Understand Data Security Implications of Copilot AB-900 Practice Questions (Page 1)

Questions 1–5

1. 1expert · hard

   An organization has a strict data governance policy that requires Copilot to not use content from a specific SharePoint site. They have Microsoft 365 E5 and have configured sensitivity labels and DLP policies. However, they find that Copilot is still using content from that site. What is the most likely reason?

   • AThe user has been granted bypass permissions for DLP policies.
   • BThe DLP policy is not applied to Copilot.
   • CThe SharePoint site is not indexed by Microsoft Graph.
   • DThe sensitivity label is not applied to the content.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   How does Microsoft Graph influence the responses generated by Copilot in Microsoft 365?

   • AMicrosoft Graph supplies Copilot with relevant user data and context, such as emails, documents, and calendar, to ground responses in the user's organizational information.
   • BMicrosoft Graph replaces the need for user permissions by granting Copilot unrestricted access to all data.
   • CMicrosoft Graph provides the AI model with a static snapshot of all tenant data to ensure consistent answers.
   • DMicrosoft Graph is used only for authentication and does not affect the content of Copilot's responses.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A security team is investigating a potential data exfiltration incident involving Copilot. They have access to Microsoft Purview Audit logs and Microsoft Defender XDR. What should they do to identify the root cause of the incident?

   • ASearch the Purview Audit logs for Copilot interactions and analyze them in Defender XDR for anomalies.
   • BUse Microsoft Defender for Cloud Apps to block Copilot traffic.
   • CUse Microsoft Purview Compliance Manager to review compliance posture.
   • DUse Microsoft Purview eDiscovery to search for Copilot interactions.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A user in the Finance department asks Copilot in Microsoft 365 to summarize 'all documents related to Q3 budget.' The user has read access to a SharePoint site containing the budget files, but the site has a sensitivity label that restricts access to the Finance group only. The user is a member of Finance. What determines which documents Copilot can include in the summary?

   • AThe site's sharing settings, which determine whether Copilot can index the content
   • BThe Copilot admin's configuration of allowed data sources
   • CThe sensitivity label's encryption settings, which override the user's permissions
   • DThe user's existing permissions in Microsoft 365, as evaluated by Microsoft Graph
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   How does Microsoft Purview help Copilot enforce data governance policies?

   • APurview applies policies such as data loss prevention and sensitivity labels to data that Copilot accesses.
   • BPurview replaces the need for user permissions by automatically granting Copilot access to all data.
   • CPurview stores a copy of all data used by Copilot for audit purposes.
   • DPurview provides the AI model with training data to improve response accuracy.
   Reveal Solution Discussion Select an answer first