Welcome back, Suleiman!

74% on your last practice assessment β€” just below the 82% pass mark. Study each section below, then test yourself with 40 scenario-based practice questions.

8
Sections
24
MS Questions
40
Practice Q's
0
Points
πŸ“

Practice Quiz Bank

40 scenario-based questions across 8 topics β€” modelled on the AB-731 exam style. Each question is new, not from the study sections.

8 quizzes Β· 5 questions each Β· Tap to open Quiz Hub
Study Sections
πŸ—οΈ

Azure AI Foundry

What Foundry is, RBAC vs anonymous access, Marketplace billing, classifying feedback.

SS1 Β· SS2 Β· SS3 Β· SS4 Β· SS15
βš–οΈ

Responsible AI β€” FAITHP

Microsoft's 6 principles. Covers Q17–Q25 β€” 4–5 exam questions in one framework.

SS5 Β· SS6 Β· SS7 Β· SS9 Β· SS10 Β· HIGH PRIORITY
🧠

Pretrained vs Fine-Tuned vs RAG

Building analogy, pharmaceutical scenario, Copilot Agent vs Foundry.

SS19 Β· SS21 Β· SS22
πŸ›οΈ

AI Governance

AI Council vs AI Champions β€” differences, Nigerian examples, deployment design.

SS8 Β· SS12 Β· SS16 Β· SS24
πŸ”—

Azure AI Ecosystem

Three-layer model: Azure AI β†’ Foundry β†’ Copilot. Customer data rules.

SS13 Β· SS14
πŸ›‘οΈ

Purview & Entra Security

Purview DLP, sensitivity labelling, Entra identity, Conditional Access.

SS18 Β· SS23
πŸ”‘

Copilot Licensing

Per-user licences, pay-as-you-go vs prepaid capacity, what is NOT in M365 plans.

SS11
⚠️

AI Challenges

Fabrication vs Hallucination vs Reliability vs Bias β€” exam discrimination rules.

SS17
πŸ“ Practice Quiz Bank

40 Practice Questions

All questions are new and scenario-based β€” different from the study section examples. Each quiz has 5 questions testing a specific topic. Aim for 4/5 before sitting the exam.

πŸ—οΈ Section 1 β€” Azure AI Foundry
Section 1 Β· SS1, SS2, SS3, SS4, SS15

Microsoft Azure AI Foundry

You struggled with what Foundry is, why it exists, and how its parts connect. Each original Microsoft Learn question is shown first, then your comment, then the full explanation.

SS1 Β· Q13

What is Microsoft Azure AI Foundry?

πŸ“‹ Original Microsoft Learn Question
Question 13 of 50
You are evaluating Microsoft Foundry for enterprise generative AI initiatives. Which two benefits of Foundry should you highlight to stakeholders? Each correct answer presents part of the solution.
Select TWO correct answers:
βœ“access to foundation models from multiple providers in a single environment
β—‹the ability to scale AI deployments across regions and business units
β—‹the automatic replacement of legacy business applications
βœ“the need to train custom models for every solution
β—‹use of public shared datasets for enterprise model training
Your comment (SS1): Explain to me what this Microsoft Foundry mean, why did Microsoft create it, what problem is it solving? Use layman language with analogy.
The Shopping Mall Analogy

Before Azure AI Foundry, building enterprise AI meant going to many different vendors. Azure AI Foundry is the shopping mall β€” Microsoft brought everything into ONE platform: models from OpenAI, Meta, Mistral; testing tools; security controls; and deployment systems.

