Protect Data Used by AI Services SC-401 Practice Questions (Page 6)

Questions 26–30

1. 26expert · hard

   A security admin has configured a DSPM policy to alert on sensitive data shared with AI services. The policy is working, but the security team is receiving too many alerts, many of which are false positives. What should you do to reduce false positives while maintaining detection?

   • AAssign the Purview Data Reader role to more users to help review alerts.
   • BIncrease the alert threshold to only alert on high-severity incidents.
   • CRefine the policy to use more specific sensitive information types and exclude known benign patterns.
   • DDisable the policy and rely on manual review of audit logs.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A security team wants to monitor DSPM alerts for AI services and receive notifications when a new alert is generated. What should you configure?

   • AA sensitivity label that marks all AI data as confidential.
   • BAn alert policy in Microsoft Purview that sends email notifications for DSPM alerts.
   • CA conditional access policy that requires MFA for AI services.
   • DA retention policy that retains AI data for 1 year.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   After configuring DSPM for AI services, the security team wants to investigate which users have accessed sensitive data through AI tools. Where should they look in Microsoft Purview?

   • AActivity Explorer, filtering by AI service activity and sensitive data.
   • BData classification page, which shows all sensitive data in the organization.
   • CCompliance Manager, which tracks regulatory compliance scores.
   • DAudit log search, but only for sign-in events.
   Reveal Solution Discussion Select an answer first
5. 29application · medium

   A company uses Microsoft 365 Copilot and allows employees to paste internal documents into third-party AI chat tools. The security team wants to prevent sensitive data from leaving the organization through these external AI services while still allowing Copilot to work. What should you configure in Microsoft Purview?

   • AA data loss prevention (DLP) policy that blocks sensitive content from being shared to external AI chat domains.
   • BA communication compliance policy that reviews AI chat conversations after they occur.
   • CA sensitivity label that applies encryption to all documents before they are pasted into any AI tool.
   • DA retention policy that deletes all content pasted into external AI tools after 30 days.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which Microsoft Purview solution provides the activity logs that Data Security Posture Management (DSPM) uses to monitor user actions on sensitive data?

   • AMicrosoft Purview eDiscovery
   • BMicrosoft Purview Data Lifecycle Management
   • CMicrosoft Purview Audit
   • DMicrosoft Purview Communication Compliance
   Reveal Solution Discussion Select an answer first