Exam Bundle

A qualifying test interaction is retained under the relevant policy scope serves a different requirement. It does not resolve the specific issue addressed by the policy detects qualifying test AI interactions and records the effective response.

The investigator finds relevant recorded AI interactions within the authorized scope. That evidence would matter for A security controls assessment returns an unmet item: An audit team wants to search AI interaction activity during an investigation. A reviewer asks for the most direct supported remediation in the relevant Purview workload. but the current implementation is Create a supported DSPM for AI policy or linked DLP control with scoped actions. The requirement being evaluated here is: A newly assigned security administrator inherits this open requirement: A business wants to configure an AI-focused data loss prevention policy from the Purview experience. The team needs a supported control, not only a policy document.

Pilot interactions surface in relevant AI activity and risk reporting views serves a different requirement. It does not resolve the specific issue addressed by the policy detects qualifying test AI interactions and records the effective response.

Evaluating the Microsoft Purview-supported protections and workload permissions for Fabric AI experiences addresses a different classification need. It does not demonstrate a sampled interaction provides visibility into the sensitive content exposure risk.

Implementing Microsoft Purview classification and labeling at the underlying content locations does not demonstrate the classification result required here: a sampled interaction provides visibility into the sensitive content exposure risk.

Using the Microsoft Purview data security posture management for AI experience for discovery and assessment addresses a different classification need. It does not demonstrate a sampled interaction provides visibility into the sensitive content exposure risk.

A test Copilot interaction does not reveal content beyond the user's authorized access. That evidence would matter for A newly assigned security administrator inherits this open requirement: A Microsoft 365 Copilot rollout must respect document-level sensitivity labels. The team needs a supported control, not only a policy document. but the current implementation is Use supported AI activity monitoring and applicable data classification controls. The requirement being evaluated here is: A security administrator wants to identify whether generated AI responses include sensitive data.

The relevant high-risk AI activity is correlated into an eligible investigation serves a different requirement. It does not resolve the specific issue addressed by a sampled interaction provides visibility into the sensitive content exposure risk.

The AI risk dashboard identifies relevant connected apps and data exposure signals serves a different requirement. It does not resolve the specific issue addressed by a sampled interaction provides visibility into the sensitive content exposure risk.

Evaluating the Microsoft Purview-supported protections and workload permissions for Fabric AI experiences addresses a different classification need. It does not demonstrate a sampled interaction provides visibility into the sensitive content exposure risk.

Implementing Microsoft Purview classification and labeling at the underlying content locations does not demonstrate the classification result required here: a sampled interaction provides visibility into the sensitive content exposure risk.

Assigning appropriate Purview DSPM for AI roles using least privilege addresses a different data-protection mechanism. It does not provide the specific safeguard required here: use supported AI activity monitoring and applicable data classification controls.

A test Copilot interaction does not reveal content beyond the user's authorized access serves a different requirement. It does not resolve the specific issue addressed by a sampled interaction provides visibility into the sensitive content exposure risk.

The relevant high-risk AI activity is correlated into an eligible investigation serves a different requirement. It does not resolve the specific issue addressed by a sampled interaction provides visibility into the sensitive content exposure risk.

The AI risk dashboard identifies relevant connected apps and data exposure signals serves a different requirement. It does not resolve the specific issue addressed by a sampled interaction provides visibility into the sensitive content exposure risk.

Using supported data security AI activity monitoring and DLP activity evidence does not demonstrate the classification result required here: the inventory separates the intended enterprise and other ai app categories.

Configuring appropriate supported retention and compliance controls for the eligible AI interaction data addresses a different data-protection mechanism. It does not provide the specific safeguard required here: use the Purview AI application categories and connected app discovery capabilities.

Using supported AI activity monitoring and applicable data classification controls does not demonstrate the classification result required here: the inventory separates the intended enterprise and other ai app categories.

The registered AI app is discovered and applicable protection signals are available serves a different requirement. It does not resolve the specific issue addressed by the inventory separates the intended enterprise and other AI app categories.

Recorded test activity appears in scoped AI security reports serves a different requirement. It does not resolve the specific issue addressed by the inventory separates the intended enterprise and other AI app categories.

The policy detects qualifying test AI interactions and records the effective response. That evidence would matter for A newly assigned security administrator inherits this open requirement: A business wants to configure an AI-focused data loss prevention policy from the Purview experience. The team needs a supported control, not only a policy document. but the current implementation is Use the Purview AI application categories and connected app discovery capabilities. The requirement being evaluated here is: An AI governance team needs to distinguish enterprise AI tools from unmanaged consumer tools.

Using supported data security AI activity monitoring and DLP activity evidence does not demonstrate the classification result required here: the inventory separates the intended enterprise and other ai app categories.

Reviewing supported Purview AI data security controls for Entra-registered applications addresses a different data-protection mechanism. It does not provide the specific safeguard required here: use the Purview AI application categories and connected app discovery capabilities.

Configuring appropriate supported retention and compliance controls for the eligible AI interaction data addresses a different classification need. It does not demonstrate the inventory separates the intended enterprise and other AI app categories.

The registered AI app is discovered and applicable protection signals are available. That evidence would matter for A second Microsoft 365 business unit reports the following protection gap: An administrator wants to protect custom AI apps registered with Microsoft Entra. It needs a configuration that can be tested without a tenant-wide change. but the current implementation is Use the Purview AI application categories and connected app discovery capabilities. The requirement being evaluated here is: An internal audit requests technical evidence for this requirement: An AI governance team needs to distinguish enterprise AI tools from unmanaged consumer tools. The owner authorizes a limited pilot before wider enforcement.

Recorded test activity appears in scoped AI security reports serves a different requirement. It does not resolve the specific issue addressed by the inventory separates the intended enterprise and other AI app categories.

Sensitive source files receive the expected label before AI use. That evidence would matter for An AI product team asks for automatic classification of files that Copilot might read. but the current implementation is Use the Purview AI application categories and connected app discovery capabilities. The requirement being evaluated here is: An internal audit requests technical evidence for this requirement: An AI governance team needs to distinguish enterprise AI tools from unmanaged consumer tools. The owner authorizes a limited pilot before wider enforcement.

Using supported data security AI activity monitoring and DLP activity evidence addresses a different data-protection mechanism. It does not provide the specific safeguard required here: configure appropriate supported retention and compliance controls for the eligible AI interaction data.

Evaluating the Microsoft Purview-supported protections and workload permissions for Fabric AI experiences addresses a different classification need. It does not demonstrate a qualifying test interaction is retained under the relevant policy scope.

Using the Microsoft Purview data security posture management for AI experience for discovery and assessment addresses a different data-protection mechanism. It does not provide the specific safeguard required here: configure appropriate supported retention and compliance controls for the eligible AI interaction data.

A test interaction honors item access and relevant protection restrictions serves a different requirement. It does not resolve the specific issue addressed by a qualifying test interaction is retained under the relevant policy scope.

The policy detects qualifying test AI interactions and records the effective response. That evidence would matter for A newly assigned security administrator inherits this open requirement: A business wants to configure an AI-focused data loss prevention policy from the Purview experience. The team needs a supported control, not only a policy document. but the current implementation is Configure appropriate supported retention and compliance controls for the eligible AI interaction data. The requirement being evaluated here is: A legal group must retain relevant Copilot prompts and responses where supported.

The investigator finds relevant recorded AI interactions within the authorized scope serves a different requirement. It does not resolve the specific issue addressed by a qualifying test interaction is retained under the relevant policy scope.