KEY DISTINCTION: Azure AI Foundry = where organisations BUILD their own AI. Microsoft 365 Copilot = the ready-made AI assistant for daily work. Never confuse them on the exam.
EXAM TIP: "Building enterprise AI," "models from multiple providers," "centralised AI governance" β†’ answer points to Foundry, not Copilot.
SS2 Β· Q14

The Key Benefit of Foundry

πŸ“‹ Original Microsoft Learn Question
Question 14 of 50
You need to explain the value of Microsoft Foundry to stakeholders. Which statement accurately describes a key benefit of Foundry?
Select ONE correct answer:
β—‹Provides tools for automating business processes with AI without requiring AI models.
β—‹Supports building custom AI models by using open-source development frameworks only.
β—‹Focuses primarily on delivering AI capabilities within Microsoft 365 productivity apps.
βœ“Enables the centralised management and governance of AI solutions across an organization.
Your comment (SS2): I believe the last answer is correct, but I don't know why β€” can you explain in very simple terms?

The biggest benefit of a shopping mall is ONE management office, ONE security team, ONE set of rules for everyone. Foundry gives your organisation ONE place to approve, monitor, and enforce AI policy.

βœ—Foundry absolutely requires AI models β€” option A is factually false.
βœ—Foundry supports many frameworks beyond open-source β€” option B is false.
βœ—M365 productivity apps = Copilot's job, not Foundry β€” option C is wrong tool.
βœ“Centralised management and governance β€” CORRECT. This is Foundry's core value.
EXAM TIP: Any Foundry "benefit" question β†’ governance, centralisation, multi-provider model access. Answers about M365 apps belong to Copilot.
SS3 Β· Q15

Security in Foundry β€” RBAC vs Anonymous Access

πŸ“‹ Original Microsoft Learn Question
Question 15 of 50
You are evaluating Microsoft Foundry for building enterprise AI solutions. Which statement accurately describes a security benefit of using Foundry?
Select ONE correct answer:
β—‹Automatically shares model outputs across all linked Microsoft 365 tenants.
β—‹Requires that all enterprise data be copied into a public training dataset.
βœ“Enables integration with Microsoft Entra ID to enforce role-based access control (RBAC).
β—‹Enables anonymous access to AI models for public-facing use cases, while retaining data security.
Your comment (SS3): The answer is between option 3 and 4 β€” how do I ensure I do not confuse them in the final exam?
MEMORY TRICK: Ask yourself β€” "Does this sound like enterprise security or public internet access?" RBAC via Entra ID = enterprise control. Anonymous = no identity, no control β€” a CBN violation for any Nigerian bank.
EXAM TIP: When you see "anonymous access" in an enterprise AI security question, eliminate it immediately. Enterprise always requires identity-based access.
SS4 Β· Q16

Foundry Capabilities β€” Classifying Customer Feedback

πŸ“‹ Original Microsoft Learn Question
Question 16 of 50
You are using Microsoft Foundry to design a solution for a company. The company needs to automatically classify customer feedback as positive, neutral, or negative. Which Foundry capability should you select?
Select ONE correct answer:
β—‹Azure Language in Foundry Tools
β—‹an Azure OpenAI model deployed to Foundry
βœ“a custom classification model built in Foundry
β—‹Azure AI Search with semantic ranking in Foundry Tools
Your comment (SS4): I don't know this answer β€” can you explain all 4 options and draw a simple Foundry architecture?
AAzure Language β€” pre-built general-purpose sentiment. Too generic for 3-category custom classification.
BAzure OpenAI GPT-4 β€” powerful but expensive for high-volume repetitive daily classification tasks.
C βœ“Custom classification model in Foundry β€” CORRECT. SPECIFIC + REPETITIVE + AUTOMATED with YOUR labelled data.
DAzure AI Search β€” finds information in documents; does not classify messages.

Foundry Architecture β€” 3 Layers

1

Models Layer

GPT-4, Llama, Mistral, custom models β€” the AI brains.

2

Tools Layer

Azure Language, Azure AI Search, custom training pipelines.

3

Governance Layer

Microsoft Entra ID (RBAC), content filters, monitoring dashboards.

