Your organisation stores customer records in SharePoint and plans to let users query them through agents. You want to stop users from accidentally…

Question breakdown

Tests

Use Microsoft Purview DLP to protect sensitive data in Copilot interactions

Difficulty

Easy

Key idea: Purview DLP policies use sensitive information types such as credit card numbers to detect and block risky sharing, including in Copilot and agent interactions.

How to reach the answer

1. The data to protect is credit card numbers, a built-in sensitive information type.
2. The goal is to block exfiltration in real time while still allowing internal viewing.
3. Real-time detection and blocking of sensitive data is the job of DLP.
4. Retention, mail flow, and spam controls don't cover Copilot interactions in this way.

Each option

• AIncorrect. Mail flow rules apply only to Exchange email transport, not to Copilot or agents.
• BCorrect. DLP policies detect sensitive information types and can block or warn when users try to share them, including in Copilot locations.
• CIncorrect. Retention labels control how long content is kept, not whether it can be shared.
• DIncorrect. Spam filtering targets junk and malicious email, not sensitive data leaving the organization.

Common trap: Mail flow rules can block credit card numbers in email, which makes them feel applicable, but they don't reach Copilot or agent interactions.

In practice: Organizations add the Microsoft 365 Copilot location to DLP policies so sensitive content such as payment card data isn't processed or shared inappropriately through Copilot.

Remember: To stop sensitive data from leaving through Copilot or agents, configure Purview DLP policies.

Official documentation: Learn about data loss prevention

Drafted with AI assistance and checked against the answer key.