A compliance officer wants to ensure that Copilot responses do not contain sensitive data that is labeled as 'Confidential' unless the user has explicit permission. What should they use to enforce this?

Microsoft Purview sensitivity labels and data loss prevention policies

Microsoft Defender for Cloud Apps

Microsoft Entra ID conditional access policies

Microsoft 365 admin center Copilot settings

An organization wants to ensure that Copilot does not use content that has been marked as 'Highly Confidential' in responses. They have Microsoft 365 E5 and have configured sensitivity labels. What should they do to enforce this restriction?

Disable Copilot for users who have access to 'Highly Confidential' content.

Configure Microsoft Defender for Cloud Apps to block Copilot traffic.

Remove the 'Highly Confidential' label from all content.

Create a DLP policy that blocks Copilot from using content with the 'Highly Confidential' label.

A compliance team wants to prevent Copilot from including credit card numbers in responses. They have already applied a sensitivity label to documents containing credit card data. What should they configure in Microsoft Purview to enforce this?

A data loss prevention policy that blocks sharing of credit card numbers

An eDiscovery hold on the documents

A conditional access policy that requires multi-factor authentication

A retention policy for the documents

What role does Microsoft Graph play in the data retrieval process for Copilot?

It acts as the intermediary that connects Copilot to the user's Microsoft 365 data, respecting the user's permissions.

It provides the AI model with training data to improve its general knowledge.

It stores the user's data in a separate AI-optimized database for faster retrieval.

It filters all data to remove sensitive information before Copilot can access it.

An organization wants to allow Copilot to use data from a highly confidential project site, but only for a specific group of users. The site currently has permissions set to 'Only members can access.' What should the administrator do to ensure Copilot respects this?

Do nothing; Copilot will automatically respect the site's permissions

Disable Copilot for all users except the specific group

Create a new sensitivity label and apply it to the site

Configure Microsoft Purview to block Copilot from accessing the site

Microsoft 365 Certified:Copilot and Agent Administration Fundamentals

Domain 2Objective 2

Understand Data Security Implications of Copilot AB-900 Practice Questions (Page 7)

Part of the Understand data protection and governance tasks for Microsoft 365 and Copilot domain, which accounts for 35–40% of the AB-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~7–12 in this domain), expect 2–3 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

6concepts

35–40%of the exam

Questions 31–35

31application · medium
A compliance officer wants to ensure that Copilot responses do not contain sensitive data that is labeled as 'Confidential' unless the user has explicit permission. What should they use to enforce this?
Select an answer first
32application · medium
An organization wants to ensure that Copilot does not use content that has been marked as 'Highly Confidential' in responses. They have Microsoft 365 E5 and have configured sensitivity labels. What should they do to enforce this restriction?
Select an answer first
33application · medium
A compliance team wants to prevent Copilot from including credit card numbers in responses. They have already applied a sensitivity label to documents containing credit card data. What should they configure in Microsoft Purview to enforce this?
Select an answer first
34foundation · easy
What role does Microsoft Graph play in the data retrieval process for Copilot?
Select an answer first
35application · medium
An organization wants to allow Copilot to use data from a highly confidential project site, but only for a specific group of users. The site currently has permissions set to 'Only members can access.' What should the administrator do to ensure Copilot respects this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AB-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AB-900” is a trademark of its owner, used for identification only.