SC-100 Certification Practice Question #259

Question

You have a Microsoft 365 subscription that contains 500 users. Each user is assigned a Microsoft 365 E5 license and uses a Windows device.

Microsoft Purview data loss prevention (DLP) policies are applied to Microsoft Exchange Online email and SharePoint Online sites.

You plan to monitor the usage of third-party generative AI apps by using Microsoft Purview Data Security Posture Management for AI (DSPM for AI).

What should you do first?

Accepted Answer

To monitor usage of *third-party* generative AI apps with DSPM for AI, MS Learn explicitly lists device onboarding as a required prerequisite — "To monitor interactions with third-party AI sites, devices must be onboarded to Microsoft Purview" and the DSPM for AI "Get started" steps lead with "Onboard devices to Microsoft Purview." Endpoint DLP and visibility into sensitive data sent to sites like ChatGPT both depend on onboarded Windows devices. Copilot licensing (D) only matters for monitoring Microsoft 365 Copilot, and Insider Risk Management (A) is an optional enhancement, not the gating first step. The Suggested Answer, the only voted comment, and MS Learn all agree on B.

More SC-100 practice questions