Protect Data Used by AI Services SC-401 Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A company uses an AI service that processes both personal data and financial data. The security team needs to configure DSPM policies to detect both types of data, but they want to minimize false positives. They have enabled audit logging and connected the AI service. What should they do?

   • ACreate a single data risk policy that includes all sensitive information types.
   • BUse a retention policy to manage both data types.
   • CUse conditional access to block access to the AI service.
   • DCreate two separate data risk policies, one for personal data and one for financial data, each with specific sensitive information types.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An organization uses Microsoft 365 Copilot and wants to ensure that sensitive data is not exposed to AI services. They have enabled DSPM and want to create a policy that alerts when sensitive data is shared with Copilot. What should you configure in the DSPM policy?

   • AA policy that automatically removes sensitive data from Copilot responses.
   • BA policy that requires multi-factor authentication for all Copilot users.
   • CA policy that blocks all Copilot interactions for users who have accessed sensitive data.
   • DA policy that monitors for sensitive information types in Copilot interactions and triggers an alert when detected.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Before using Data Security Posture Management (DSPM) for AI services in Microsoft Purview, which prerequisite must be met?

   • AInstall Microsoft 365 Apps on all devices
   • BConfigure Microsoft Defender for Cloud Apps
   • CDeploy Microsoft Entra ID Premium P2
   • DEnable Microsoft 365 Audit log
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company uses Microsoft 365 Copilot in Word and Excel. The security team wants to prevent Copilot from using sensitive documents as context for responses. What should they configure?

   • AA sensitivity label that marks documents as 'Confidential' and a DLP policy that restricts Copilot access to labeled content.
   • BA retention policy that deletes sensitive documents after 30 days.
   • CAn eDiscovery hold that preserves all sensitive documents.
   • DA communication compliance policy that reviews Copilot responses.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   After configuring DSPM for AI services, the security team wants to review which users have accessed sensitive data through AI tools. Where should they look in Microsoft Purview?

   • AThe Activity Explorer, filtering by AI service activity and sensitive data.
   • BThe Compliance Manager, which tracks regulatory compliance scores.
   • CThe Audit log search, but only for sign-in events.
   • DThe Data classification page, which shows all sensitive data in the organization.
   Reveal Solution Discussion Select an answer first