AB-900 Certification Practice Question #40

Question

Your organization has a Microsoft 365 subscription.
All users are assigned Microsoft 365 Copilot licenses.
Some users report receiving Copilot responses that contain information from a Microsoft SharePoint site named Finance. The users report that the information is commercially sensitive.
You need to prevent Copilot from providing responses that contain information from the Finance site.
What should you do?

Accepted Answer

Copilot only returns content the **signed-in user is permitted** to see (it reasons over Microsoft Graph honoring SharePoint/file permissions). The direct fix is therefore to **configure permissions on the Finance site** so unauthorized users lose access — Copilot then can't surface Finance content for them. Information Barriers governs collaboration between user segments, a Defender data connector ingests external signals, and Conditional Access controls sign-in conditions — none removes Copilot's grounding on the site's data.

More AB-900 practice questions