EXAM TIP: SPECIFIC + REPETITIVE + AUTOMATED with your own data = custom model in Foundry. GENERAL + one-off = prebuilt model.
SS15 Β· Q31

Copilot Studio + Partner Models β€” Azure Marketplace Fix

πŸ“‹ Original Microsoft Learn Question
Question 31 of 50
Your company plans to pilot Microsoft Copilot Studio for customer support and deploy a protected partner model from Microsoft Foundry Models by using the same Azure subscription. During deployment, you receive a notification that the subscription is NOT authorized for partner model purchases. You need both initiatives to use pay-as-you-go billing with the existing Azure subscription without changing billing models. What should you do?
Select ONE correct answer:
β—‹Switch the model deployment to prepaid Azure capacity.
β—‹Create a new Azure subscription dedicated to AI workloads.
βœ“Enable Azure Marketplace purchases for the existing Azure subscription.
β—‹Purchase Copilot Studio message packs instead of pay-as-you-go billing.
Your comment (SS15): I do not even understand the question β€” breakdown the answer and draw a diagram showing the relationships.
βœ—Prepaid capacity β€” changes billing model. Question says NOT to do this.
βœ—New subscription β€” question says use the EXISTING subscription.
βœ“Enable Azure Marketplace purchases β€” partner models are sold through Marketplace. "Not authorised" = Marketplace disabled by IT security policy.
βœ—Copilot Studio message packs β€” only addresses Copilot Studio billing, not the partner model problem.
EXAM TIP: "Not authorised for partner model purchases" error β†’ always fix by enabling Azure Marketplace purchases on the existing subscription.
πŸ”‘ Section 2 β€” Copilot Licensing
Section 2 Β· SS11

Microsoft 365 Copilot Licensing

You did not know the answer and asked for resources. This section clears it up completely.

SS11 Β· Q27

M365 Copilot Licensing Options

πŸ“‹ Original Microsoft Learn Question
Question 27 of 50
Select the answer that correctly completes the sentence. Microsoft 365 Copilot licensing options include [Target_A].
Select ONE correct answer:
β—‹pay-as-you-go billing and per-user subscription licences
βœ“per-device perpetual licences and pay-as-you-go billing
β—‹prepaid server licences and annual device subscriptions
β—‹usage included automatically with all Microsoft 365 plans
Your comment (SS11): I do not know the answer. I suspect it is per-user subscription. Please find YouTube or Microsoft Learn resources.

M365 Copilot is licensed per individual user β€” each person needs their own Copilot licence added to an eligible M365 subscription. Same model as Office 365 β€” per person, not per device.

ProductBilling ModelKey Rule
M365 CopilotPer-user add-on licenceNOT included in any standard M365 plan β€” must purchase separately
Azure OpenAIPay-as-you-go (tokens)Charged per 1,000 tokens consumed
Foundry partner modelsVia Azure MarketplaceSubscription must have Marketplace purchases enabled
Azure AI production workloadsPrepaid capacity commitmentBest for stable, predictable monthly usage
EXAM TIP: M365 Copilot = per-user add-on. Azure OpenAI = pay-as-you-go. Copilot is NEVER free or automatically included in any M365 plan.
βš–οΈ Section 3 β€” Responsible AI
Section 3 Β· SS5, SS6, SS7, SS9, SS10

Responsible AI β€” The FAITHP Framework

These questions appear repeatedly. Master FAITHP and 4–5 exam questions become straightforward.

SS7

Microsoft's 6 Responsible AI Principles β€” FAITHP

Your comment (SS7): Please list what constitutes Microsoft responsible AI principles, create an Acronym if possible, sketch a schematic.

