is: D. DirectQuery that uses the end-user's credentials. Here’s the reasoning: Low-Latency Requirement: Since the maximum allowed latency for the reports is five minutes, you need to ensure near real-time access to the data. This is best achieved with DirectQuery, as it queries the database live rather than relying on cached or imported data. Azure SQL Database with Azure AD Authentication: The company uses Azure Active Directory (Azure AD) for authentication. Using the end-user's credentials ensures that row-level security (RLS) can be enforced at the database level, restricting data access to only what the authenticated user is permitted to see. Alignment with Reporting Requirements: The reporting requirements involve personalized data visibility, such as sales managers seeing only their region’s data. Using the end-user’s credentials ensures these data security needs are met.

why not C: Using a shared database credential does not enforce row-level security (RLS) at the database level, meaning all users would see the same data, which violates the requirement for sales managers to see only their respective regions.

"maximum allowed latency..... is five minutes" requires tee DirectQuery storage mode in our data model so Options C or D. It's assumed no all end-users (in fact it's expected not too many of them, if any) would have access to database, therefore connection must be set using database credentials

Selected Answer: D DirectQuery provides real-time data access, and using the end-user's credentials ensures that each user sees data they are permitted to see according to their permissions in Azure Active Directory. This aligns with the security requirements of allowing sales managers to see only their respective region's data and other role-specific data views.

db credentials (sql server groups) make use of AD groups, never individual users; Maybe if your company has some 10 resources but in big businesses (like at least 1.000 resources) it would be a nightmare to manage. A case where you might want to use DB credentials is when you use impersonation on sql server side (aka : technical user ID)

C should be correct. Link: https://learn.microsoft.com/en-us/power-bi/connect-data/desktop-directquery-about Quote: "Alternate credentials aren't supported when making DirectQuery connections to SQL Server from Power BI Desktop. You can use your current Windows credentials or database credentials."

As given in the description, you can enable single sign-on (SSO) using Azure Active Directory (Azure AD) OAuth2 for your end users. Azure AD authentication is a mechanism to connect to your SQL resource by using identities in Azure AD. With Azure AD authentication, you can centrally manage the identities of database users and other Microsoft services in one central location. Central ID management provides a single place to manage database users and simplifies permission management.

It is definitely weird, to say they use Azure SQL, and then say its Microsoft SQL Server, which certainly sounds like an onpremis (or a VM, which they dont mention). So I would have to go with D if its Azure, C if its On Premise

I passed the exam today (948/1000). My answer was: - DirectQuery that uses a database credential

The definite answer is C. DirectQuery that uses a database credential

The maximum allowed latency to include transactions in reports is five minutes. Question You need to get data from the Microsoft SQL Server tables. What should you use to configure the connection? A. Import that uses a Microsoft account B. Import that uses a database credential C. DirectQuery that uses a database credential D. DirectQuery that uses the end-user's credentials

I think C

Answer is C

Answer is C

I second AzureJobsTillRetire comment