Question 460
Employees paste regulated customer details into third-party generative AI websites on managed devices. Which response most directly addresses the stated need?
Explanation
Correct Answer
Device DLP can warn or block protected data entered into supported AI web workflows. It directly meets the case's requirement to prevent sensitive prompts to third-party AI sites.
Incorrect Answers
AI posture reporting surfaces usage and sensitive-data risk insights. That would monitor organizational AI usage patterns; the question instead requires a way to prevent sensitive prompts to third-party AI sites.
Audit and discovery capabilities provide investigation access to eligible recorded AI interactions. That would investigate historical AI prompt content; the question instead requires a way to prevent sensitive prompts to third-party AI sites.
Risky AI usage policies score supported AI-related insider activities. That would investigate risk from employee AI interactions; the question instead requires a way to prevent sensitive prompts to third-party AI sites.





Administering Information Security in Microsoft 365 (SC-401) Practice Tests