Exam DP-600 Topic 2 Question 19 Discussion
Actual exam question for Microsoft's DP-600 exam
Question #: 19
Topic #: 2
Question #: 19
Topic #: 2
You have a Fabric tenant that contains a workspace named Workspace1. Workspace1 contains a warehouse named DW1. DW1 contains two tables named Employees and Sales. All users have read access to DW1.
You need to implement access controls to meet the following requirements:
For the Sales table, ensure that the users can see only the sales data from their respective region.
For the Employees table, restrict access to all Personally Identifiable Information (PII).
Maintain access to unrestricted data for all the users.
What should you use for each table? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

You need to implement access controls to meet the following requirements:
For the Sales table, ensure that the users can see only the sales data from their respective region.
For the Employees table, restrict access to all Personally Identifiable Information (PII).
Maintain access to unrestricted data for all the users.
What should you use for each table? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Suggested Answer:

Explanation:

Requirement Analysis
Sales table # Users should only see sales data for their own region .
This requires filtering rows based on a condition (e.g., Region = User's Region).
The correct feature: Row-level security (RLS) .
Employees table # Restrict access to Personally Identifiable Information (PII) while allowing access to non- sensitive columns.
This requires restricting access to specific columns (such as SSN, phone, address, etc.), but leaving others visible.
The correct feature: Column-level security .
Maintain access to unrestricted data for all users # Both RLS and column-level security allow users to continue accessing non-restricted data.
Why Other Options Are Not Correct
Item permissions : Control access at the object level (e.g., table or report), not at the row or column level. Too coarse for this requirement.
Workspace permissions : Apply at the workspace level, not suitable for table-level data filtering.
Completed Answer
Employees # Column-level security
Sales # Row-level security (RLS)
References
Row-level security in Microsoft Fabric
Column-level security in Microsoft Fabric
by Heather at Jun 26, 2026, 10:12 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).