AB-100: Agentic AI Business Solutions Architect › Practice Assessment for Exam AB-100: Agentic AI Business Solutions Architect › Question #26612
Single Choice Moderate

Q

A company uses Microsoft 365 Copilot and a third-party agent.

The company has Microsoft SharePoint Online content that is protected by using Microsoft Purview sensitivity labels that restrict programmatic access.

Security testing shows that users can paste regulated content into Copilot prompts and ask the agent to summarize and share the content externally.

You need to recommend a solution that mitigates prompt misuse, enforces data access controls, and supports the investigation and retention of Copilot interactions.

What should you recommend?

ID: #26612 Practice Assessment for Exam AB-100: Agentic AI Business Solutions Architect 8 views
Question Info
#26612Q ID
ModerateDifficulty
Practice Assessment for Exam AB-100: Agentic AI Business Solutions ArchitectTopic
Start Quiz on This Topic
 Your Answer

Choose the Best Option

Click any option to instantly check if you're correct.

  • A Rely on the privacy terms of the third-party agent and rewrite the prompt instructions. ✔ ✖
  • B Enable web search connected experiences and export Microsoft Teams chat logs for retention. ✔ ✖
  • C Disable connected experiences in Microsoft 365 Apps and rely on users to clear the Copilot history. ✔ ✖
  • D Rely on Copilot permission trimming and Microsoft Purview Information Protection usage rights and use Microsoft Purview to search and retain Copilot interaction records. ✔ ✖
Correct Answer

Explanation

Objective:

3.4 Design responsible AI, security, governance, risk management, and compliance

What This Item Tests:

Analyze solution and AI vulnerabilities and mitigations, including prompt manipulation

Additional Reading:

Additional information

Best practices for prompt instructions

Rationale:

Using Microsoft 365 Copilot permission trimming together with Information Protection usage rights enforces access boundaries that prevent protected content from being processed, while Microsoft Purview enables the investigation and retention of Copilot prompts and responses. User-managed deletion, chat log exports, and prompt wording changes do not reliably mitigate prompt manipulation or enforce data protection controls.

 Continue Practice
Previous Question Next Question
 Share

Share This Question

Challenge a friend or share with your study group.

 More from This Topic

Related MCQ Questions

A company has two production agents: One is built in Microsoft Copilot Studio, and the other is built in Microsoft Foundry. Both agents send telemetry to the same Azure Monitor Application Insights resource. U... A company has a multi-agent solution built in Microsoft Foundry. The solution grounds responses in internal HR documents and uses agent tools to call internal and external systems. Security testing shows that ... A company has a Microsoft Copilot Studio agent that performs browser-based automation against a legacy web app by using the Computer Use tool. When multiple users trigger the automation simultaneously, some ru... A company uses Microsoft Dynamics 365 Sales with a custom model-driven app that sellers use instead of the standard Sales Hub app. The sellers cannot open the Copilot immersive experience from the custom app n... A company uses an agent built in Microsoft Foundry that retrieves internal content and invokes tools to perform actions. Security testing shows that prompt injection attacks can trigger unauthorized tool calls... A company has a Microsoft Copilot Studio agent grounded in a Microsoft SharePoint Online knowledge source. After adding new knowledge documents and updating the agent instructions, responses to the same user q... A company has a customer service agent built in Microsoft Foundry that calls an Azure OpenAI model and a knowledge API. Telemetry and online evaluation scores are sent to Azure Monitor Application Insights. Us... A company plans to roll out an IT help desk agent that will be available in Microsoft Teams and Microsoft 365 Copilot. The agent must meet the following requirements: Answer questions grounded in Microsoft... A company has multiple Microsoft Copilot Studio agents that create and update service desk tickets by calling an internal ITSM API. The same ticketing actions must be shared across all agents, and the API sche... A company has a Microsoft Copilot Studio agent that generates a daily incident summary from a user-provided transcript and incident data stored in a Microsoft Dataverse table. The response must always be forma...