Module Assessment

1.

A security administrator at Northwind Traders wants to assess whether the company is meeting regulatory expectations for using generative AI tools like ChatGPT Enterprise. Which Microsoft Purview capability should they use?

Insider Risk Management

Data Security Posture Management (DSPM) for AI

Compliance Manager with AI regulation templates

2.

At Contoso Ltd., a compliance officer notices users are pasting sensitive content into public AI tools like Gemini. They want to restrict this behavior only for high-risk users. What should they implement?

A DLP policy with Adaptive Protection

A static DLP policy for all users

A Communication Compliance policy with escalation enabled

3.

Fabrikam wants to detect when employees are using AI tools in ways that might involve regulated or sensitive information, such as submitting client data in prompts. Which Purview tool is designed to flag this behavior?

Retention policies for enterprise AI apps

Insider Risk Management using the Risky AI usage policy

Microsoft Defender for Endpoint

4.

A reviewer at Woodgrove Bank is examining matches flagged by a Communication Compliance policy applied to public AI apps. What kind of content is most likely to trigger a match?

Browsing history showing visits to AI-related websites

Unusual system access patterns across Microsoft Entra ID

A prompt that includes sensitive data or violates company policy

5.

Tailspin Toys uses a collection policy to capture prompts and responses from public AI tools. What must happen before Microsoft Purview retention policies can apply to this content?

The content must be copied to a hidden folder in the user's Exchange mailbox

The AI tool must be registered with Microsoft Entra ID

The user must manually tag the content for compliance

Check your knowledge

Feedback