SC-100 Certification Practice Question #257

Question

You have a Microsoft 365 subscription.

Microsoft Purview is configured to protect data in only Microsoft Exchange Online and SharePoint Online. Custom sensitive information types (SITs) have been created to identify confidential data.

You discover that users access third-party generative AI websites from their Windows devices. You need to recommend a solution to block AI prompts that contain confidential data and scan the AI prompts submitted to the third-party websites.

What should you recommend for each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

MS Learn's "Microsoft Purview data security protections for generative AI apps" states directly that **Endpoint Data Loss Prevention** is the solution that warns or blocks users from sharing sensitive info with third-party generative AI sites in a browser — that fixes Row 1 to Data loss prevention. The same docs establish the prerequisite that this only works on **Windows computers that are onboarded to Microsoft Purview** (device onboarding), which is precisely what enables the endpoint to scan/inspect the AI prompts — fixing Row 2 to "Onboard each device to Microsoft Purview." Every other Row 1 option (information barriers, information protection, insider risk management) is a different Purview pillar that does not block prompt submission, and every other Row 2 option targets a different surface (Copilot licensing, on-prem IP scanner, data connector ingestion). The top community answer matches exactly. Confidence is 88% (not higher) because no official Suggested Answer is published and the second commenter's bare "C" is unmapped, but MS Learn unambiguously supports both selections.

More SC-100 practice questions