Understand Data Security Implications of Copilot AB-900 Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A security administrator is concerned about Copilot being used to exfiltrate sensitive data. They have Microsoft 365 E5 and want to monitor and investigate Copilot activity. Which Microsoft Defender capability should they use?

   • AMicrosoft Defender XDR
   • BMicrosoft Defender for Cloud Apps
   • CMicrosoft Purview Audit (Standard or Premium)
   • DMicrosoft Defender for Office 365
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   An organization is rolling out Copilot for Microsoft 365. The security team wants to ensure that Copilot does not expose sensitive information to users who lack proper clearance. What should they configure to enforce this?

   • ADisable Copilot for all users except the security team
   • BCreate a new security group and assign Copilot licenses only to that group
   • CRely on the existing Microsoft 365 permissions and sensitivity labels
   • DConfigure Microsoft Purview to block all Copilot interactions
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   An organization is planning to deploy Copilot for Microsoft 365. They have a mix of users with different permission levels. They want to ensure that Copilot does not expose data to users who should not see it. What should they do?

   • AConfigure Microsoft Purview to block Copilot from using sensitive data.
   • BRely on Copilot's built-in permission model that uses the user's existing permissions.
   • CCreate a new security group and add only users who should have access to Copilot.
   • DDisable Copilot for all users and enable it only for a pilot group.
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which responsible AI principle ensures that Copilot's responses are understandable and that users know when they are interacting with AI?

   • AFairness
   • BTransparency
   • CPrivacy and security
   • DReliability and safety
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A security administrator is investigating a potential data exfiltration incident involving Copilot. They need to determine which users have accessed Copilot and what prompts they have submitted. They also want to detect any anomalous behavior. Which combination of Microsoft 365 services should they use?

   • AMicrosoft Purview Audit and Microsoft Defender XDR
   • BMicrosoft Purview Compliance Manager and Microsoft Defender for Cloud Apps
   • CMicrosoft Purview eDiscovery and Microsoft Defender for Office 365
   • DMicrosoft Purview Data Lifecycle Management and Microsoft Defender XDR
   Reveal Solution Discussion Select an answer first