Microsoft Certified: Power BI Data Analyst AssociateDeploy and maintain assetsHard
An organization is implementing a new data governance policy that requires all Power BI datasets containing sensitive customer data to be encrypted at rest and in transit. Which Microsoft 365 feature, when integrated with Power BI, can help enforce this policy?
- AMicrosoft Purview Information Protection
- BAzure Active Directory Conditional Access
- CMicrosoft Defender for Cloud Apps
- DMicrosoft Intune
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Purview Information Protection
Microsoft Purview Information Protection (formerly Azure Information Protection) allows organizations to classify and label sensitive data. These sensitivity labels can then be applied to Power BI datasets, reports, and dashboards, enforcing protection policies like encryption both at rest and in transit.
Why the other options are wrong
- B. Conditional Access manages access policies based on conditions (e.g., device compliance, location), not data encryption for datasets.
- C. Defender for Cloud Apps provides cloud app security, but not direct data labeling and encryption at rest/in transit for Power BI datasets.
- D. Microsoft Intune manages mobile devices and applications, not data encryption within Power BI datasets.
Microsoft Purview Information Protection
A solution for discovering, classifying, and protecting sensitive data across an organization's digital estate, including Power BI.
- Uses sensitivity labels.
- Enforces encryption and access controls.
- Integrates with Power BI for data governance.
Memory trick: Purview protects your data's view.