AB-100 Certification Practice Question #51

Question

A company has Microsoft 365 Copilot agents.
You need to design a security solution for the agents. The solution must meet the following requirements:
Identify and mitigate potential risks that relate to AI use.
Protect AI apps and the sensitive data processed or generated by the agents.
Support responsible AI governance by retaining and logging interactions, detecting policy violations, and investigating incidents.
Which two components should you include in the design? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

Accepted Answer

For M365 Copilot agents: Microsoft Purview covers the full governance layer — it retains and audits interactions, enforces DLP policies, detects policy violations, and enables compliance investigations (directly matching requirements 2 and 3). Microsoft Defender provides real-time risk identification and mitigation for AI apps, protecting agents and the sensitive data they process (requirement 1 and 2). Newb007's minority view (Azure AI Content Safety) is more relevant to Foundry/Azure-hosted models, not M365 Copilot agents.

More AB-100 practice questions