Use FAITHP β€” write this on your scratch paper the moment the exam starts. P is highlighted in red because it is the most changed letter from FATHIR:

F
Fairness
No bias based on race, gender, age, or location.
A
Accountability
People must be answerable for how AI behaves.
I
Inclusiveness
AI benefits everyone β€” no one excluded.
T
Transparency
People should know when they interact with AI.
H
Human Oversight
Humans must be able to intervene and correct AI. (Reliability & Safety)
P
Privacy & Security
Protect personal data. P = Privacy β€” unambiguous.
EXAM TIP: Every Responsible AI question maps to one or two FAITHP letters. Find the keyword in the scenario first, then match it to the letter.
SS5 Β· Q17

Sensitive Personal Data β€” Privacy Principle

πŸ“‹ Original Microsoft Learn Question
Question 17 of 50
A company needs to ensure an AI solution that processes customer support transcripts aligns with Microsoft responsible AI principles and reduces risk related to sensitive personal data. What should the company do?
Select ONE correct answer:
β—‹Restrict reporting access to senior managers.
β—‹Expand the dataset to include additional historical transcripts.
β—‹Publish documentation that describes how the AI system generates insights.
βœ“Limit how long personal data is stored and retain only necessary information.
Your comment (SS5): I chose "Limit how long personal data is stored" β€” it was just an educated guess. Please provide more insight.

Keyword: SENSITIVE PERSONAL DATA β†’ maps to P in FAITHP (Privacy & Security). Data minimisation β€” storing only what is necessary β€” is the fundamental NDPR/GDPR control.

EXAM TIP: Sensitive data + privacy risk β†’ minimise data, limit storage time, retain only what is necessary. This is always the P answer.
SS6 Β· Q18

Responsible AI for Product Recommendations β€” Trap Alert

πŸ“‹ Original Microsoft Learn Question
Question 18 of 50
You are deploying an AI service that generates personalised product recommendations based on customer purchase history. You need to apply responsible AI principles before deployment. Which two explanations should you provide? Each correct answer presents part of the solution.
Select TWO correct answers:
β—‹Removes the need for ongoing human oversight
βœ“Supports transparency in customer data usage
β—‹Increases automation that removes governance controls
β—‹Shifts compliance responsibility entirely to Microsoft
βœ“Prevents biased recommendations that can harm customer trust
Your comment (SS6): Where is the trick in this question? What mistakes can an exam taker make?
TRAP βœ—"Removes human oversight" β€” sounds like efficiency but VIOLATES H in FAITHP. Always eliminate this.
TRAP βœ—"Shifts responsibility to Microsoft" β€” accountability cannot be outsourced (A in FAITHP).
βœ—"Removes governance controls" β€” the word "removes" is always a red flag.
βœ“Transparency in data usage β€” T in FAITHP.
βœ“Prevents biased recommendations β€” F in FAITHP.
MULTI-SELECT RULE: Immediately eliminate any option using "removes oversight," "no human needed," or "shifts responsibility to Microsoft." These are ALWAYS wrong.
SS9 & SS10 Β· Q24 & Q25

Applying FAITHP to Specific Scenarios

πŸ“‹ Original Microsoft Learn Question
Question 24 of 50
You are sponsoring an AI solution that will automate eligibility assessments for a financial assistance program. The solution will directly influence decisions that affect customers. You need to ensure the AI solution meets the Microsoft Responsible AI Standard for consistent performance and organisational oversight. Which two principles should you prioritise? Each correct answer presents part of the solution.
Select TWO correct answers:
β—‹accessibility
β—‹accountability
βœ“fairness
βœ“reliability and safety
β—‹scalability
πŸ“‹ Original Microsoft Learn Question
Question 25 of 50
You are leading the deployment of an AI solution that generates customer-facing product recommendations. You need to establish governance controls that reduce the risk of biased outputs and ensure that customers understand how AI is being used. Which two principles should you prioritise?
Select TWO correct answers:
β—‹accountability
β—‹fairness
β—‹reliability
β—‹safety
βœ“transparency
Your comments (SS9 & SS10): These are similar to Q19. Once SS7 is answered, these will be clear.
Scenario KeywordFAITHP LetterPrinciple
Bias, discrimination, unfair treatmentFFairness
Governance structure, who is responsibleAAccountability
Accessibility, no one excludedIInclusiveness
Explain, customers should know, understandableTTransparency
Human control, consistent performance, safetyHHuman Oversight
Personal data, sensitive info, NDPR, GDPRPPrivacy & Security
πŸ›οΈ Section 4 β€” AI Governance
Section 4 Β· SS8, SS12, SS16, SS24

AI Governance β€” Council vs Champions

Two distinct governance structures. Know the difference and you will not confuse them.

