Understand Microsoft Purview AB-900 Practice Questions (Page 11)

Questions 51–54

1. 51application · medium

   A company is deploying a custom AI chatbot that uses internal documents to answer employee queries. The compliance team wants to ensure that sensitive documents are not inadvertently used in AI responses and that any sensitive data in the AI prompts is protected. What should they implement in Microsoft Purview?

   • AData Security Posture Management for AI to scan AI interactions and sensitivity labels to restrict access to sensitive documents.
   • BCommunication Compliance to review chatbot conversations for policy violations.
   • CData Lifecycle Management to delete old documents that might be used by the AI.
   • DInsider Risk Management to monitor employee interactions with the chatbot.
   Reveal Solution Discussion Select an answer first
2. 52expert · hard

   A company has a regulatory requirement to retain financial records for 7 years, but also has a business requirement to delete customer data after 2 years to reduce storage costs. The company wants to comply with both requirements without manual intervention. What should they do?

   • AApply a single retention policy that retains all data for 7 years
   • BApply a single retention policy that deletes all data after 2 years
   • CApply a retention policy that retains financial records for 7 years and a separate retention policy that deletes customer data after 2 years, using labels to distinguish the data
   • DUse a DLP policy to block deletion of financial records
   Reveal Solution Discussion Select an answer first
4. 53application · medium

   A financial firm wants to monitor employee communications for potential insider trading, such as discussions of non-public financial data. They also want to detect if employees are sharing sensitive documents externally. Which two Purview solutions should they use?

   • AInformation Protection and Data Classification
   • BCommunication Compliance and Insider Risk Management
   • CCommunication Compliance and Data Loss Prevention
   • DInsider Risk Management and Data Lifecycle Management
   Reveal Solution Discussion Select an answer first
5. 54expert · hard

   A company has a large volume of unstructured data in SharePoint and OneDrive. They want to automatically classify this data and apply sensitivity labels, but they are concerned about the accuracy of auto-classification and want to avoid mislabeling. They also want to ensure that sensitive data is protected even if classification is not perfect. What should they do?

   • AUse a retention policy to retain all data for 10 years
   • BUse only manual labeling to ensure accuracy
   • CUse data classification with sensitive info types and trainable classifiers, and apply a default label with encryption to all content
   • DUse a DLP policy that blocks all external sharing of any content
   Reveal Solution Discussion Select an answer first