Which Microsoft Purview capability is specifically designed to help organizations discover, classify, and protect sensitive content that may be used by AI services?

Information Protection and Data Lifecycle Management

You need to configure a DSPM policy that monitors AI services for the presence of personal data and generates an alert when personal data is found. Which policy type should you use?

A retention policy that holds personal data for a specified period.

A conditional access policy that blocks access to AI services.

An audit log policy that records all user actions.

A data risk policy that scans for sensitive information types.

In a Data Security Posture Management (DSPM) policy for AI services, what is the purpose of setting a 'condition' such as 'content contains a sensitivity label'?

To determine which users can access the AI service

To define the alert notification method

To set the retention period for the data

To narrow the scope of data that the policy evaluates

After configuring DSPM for AI services, the security team notices that some AI service activities are not appearing in Activity Explorer. They have confirmed that audit logging is enabled and the DSPM policy is active. What is the most likely cause?

The security team does not have the Purview Data Reader role.

The user performing the activity does not have the required license for AI services.

The DSPM policy is not configured to monitor that specific AI service.

The AI service is not onboarded to Microsoft Purview.

Your organization is planning to deploy DSPM for AI services. You need to ensure that only authorized security personnel can manage DSPM policies. What should you do first?

Deploy Microsoft Defender for Cloud Apps.

Create a sensitivity label for AI data.

Assign the Purview Data Security Posture Management roles to the appropriate security personnel.

Enable Microsoft 365 audit logging.

Microsoft Certified:Information Security Administrator Associate

Domain 3Objective 3

Protect Data Used by AI Services SC-401 Practice Questions (Page 4)

Part of the Manage risks, alerts, and activities domain, which accounts for 30–35% of the SC-401 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 4–8 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

6concepts

30–35%of the exam

Questions 16–20

16foundation · easy
Which Microsoft Purview capability is specifically designed to help organizations discover, classify, and protect sensitive content that may be used by AI services?
Select an answer first
17application · medium
You need to configure a DSPM policy that monitors AI services for the presence of personal data and generates an alert when personal data is found. Which policy type should you use?
Select an answer first
18foundation · easy
In a Data Security Posture Management (DSPM) policy for AI services, what is the purpose of setting a 'condition' such as 'content contains a sensitivity label'?
Select an answer first
19expert · hard
After configuring DSPM for AI services, the security team notices that some AI service activities are not appearing in Activity Explorer. They have confirmed that audit logging is enabled and the DSPM policy is active. What is the most likely cause?
Select an answer first
20application · medium
Your organization is planning to deploy DSPM for AI services. You need to ensure that only authorized security personnel can manage DSPM policies. What should you do first?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-401” is a trademark of its owner, used for identification only.