AZ-400 Develop a security and compliance plan Practice Question
Your organization is adopting GitHub Copilot for developers. Which security measure should you implement to ensure that no proprietary code is inadvertently shared with the AI model?
⚠ Common exam trap
Many exam-takers confuse security controls like network segmentation or audit logging with data loss prevention mechanisms, failing to recognize that content exclusions are the specific Copilot feature designed to prevent code from being sent to the AI model.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure content exclusions in the GitHub Copilot settings
GitHub Copilot's content exclusions allow administrators to specify files or repositories that should not be sent to the AI model for code completion suggestions. This prevents proprietary or sensitive code from being transmitted to GitHub's servers, ensuring compliance with security policies. Other options like network segmentation or audit logging do not directly block code from being shared with the AI.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use a separate network segment for development
Why it's wrong here
Network segmentation only isolates traffic at the network layer, but GitHub Copilot operates at the application layer, sending code snippets and context to GitHub's servers for suggestions. It does not prevent Copilot from processing code or modify what data is shared, so it cannot address data protection requirements.
- ✓
Configure content exclusions in the GitHub Copilot settings
Why this is correct
By configuring content exclusions, organizations can define specific repositories or files that Copilot will not access or use as context for generating suggestions, thereby preventing sensitive code from being transmitted to GitHub's AI service. This is a targeted control that directly mitigates data exfiltration risks while allowing developers to continue using Copilot for non-excluded code.
- ✗
Disable GitHub Copilot for all users
Why it's wrong here
Disabling Copilot entirely eliminates the productivity benefits and is a blunt instrument; it also fails to address the fact that developers might use unauthorized tools. A better approach is to use policy controls like content exclusions and managed user policies to allow safe usage while preventing sensitive data from being shared.
- ✗
Enable audit logging for Copilot usage
Why it's wrong here
Audit logging records Copilot activity for compliance and monitoring purposes, but it is a detective control, not a preventive one; it doesn't stop code snippets from being sent to GitHub. It should be used in conjunction with preventive controls like content exclusions to provide visibility without relying on it as the sole safeguard.
Go deeper
Related to this question
About these practice questions
One of 823 original AZ-400 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-400 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-400 exam.