Understand Data Security Implications of Copilot AB-900 Practice Questions (Page 8)

Questions 36–40

1. 36application · medium

   A project manager asks Copilot to 'summarize the latest project status.' The project has a Teams channel, a SharePoint site, and a shared mailbox. The manager has access to all three. However, the manager's manager has a more restrictive permission set and cannot access the SharePoint site. What will Copilot's response be based on?

   • AOnly the Teams channel and mailbox, because SharePoint is not indexed by Copilot
   • BThe most recent data from any source, regardless of permissions
   • COnly the data that the manager's manager can access, to ensure consistency
   • DAll data the manager has access to, including the Teams channel, SharePoint site, and mailbox
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A user asks Copilot to generate a summary of a document that contains personal data of EU citizens. The user has permission to the document, but the organization has a policy that requires data to remain in the EU. The document is stored in a SharePoint site in the EU region. What should Copilot do?

   • AGenerate the summary because the data is stored in the EU and the user has permission.
   • BGenerate the summary but redact all personal data.
   • CAsk the user to confirm that they have the right to access the data.
   • DRefuse to generate the summary because the data is personal data of EU citizens.
   Reveal Solution Discussion Select an answer first
4. 38expert · hard

   A user asks Copilot to 'list all documents that contain the phrase 'confidential' in the title.' The user has access to a SharePoint site that has a retention policy that deletes documents after 30 days. The user also has access to a OneDrive folder with similar documents. What will Copilot's response include?

   • AOnly the OneDrive documents, because SharePoint documents older than 30 days are deleted
   • BOnly the SharePoint documents, because OneDrive is not indexed by Copilot
   • CDocuments from both SharePoint and OneDrive that are currently available and the user has access to
   • DNo documents, because Copilot cannot search by title phrase
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A legal team wants to ensure that Copilot does not include data from a specific SharePoint site that contains privileged attorney-client communications. The site is already restricted to the legal team via permissions. What additional step should be taken to reinforce this?

   • ADisable Copilot for the entire legal team
   • BRemove the site from Microsoft Graph indexing
   • CCreate a Microsoft Purview DLP policy that blocks all Copilot interactions with the site
   • DApply a sensitivity label that blocks external sharing and requires encryption
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A sales manager asks Copilot to 'list the top customers by revenue.' The manager has access to the CRM data in Dynamics 365 and to a shared Excel file that contains revenue figures. However, the manager does not have access to a confidential SharePoint site that also contains customer revenue data. What will Copilot's response be based on?

   • AThe CRM data only, because Excel files are not indexed by Copilot
   • BAll customer revenue data across the organization, including the confidential site
   • CThe data from the most recently modified source, regardless of permissions
   • DOnly the data the manager has permission to access, including the CRM and Excel file
   Reveal Solution Discussion Select an answer first