SS8 Β· Q20

The AI Council β€” Why Business, Legal, and IT?

πŸ“‹ Original Microsoft Learn Question
Question 20 of 50
You are defining an AI governance framework for how AI solutions will be evaluated, approved, and monitored across your organization. Leadership requires cross-functional oversight and alignment with Microsoft responsible AI principles. You need to establish a governance control that ensures consistent policy enforcement and risk management. What should you implement?
Select ONE correct answer:
β—‹a vendor agreement that transfers all AI oversight responsibilities to Microsoft
βœ“an AI council that includes representatives from business, legal, compliance, and IT departments
β—‹an AI Center of Excellence (AI CoE) policy that allows individual departments to independently approve AI solutions
β—‹a requirement that streamlines the review process by delegating only the IT department to review AI-related decisions
Your comment (SS8): I believe the answer is B. Can you explain why business, legal and IT are required as part of the AI council?
MemberWhy EssentialNigerian Example (GTBank)
Business LeadersDefine what problem AI should solve commercially.Head of Retail Banking defines the credit scoring use case.
Legal / ComplianceEnsure compliance with NDPR, CBN guidelines.Legal Counsel reviews AI for CBN compliance before deployment.
IT / TechnologyEvaluate feasibility, security, infrastructure.IT Director confirms Azure integration and data security.
EXAM TIP: AI governance = cross-functional. Any option that puts AI decision-making in ONE department's hands is always wrong.
SS12 Β· Q28

AI Council vs AI Champions

πŸ“‹ Original Microsoft Learn Question
Question 28 of 50
Select the answer that correctly completes the sentence. An AI champions program is primarily designed to [Target_A].
Select ONE correct answer:
β—‹centralize all AI decision-making within the IT department
βœ“create peer advocates who encourage responsible and effective AI use across teams
β—‹limit AI usage to a small group of technical users
β—‹replace formal governance and compliance processes
Your comment (SS12): Are AI Council and AI Champions different things? Please define them with examples.
AI CouncilAI Champions Programme
What it isFormal governance board of senior leadersNetwork of peer advocates across departments
Decision powerYES β€” final authority on AI going liveNO β€” enablers only, not decision-makers
Nigerian ExampleDangote Cement: CDO + Legal + Operations + RiskGTBank: 30 AI Champions across all banking divisions
AnalogyBoard of Directors of AICommunity Development Officers
EXAM TIP: Council = top-down governance (approve, oversee, policy). Champions = bottom-up adoption (encourage, enable, peer advocacy).
SS16 & SS24 Β· Q32

Building an AI Champions Network

πŸ“‹ Original Microsoft Learn Question
Question 32 of 50
Your company is deploying Microsoft 365 Copilot. Early pilot results show inconsistent usage across departments. You need to create a network of internal advocates to promote effective and responsible use. What is the best approach to achieve the goal?
Select ONE correct answer:
β—‹Rotate advocacy responsibilities among employees each quarter.
β—‹Encourage voluntary participation without assigning clear responsibilities.
β—‹Require all guidance and communication to come only from the IT department.
βœ“Establish defined expectations, such as peer enablement, feedback collection, and sharing practical use cases.
Your comment (SS16 & SS24): Breakdown this as a design process β€” I need it as part of a potential customer deployment document.
1Identify: 2–3 motivated volunteers per department β€” tech-curious, respected by peers.
2Train: Advanced Copilot training beyond what regular employees receive.
3Define Expectations: Monthly peer sessions, feedback collection, quarterly use case sharing.
4Enable Peers: Lunch-and-learn sessions, Teams Q&A channel.
5Feedback Loop: Champions report to AI Council monthly.
6Celebrate & Scale: Recognise Champions publicly. Track adoption by department.
🧠 Section 5 β€” Models & RAG
Section 5 Β· SS19, SS21, SS22

Pretrained, Fine-Tuned & RAG

One of the most important topics for both AB-730 and AB-731. The building analogy makes it permanent.

