Question 490
A regulatory policy requires no exception when an eligible user attempts to send certain data to an AI site. Which response most directly addresses the stated need?
Explanation
Correct Answer
Strict blocking forbids continuation after the AI-site DLP match. It directly meets the case's requirement to hard-block classified AI-site transfers.
Incorrect Answers
Insider Risk Management supports investigating eligible risky AI interactions over time. That would score AI behavioral risk; the question instead requires a way to hard-block classified AI-site transfers.
Risk-based device DLP can apply stronger supported restrictions to elevated-risk users. That would adapt AI-site protection to insider risk; the question instead requires a way to hard-block classified AI-site transfers.
Less disruptive actions collect evidence and explain risk during controlled introduction. That would pilot user-facing AI-site warnings; the question instead requires a way to hard-block classified AI-site transfers.





Administering Information Security in Microsoft 365 (SC-401) Practice Tests