AZ-400 Develop a security and compliance plan Practice Question
Your organization is adopting GitHub Copilot and wants to ensure that no proprietary code is used to train models. Which setting should you configure in the GitHub organization?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Opt out of allowing GitHub to use code snippets for product improvement.
GitHub provides an organization-level setting to opt out of allowing GitHub to use code snippets for product improvement, which prevents Copilot from training on that code. Option A is incorrect because secret scanning is unrelated to model training. Option B is incorrect because Dependabot alerts focus on dependency vulnerabilities, not data usage. Option C is incorrect because disabling Copilot prevents its use but does not address the underlying data usage for training; the organization may still want to use Copilot while preventing training on proprietary code.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable secret scanning.
Why it's wrong here
Secret scanning is a security feature that identifies exposed credentials such as API keys or tokens in repositories. It does not govern how GitHub Copilot uses or trains on your source code, so enabling it cannot prevent your snippets from being used as training data.
- ✗
Enable Dependabot alerts.
Why it's wrong here
Dependabot alerts monitor dependencies for known vulnerabilities and notify you of security risks. They have no effect on GitHub's data-usage policies for Copilot, so they cannot stop GitHub from using your code snippets for product improvement or model training.
- ✗
Disable GitHub Copilot for the organization.
Why it's wrong here
Disabling GitHub Copilot for the entire organization would indeed prevent any use of the tool, but it is overly restrictive if you want to keep using it. The precise control is to opt out of allowing GitHub to use your code snippets for product improvement, which allows use while protecting your training-data interests.
- ✓
Opt out of allowing GitHub to use code snippets for product improvement.
Why this is correct
Opting out of allowing GitHub to use code snippets for product improvement is the exact setting that prevents Copilot from using your code as training data. This is the correct action when you want to retain Copilot's functionality while ensuring your proprietary code is not used to improve the model.
Go deeper
Related to this question
About these practice questions
Courseiva writes every AZ-400 question from scratch — 823 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-400 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-400 exam.