Understand Data Security Implications of Copilot AB-900 Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A security team wants to detect when a user uses Copilot to access a SharePoint site that contains classified data, even though the user has legitimate access. They want to alert on this activity. What should they configure?

   • AA Microsoft Defender for Cloud Apps activity policy that monitors Copilot access to the site
   • BA Microsoft Purview audit log search that runs daily
   • CA Microsoft Entra ID conditional access policy that requires MFA for the site
   • DA Microsoft Purview DLP policy that blocks the site from Copilot
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   How does Microsoft Defender contribute to the security of data used by Copilot?

   • ABy encrypting all data at rest and in transit
   • BBy creating backups of all data to prevent data loss
   • CBy blocking all external access to Microsoft 365 data
   • DBy detecting and mitigating threats like malware and phishing that could compromise data
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which Microsoft Purview capability is directly used to prevent sensitive data from being included in Copilot responses?

   • AData loss prevention (DLP) policies
   • BAudit logs
   • CeDiscovery cases
   • DCompliance Manager
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A user asks Copilot in Teams to summarize a channel conversation. The user is a member of the team but does not have access to a private channel within the team. What should Copilot do?

   • ASummarize the private channel but mark it as restricted.
   • BSummarize only the channels the user has access to, excluding the private channel.
   • CSummarize the entire team conversation, including the private channel.
   • DAsk the user to request access to the private channel before summarizing.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   An organization has a data governance policy that requires Copilot to not use content from a specific SharePoint site. They have Microsoft 365 E5 and have configured sensitivity labels and DLP policies. However, they find that Copilot is still using content from that site. What is the most likely reason?

   • AThe sensitivity label is not applied to the content.
   • BThe SharePoint site is not indexed by Microsoft Graph.
   • CThe user has been granted bypass permissions for DLP policies.
   • DThe DLP policy is not applied to Copilot.
   Reveal Solution Discussion Select an answer first