SS19 & SS21 Β· Q37 & Q39

Pretrained vs Fine-Tuned Models

πŸ“‹ Original Microsoft Learn Question
Question 37 of 50
A company is deciding whether to use a pretrained model or a fine-tuned model. What is a key characteristic of a fine-tuned model compared to a pretrained model?
Select ONE correct answer:
β—‹A pretrained model must always be trained from scratch before it can be used.
β—‹A pretrained model is trained only on an organization's internal proprietary data.
β—‹A fine-tuned model requires no training data and generates responses by using rule-based logic.
βœ“A fine-tuned model is adapted with additional domain-specific data to improve performance for a targeted task.
πŸ“‹ Original Microsoft Learn Question
Question 39 of 50
Your company is deploying a domain-specific AI agent to review legal contracts. Early testing with a pretrained LLM produces inconsistent terminology and formatting, even when using detailed prompts. You are considering whether to fine-tune the model. Which statement best describes how fine-tuning differs from using the pretrained model as-is? Select the BEST answer.
Select ONE correct answer:
β—‹Fine-tuning requires only modifying prompt instructions during inference without retraining the model.
β—‹Fine-tuning replaces the pretrained model by training a completely new model from scratch on a large dataset.
β—‹Fine-tuning limits responses to information retrieved from enterprise documents at query time without changing the model.
βœ“Fine-tuning adjusts the model's weights by training it on a smaller, domain-specific dataset to improve performance for targeted tasks.
Your comment (SS19 & SS21): What is the difference between pre-trained and fine-tuned? Can you fine-tune without pre-training? Use a pharmaceutical company example.

Pretrained model = A ready-built building. Foundation, walls, wiring β€” all in place, built over years. You move in immediately.

Fine-tuning = Hiring an interior designer to customise the building for YOUR business. The core building is unchanged β€” it is now configured for your purposes.

Can you fine-tune without pretraining? NO. You cannot customise a building that does not exist.

THE DISCRIMINATOR: "Modifies internal weights using domain-specific training data" = Fine-tuning. "Retrieves information from documents at query time" = RAG. These two phrases are your exam compass.
SS22 Β· Q41

What is RAG β€” And Is a Copilot Agent a RAG?

πŸ“‹ Original Microsoft Learn Question
Question 41 of 50
You have an AI assistant that uses retrieval-augmented generation (RAG) to retrieve information from internal and external knowledge sources before generating a response. Which step in the RAG process primarily reduces the risk of fabricated answers?
Select ONE correct answer:
βœ“content retrieval from trusted knowledge sources
β—‹query rewriting to improve search relevance
β—‹response generation by using the foundation model
β—‹safety and governance validation
Your comment (SS22): What is RAG? Does a Copilot Agent with a knowledge base = a RAG? Are there several types?

The Library Pass Analogy: A consultant knows everything up to the day they were trained. You give them a library pass β€” before answering, they find the relevant documents, read them, then answer. That is RAG.

YES β€” a Copilot Agent with a Knowledge Base IS RAG in practice. When you connect a Copilot Studio Agent to SharePoint, it retrieves content from your documents before generating its response.

EXAM TIP Q41: Which step REDUCES fabrication? Always the RETRIEVAL step β€” because grounding in real documents prevents the model from making things up.
πŸ”— Section 6 β€” Azure Ecosystem
Section 6 Β· SS13, SS14

The Azure AI Ecosystem β€” Three Layers

How Azure AI, Foundry, and Copilot relate to each other.

