AB-100: Agentic AI Business Solutions Architect › Practice Assessment for Exam AB-100: Agentic AI Business Solutions Architect › Question #26614
Single Choice Moderate

Q

A company has a Microsoft Copilot Studio agent in Microsoft Teams that answers HR policy questions by grounding responses in Microsoft SharePoint Online documents.

Some documents are labeled as Highly Confidential and only certain HR users are authorized to access the documents.

Testing shows that the agent can process and summarize Highly Confidential files. The company's security team requires that the agent NOT process content labeled Highly Confidential, even when a user has access.

You need to recommend a security solution to ensure that the agent enforces this restriction.

What should you recommend?

ID: #26614 Practice Assessment for Exam AB-100: Agentic AI Business Solutions Architect 8 views
Question Info
#26614Q ID
ModerateDifficulty
Practice Assessment for Exam AB-100: Agentic AI Business Solutions ArchitectTopic
Start Quiz on This Topic
 Your Answer

Choose the Best Option

Click any option to instantly check if you're correct.

  • A Enable Copilot Studio transcript logging in Microsoft Dataverse. ✔ ✖
  • B Create a Microsoft Purview retention policy scoped to Copilot experiences. ✔ ✖
  • C Rely on user context so that SharePoint permissions and sensitivity labels are honored. ✔ ✖
  • D Create a Microsoft Purview data loss prevention (DLP) policy scoped to Microsoft 365 Copilot that blocks the processing of SharePoint content labeled Highly Confidential. ✔ ✖
Correct Answer

Explanation

Objective:

3.4 Design responsible AI, security, governance, risk management, and compliance

What This Item Tests:

Design security for agents

Additional Reading:

Secure AI agents built in Copilot Studio

Data governance and compliance

Data privacy and security

Secure your Copilot Studio projects

Rationale:

A Microsoft Purview DLP policy scoped to Microsoft 365 Copilot can prevent Copilot from processing SharePoint content that has specific sensitivity labels, enforcing agent-level security controls regardless of user permissions. Retention policies and transcript logging do not restrict content processing, and relying on user context alone does not meet the requirement to block Highly Confidential data from being handled by the agent.

 Continue Practice
Previous Question Next Question
 Share

Share This Question

Challenge a friend or share with your study group.

 More from This Topic

Related MCQ Questions

A company has a multi-agent solution built in Microsoft Foundry. The solution grounds responses in internal HR documents and uses agent tools to call internal and external systems. Security testing shows that ... A company has a Microsoft Copilot Studio agent grounded in a Microsoft SharePoint Online knowledge source. After adding new knowledge documents and updating the agent instructions, responses to the same user q... A company has two production agents: One is built in Microsoft Copilot Studio, and the other is built in Microsoft Foundry. Both agents send telemetry to the same Azure Monitor Application Insights resource. U... A company has a Microsoft Copilot Studio agent that performs browser-based automation against a legacy web app by using the Computer Use tool. When multiple users trigger the automation simultaneously, some ru... A company uses Microsoft Dynamics 365 Sales with a custom model-driven app that sellers use instead of the standard Sales Hub app. The sellers cannot open the Copilot immersive experience from the custom app n... A company uses an agent built in Microsoft Foundry that retrieves internal content and invokes tools to perform actions. Security testing shows that prompt injection attacks can trigger unauthorized tool calls... A company has a customer service agent built in Microsoft Foundry that calls an Azure OpenAI model and a knowledge API. Telemetry and online evaluation scores are sent to Azure Monitor Application Insights. Us... A company plans to roll out an IT help desk agent that will be available in Microsoft Teams and Microsoft 365 Copilot. The agent must meet the following requirements: Answer questions grounded in Microsoft... A company has multiple Microsoft Copilot Studio agents that create and update service desk tickets by calling an internal ITSM API. The same ticketing actions must be shared across all agents, and the API sche... A company has a Microsoft Copilot Studio agent that generates a daily incident summary from a user-provided transcript and incident data stored in a Microsoft Dataverse table. The response must always be forma...