A security operations center (SOC) is overwhelmed with DSPM alerts for AI services. They need to prioritize alerts that indicate actual data exfiltration. The SOC team has the Purview Data Reader role. What should they configure to reduce alert noise?

Assign the Purview Data Curator role to the SOC team.

Adjust the data risk policy thresholds and severity levels to focus on high-risk activities.

Create a retention policy that deletes old alerts.

Disable audit logging for AI services.

In Microsoft Teams, which control can be used to block users from pasting sensitive content into a chat with an AI bot?

Microsoft Purview DLP policy for Teams

Microsoft Certified:Information Security Administrator Associate

Domain 3Objective 3

Protect Data Used by AI Services SC-401 Practice Questions (Page 8)

Part of the Manage risks, alerts, and activities domain, which accounts for 30–35% of the SC-401 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 4–8 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

6concepts

30–35%of the exam

Questions 36–37

36expert · hard
A security operations center (SOC) is overwhelmed with DSPM alerts for AI services. They need to prioritize alerts that indicate actual data exfiltration. The SOC team has the Purview Data Reader role. What should they configure to reduce alert noise?
Select an answer first
37foundation · easy
In Microsoft Teams, which control can be used to block users from pasting sensitive content into a chat with an AI bot?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SC-401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-401” is a trademark of its owner, used for identification only.

Protect Data Used by AI Services SC-401 Practice Questions (Page 8)

Questions 36–37

A security operations center (SOC) is overwhelmed with DSPM alerts for AI services. They need to prioritize alerts that indicate actual data exfiltration. The SOC team has the Purview Data Reader role. What should they configure to reduce alert noise?

In Microsoft Teams, which control can be used to block users from pasting sensitive content into a chat with an AI bot?

Keep studying — Manage risks, alerts, and activities