PL-900 Practice Question: Demonstrate the capabilities of Microsoft Copilot Studio
A company is designing a copilot using Microsoft Copilot Studio. The copilot must handle sensitive employee data. Which TWO actions should the administrator take to ensure data security and compliance?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure data loss prevention (DLP) policies to restrict data movement
The correct answers are B and D. Option B: Configuring Data Loss Prevention (DLP) policies helps restrict the movement of sensitive employee data, preventing unauthorized sharing or leakage. Option D: Turning off the 'Data for training' option ensures that employee data is not used to train the underlying AI model, maintaining data privacy and compliance. Option A is incorrect because enabling anonymous access would expose sensitive data to external users without authentication, increasing security risks. Option C is incorrect as disabling authentication removes access controls, making data vulnerable. Option E is incorrect because adding public websites as knowledge sources could introduce untrusted content and expose sensitive data externally.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable anonymous access to allow external users
Why it's wrong here
Anonymous access increases risk for sensitive data.
- ✓
Configure data loss prevention (DLP) policies to restrict data movement
Why this is correct
DLP policies help secure sensitive data.
- ✗
Disable authentication to simplify access
Why it's wrong here
Disabling authentication reduces security.
- ✓
Enable the 'Data for training' option to be turned off
Why this is correct
Turning off data for training ensures organizational data isn't used for model improvement.
- ✗
Add public websites as knowledge sources
Why it's wrong here
Public websites are not secure for sensitive data.
Go deeper
Related to this question
About these practice questions
This PL-900 question is part of Courseiva's 904-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PL-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PL-900 exam.