Protect Data Used by AI Services SC-401 Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   An organization wants to use Microsoft Purview Data Security Posture Management (DSPM) to protect data used by AI services. They have enabled Microsoft 365 Audit logging and are ready to onboard data sources. What is the next prerequisite step before they can configure DSPM policies for AI protection?

   • ACreate a custom sensitive information type for every AI service in use.
   • BDeploy a Microsoft 365 Copilot license to every user who will access AI services.
   • CEnable the DSPM solution in the Microsoft Purview portal and grant the required permissions to the security team.
   • DCreate and assign a data classification dashboard to all users.
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   A company uses Microsoft 365 Copilot and wants to ensure that employees cannot use Copilot to access files that are marked as 'Highly Confidential'. What should you configure?

   • AA DLP policy that blocks all copying of files to external locations.
   • BA retention policy that deletes 'Highly Confidential' files after 7 days.
   • CA sensitivity label with encryption and a conditional access policy that blocks Copilot access to labeled files.
   • DAn insider risk policy that alerts when Copilot is used.
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A security analyst needs to view DSPM activity logs for AI services but should not be able to create or modify DSPM policies. Which role should you assign?

   • APurview Data Curator
   • BCompliance Administrator
   • CSecurity Administrator
   • DPurview Data Reader
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A multinational company uses Microsoft 365 Copilot and a custom AI service that processes data in a region with strict data residency requirements. The security team must prevent sensitive data from leaving the region while still allowing Copilot to function. They have enabled audit logging and connected the AI service to DSPM. Which combination of controls should they implement?

   • AConfigure a DLP policy that blocks sensitive data from being sent to the custom AI service, and apply sensitivity labels to restrict Copilot access to labeled content.
   • BAssign Purview Data Reader role to all users, and configure an alert policy for DSPM.
   • CEnable Microsoft 365 audit logging and configure a data risk policy in DSPM.
   • DConfigure a retention policy that deletes all data after 30 days, and enable conditional access for Copilot.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   Which Microsoft 365 productivity workload setting can prevent users from sending sensitive content to an external AI chatbot?

   • AMicrosoft Entra ID conditional access policy
   • BMicrosoft 365 Defender for Office 365 anti-phishing policy
   • CMicrosoft Purview Data Loss Prevention (DLP) policy applied to Exchange Online
   • DSharePoint site sharing settings
   Reveal Solution Discussion Select an answer first