Sharing & administration — quiz

In an RLS rules dataset, a blank value in a restriction column means:

1. No access
2. Access to all values of that field
3. The row is ignored
4. An error

Answer: Access to all values of that field — Blank grants universal access for that field — useful for admins, dangerous by accident.

A user not present in the rules dataset sees:

1. All rows
2. No data
3. Only aggregates
4. An error message

Answer: No data — Default-deny is the safe behaviour; every entitled user must be listed explicitly.

In a multi-tenant embed, what actually prevents tenant A seeing tenant B data?

1. A URL parameter
2. Row-level security or session tags
3. The iframe sandbox
4. Dashboard permissions

Answer: Row-level security or session tags — Parameters control display only; RLS or session tags restrict what can be queried.

Anonymous embedding enforces isolation using:

1. UserName in the rules dataset
2. Session tags matched by the rules dataset
3. IAM roles per viewer
4. Direct query mode

Answer: Session tags matched by the rules dataset — Anonymous users have no QuickSight identity, so session tags carry the entitlement.

Publishing an analysis as a dashboard means:

1. They stay linked live
2. Readers see a published snapshot while you keep editing
3. The analysis is deleted
4. Readers can edit it

Answer: Readers see a published snapshot while you keep editing — You republish when ready.

Which is the main cost lever in QuickSight?

1. SPICE size
2. The split between Authors and Readers
3. Number of dashboards
4. Refresh frequency

Answer: The split between Authors and Readers — Readers are considerably cheaper.