Understand Data Security Implications of Copilot AB-900 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the role of Microsoft Defender in protecting data accessed by Copilot?

   • AIt provides the AI model with security training data to improve response safety.
   • BIt filters Copilot responses to remove any potentially harmful content.
   • CIt manages user permissions to ensure only authorized users can access Copilot.
   • DIt monitors for security threats and helps protect the environment where Copilot operates.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A user asks Copilot to 'find all documents related to Project X.' The user has access to a SharePoint site with Project X documents, but the site has a retention policy that deletes documents older than 90 days. The user also has access to a Teams channel where Project X was discussed. What will Copilot's response include?

   • AOnly the SharePoint documents, because Teams messages are not accessible to Copilot
   • BDocuments from the SharePoint site that are still within the retention period, plus Teams messages
   • CAll documents from the SharePoint site, including those deleted by the retention policy
   • DOnly the Teams messages, because SharePoint documents are not indexed by Copilot
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security team wants to detect and respond to threats that involve Copilot, such as a user trying to use Copilot to access sensitive data they are not authorized to see. Which Microsoft Defender capability should they use?

   • AMicrosoft Purview Audit
   • BMicrosoft Defender XDR
   • CMicrosoft Defender for Cloud Apps
   • DMicrosoft Defender for Office 365
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security administrator is concerned about Copilot being used to exfiltrate sensitive data. They want to monitor and alert on suspicious Copilot activity, such as a user asking for a large volume of confidential documents. Which Microsoft 365 security solution should they use?

   • AMicrosoft Purview Audit
   • BMicrosoft Defender for Cloud Apps
   • CMicrosoft Defender for Office 365
   • DMicrosoft Entra ID sign-in logs
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A user has been granted 'View only' permission to a SharePoint site via a sharing link. The user asks Copilot to 'summarize the financial report' from that site. What will Copilot do?

   • AExclude the report because sharing links are not recognized by Copilot
   • BInclude the report in the response because the user has view access
   • CExclude the report because 'View only' permission is not sufficient for Copilot
   • DInclude the report but redact sensitive numbers
   Reveal Solution Discussion Select an answer first