Protect Data Used by AI Services SC-401 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   Your organization wants to use DSPM to monitor AI services, but you have not yet enabled audit logging. What is the impact on DSPM?

   • ADSPM will automatically enable audit logging.
   • BDSPM cannot monitor user activities or generate alerts for AI services.
   • CDSPM can still generate alerts but cannot block data.
   • DDSPM can still scan data but cannot apply sensitivity labels.
   Reveal Solution Discussion Select an answer first
2. 2expert · hard

   A company uses Microsoft 365 Copilot and is planning to deploy DSPM for AI services. They have enabled audit logging and connected Copilot to DSPM. The security team wants to ensure that Copilot does not use sensitive data in its responses, but they also want to monitor Copilot activities. Which approach should they take?

   • AApply sensitivity labels to sensitive content and configure a DLP policy that blocks Copilot from using labeled content, while using DSPM to monitor Copilot activities.
   • BDisable Copilot and use a third-party AI service.
   • CUse conditional access to block Copilot for all users.
   • DConfigure a retention policy to delete sensitive data after 30 days.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   Your organization uses an AI service that ingests data from SharePoint sites. You need to ensure that sensitive data is not ingested by the AI service. What should you configure in Microsoft Purview?

   • AA retention policy that deletes SharePoint data after 30 days.
   • BA sensitivity label that marks all SharePoint data as public.
   • CA DLP policy that blocks sensitive data from being shared with the AI service.
   • DAn access review that removes user access to SharePoint.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   Your organization uses an AI service that processes customer credit card numbers. You need to configure a DSPM policy that detects when credit card data is sent to the AI service and automatically triggers a response. What should you configure?

   • AA retention policy that deletes all data sent to the AI service.
   • BA DSPM policy that uses a sensitive information type for credit card numbers and an action to alert or block.
   • CA conditional access policy that requires multi-factor authentication for the AI service.
   • DAn audit log search that manually reviews all AI service activity.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   An organization wants to implement DSPM for AI services. They have enabled audit logging and assigned the Purview Data Reader role to the security team. However, when they try to configure a DSPM policy, they receive an error that they do not have permission. What is the most likely cause?

   • AThe audit logging is not enabled for AI services.
   • BThe security team does not have a Microsoft 365 Copilot license.
   • CThe Purview Data Reader role does not have permission to create or modify DSPM policies.
   • DThe DSPM solution has not been enabled in the Purview portal.
   Reveal Solution Discussion Select an answer first