Design solutions that align with security best practices and priorities →hardMultiple ChoiceObjective-mapped
SC-100 Practice Question: Design solutions that align with security best practices and priorities
A company is designing a security strategy for their AI-powered applications using Microsoft Azure OpenAI Service. They need to ensure that the AI models are not used to generate harmful content and that the data sent to the models is protected. Which Microsoft Purview feature should they use?
⚠ Common exam trap
Test-takers frequently confuse general data protection features (like Information Protection or Endpoint DLP) with the specialized AI-focused DLP capability, assuming any DLP or protection feature can handle AI workloads, when only DLP for AI is purpose-built for Azure OpenAI Service interactions.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Purview Data Loss Prevention (DLP) for AI
Microsoft Purview Data Loss Prevention (DLP) for AI is the correct feature because it is specifically designed to monitor and control the data sent to and from AI applications, including Azure OpenAI Service, to prevent the generation of harmful content and protect sensitive data. It uses deep content analysis and policy-based controls to detect and block policy violations in real-time, directly addressing the dual requirements of content safety and data protection.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Purview Endpoint DLP
Why it's wrong here
Microsoft Purview Endpoint DLP is designed to protect data on user endpoints such as Windows and macOS devices. It monitors files and clipboard operations but has no visibility into cloud-based AI services, so it cannot intercept or block sensitive data typed into AI prompts or returned in AI responses. Its scope is device-resident data, not the AI interaction channel.
- ✗
Microsoft Purview Information Protection
Why it's wrong here
Microsoft Purview Information Protection focuses on classifying and labeling documents and emails using sensitivity labels, enabling downstream governance like encryption or access restrictions. It does not provide real-time detection or enforcement for AI services, meaning it cannot inspect an AI prompt for credit card numbers or block a harmful response. Labeling is a prerequisite for protection, not an active control in the AI context.
- ✓
Microsoft Purview Data Loss Prevention (DLP) for AI
Why this is correct
Microsoft Purview Data Loss Prevention (DLP) for AI extends DLP policies to AI services, allowing administrators to detect sensitive information—like financial, health, or personal data—within user prompts and AI-generated responses. It can enforce real-time actions such as blocking or warning users when sensitive data is exchanged, and it integrates with services like Microsoft Copilot. This makes it the only option that actively prevents harmful content from being processed or generated in AI interactions.
- ✗
Microsoft Purview Audit
Why it's wrong here
Microsoft Purview Audit records user and admin activities across Microsoft 365 services, providing a searchable log for forensic investigation and compliance reporting. It is a passive tool that captures actions after they occur, with no capability to block or intercept AI prompts or responses in real time. While useful for post-incident analysis, it cannot serve as a preventive control for harmful content.
Go deeper
Related to this question
About these practice questions
One of 208 original SC-100 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-100 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-100 exam.