Module assessment

1.

The administrator wants to configure data loss prevention (DLP) to block the Security Copilot agent from sharing exfiltrated data. What should they do?

Add the Security Copilot agent instance to an existing DLP policy's user scope.

Create a new DLP policy specifically for Security Copilot agents with exfiltration conditions.

Configure Insider Risk Management or communication compliance to detect the risk instead, because DLP isn't available for this agent type.

2.

The administrator checks the Agent 365 instance and finds it has no policy coverage. However, audit events for the agent's interactions are already appearing in Activity Explorer. Why?

Auditing, data classification, and Compliance Manager assessments activate automatically when an Agent 365 instance is created. No configuration is needed for these three capabilities.

Someone already configured an audit policy for this agent instance.

Agent 365 instances inherit audit coverage from their parent app's existing policies.

3.

The administrator adds the Agent 365 instance to a DLP policy and a sensitivity label grants encryption using 'Add all users and groups in your organization.' The agent still can't access encrypted files. What must be addressed to resolve the access failure?

Only the file sharing requirement. The agent instance needs explicit access to the files through sharing.

Both the encryption permissions and file sharing. The label must explicitly grant the agent instance VIEW and EXTRACT rights, and the files must be explicitly shared with the agent.

Only the encryption permissions. Replacing 'all users and groups' with the specific agent instance resolves the issue.

4.

After configuring DLP for the Agent 365 instance, the policy matches and blocks a sensitive interaction. The agent owner reports the agent is producing incomplete results but no one received a notification. What's happening?

The DLP policy is misconfigured and should be generating user notifications.

The agent needs to be removed from the DLP policy scope because blocking breaks agent functionality.

The block action prevented the data from being shared, but Agent 365 instances don't receive block notifications. The agent owner needs DLP alert notifications to detect these situations.

5.

The Copilot Studio agent is generating sensitive responses in Teams. The administrator wants to detect inappropriate content in those interactions. Which approach is correct?

Configure a communication compliance policy with the Microsoft Copilot experiences location selected to detect inappropriate content in agent interactions.

Add the Copilot Studio agent instance to an Insider Risk Management policy using the Risky AI usage template.

Configure a DLP policy with sensitive information type conditions to block sensitive responses.

Check your knowledge

Feedback