Pass Your Microsoft AB-900 Exam Easy!

Assessment templates map controls to a selected framework. It is used for regulation-specific control assessment; this scenario calls for regulatory readiness progress.

Improvement actions can track implementation evidence for assessment controls. That addresses documented proof of a compliance control, whereas the current case requires regulatory readiness progress.

The assessment assigns responsibility for relevant controls. It is used for responsibility partition for assessed controls; this scenario calls for regulatory readiness progress.

Activity explorer records supported label events and associated actors. Its purpose is activity behind an actual label downgrade; the specified need is sensitive information in AI prompts.

eDiscovery search selects responsive content for a case. Its purpose is litigation-driven content collection; the specified need is sensitive information in AI prompts.

Data classification inventory identifies matching content in covered workloads. It would support discovery of stored sensitive content, not the stated sensitive information in AI prompts.

Insider risk correlates configured risky user actions. This helps with suspected departing-employee exfiltration instead of the required fewer false-positive user-risk cases.

Privacy-aware insider risk limits exposed personal identity data during triage. The action is relevant to privacy-protecting investigation rather than fewer false-positive user-risk cases.

Case closure records the disposition and investigator rationale. The action is relevant to auditable disposition of employee-risk alert rather than fewer false-positive user-risk cases.

DLP monitoring supports accountable follow-up on repeated violations. It is used for repeated data-loss incident response; this scenario calls for narrowly authorized protected-data sharing.

Alert details identify the sensitive type, location and enforcement reason. That addresses evidence for a sensitive outbound email block, whereas the current case requires narrowly authorized protected-data sharing.

Simulated matches allow validation before production enforcement. It is used for impact testing of a new DLP rule; this scenario calls for narrowly authorized protected-data sharing.

Role-controlled review limits access to sensitive conversation content. Its purpose is protected access to communications investigations; the specified need is accountable escalation of flagged messages.

Communication Compliance surfaces supported risky messages to authorized reviewers. It would support conduct-related Teams message review, not the stated accountable escalation of flagged messages.

Narrower detection criteria can improve review precision. Its purpose is tuned employee communication policy; the specified need is accountable escalation of flagged messages.

AI activity telemetry includes supported rule-match events and metadata. The action is relevant to Copilot DLP trigger timeline rather than sites creating broad sharing links.

Case-based discovery locates responsive items and preserves review controls. The action is relevant to formal litigation content collection rather than sites creating broad sharing links.

Activity explorer records content classification actions over time. This helps with temporal label-usage evidence instead of the required sites creating broad sharing links.

AI posture management surfaces supported app usage and sensitive-data risk patterns. That addresses unsanctioned AI exposure insight, whereas the current case requires AI-specific data loss prevention.

Assessments identify and prioritize risky AI processing conditions. It is used for prioritized sensitive prompt exposure response; this scenario calls for AI-specific data loss prevention.

Activity detail offers contextual evidence subject to permission and capture rules. It is used for specific risky AI interaction evidence; this scenario calls for AI-specific data loss prevention.

Case segregation controls evidence scope and reviewer authority. Its purpose is distinct legal matter boundaries; the specified need is litigation search across AI conversations.

eDiscovery identifies responsive records using case search conditions. It would support targeted email discovery, not the stated litigation search across AI conversations.

Hold preserves covered content for legal collection. Its purpose is litigation preservation before review; the specified need is litigation search across AI conversations.

Monitoring converts historical event data into actionable detection. The action is relevant to timely reaction to concerning activity rather than historical mailbox-rule mutation evidence.

Audit event records attribute supported administrative operations. This helps with actor for an access-permission change instead of the required historical mailbox-rule mutation evidence.

AI interaction audit records provide relevant usage evidence. The action is relevant to time evidence of Copilot activity rather than historical mailbox-rule mutation evidence.

Disposition review inserts accountable review into content deletion. It is used for approved records destruction; this scenario calls for governed data incident follow-up.

Assessment tasks track required control maturity and remediation. It is used for recurring regulatory assessment; this scenario calls for governed data incident follow-up.

Site owners can confirm needed access without security staff guessing business relationships. That addresses owner-driven oversharing remediation, whereas the current case requires governed data incident follow-up.

AI-aware DLP can inspect and control supported content exchanges. It would support sensitive prompt leakage prevention, not the stated traceable sensitive Copilot activity.

AI posture reporting combines supported usage patterns with sensitive data findings. Its purpose is AI adoption-associated data risk context; the specified need is traceable sensitive Copilot activity.

AI grounding respects effective source permissions; oversharing is a source governance fault. Its purpose is prevention of unauthorized AI source discovery; the specified need is traceable sensitive Copilot activity.