SS13 & SS14 Β· Q29 & Q30

Azure AI + Copilot + Foundry Relationship

πŸ“‹ Original Microsoft Learn Question
Question 29 of 50
Your company is evaluating Microsoft 365 Copilot. During a planning meeting, stakeholders ask whether prompts and responses generated in Copilot are used by Microsoft to train its AI models. Which statement accurately describes how Microsoft uses Copilot prompts and responses?
Select ONE correct answer:
β—‹Microsoft uses customer prompts and responses to improve and retrain Copilot AI models.
β—‹Microsoft uses prompts and responses only for tenants that opt in to extended diagnostics.
βœ“Microsoft does NOT use customer prompts or responses from Copilot to train its foundation AI models.
β—‹Microsoft does NOT use prompts or responses unless an administrator enables data sharing in the Microsoft 365 admin center.
πŸ“‹ Original Microsoft Learn Question
Question 30 of 50
Your company is planning a large-scale rollout of an Azure AI service for a production workload that has stable and predictable monthly usage. The finance department requires consistent monthly spending and minimal billing variability. You need to select the most appropriate subscription model. What should you choose?
Select ONE correct answer:
β—‹per-user Microsoft 365 licensing
β—‹pay-as-you-go consumption billing
β—‹a separate Azure subscription for each department
βœ“a prepaid capacity commitment for the Azure AI service
Your comment (SS13 & SS14): How does a customer use Copilot or Foundry to train AI on their own data? What is the relationship between Azure AI and Copilot? Where does Foundry come in?

The Restaurant Analogy β€” Three Layers

1

Azure AI β€” Kitchen Infrastructure

Foundational cloud infrastructure. Everything else runs on top of Azure.

2

Azure AI Foundry β€” Chef's Kitchen

Where builders BUILD custom AI solutions, fine-tune models, and govern deployments.

3

Microsoft 365 Copilot β€” The Restaurant

The end product business users consume β€” AI in Teams, Word, Excel, Outlook.

KEY FACT (Q29): Microsoft does NOT use your Copilot prompts or responses to train its foundation AI models. Your data stays yours.
EXAM TIP (Q30): Stable + predictable + production workload = Prepaid capacity commitment. Variable + experimental = Pay-as-you-go.
πŸ›‘οΈ Section 7 β€” Purview & Entra
Section 7 Β· SS18, SS23

Data Security β€” Purview & Microsoft Entra

Two security tools that protect different things. Know which does what.

SS18 Β· Q33

Microsoft Purview DLP β€” Configure Before Copilot

πŸ“‹ Original Microsoft Learn Question
Question 33 of 50
Select the answer that correctly completes the sentence. To reduce data security and privacy risks when adopting Microsoft 365 Copilot, your organization must ensure that [Target_A].
Select ONE correct answer:
βœ“existing Microsoft Purview data loss prevention (DLP) and sensitivity labelling policies are configured properly
β—‹Microsoft 365 Copilot is limited to executives
β—‹network firewall rules block external AI services
β—‹users are restricted from accessing Microsoft SharePoint Online and OneDrive
Your comment (SS18): I suspect Purview DLP is the answer but WHY? Give examples and an analogy.

The Nightclub Bouncer Analogy: Copilot is a very efficient assistant who can access EVERYTHING in your M365 environment. Microsoft Purview is the bouncer β€” it labels content (CONFIDENTIAL, HIGHLY RESTRICTED) and DLP policies enforce rules so Copilot cannot surface restricted files to unauthorised users.

Nigerian Example: Templars Law Firm β€” without Purview labels, a junior associate asks Copilot to "summarise all correspondence related to our biggest deals." Copilot surfaces client files the associate has no business seeing. With Purview DLP, RESTRICTED content is protected.

EXAM TIP: Any question about Copilot + DATA SECURITY = Microsoft Purview. Always configure Purview BEFORE deploying Copilot.
SS23 Β· Q41

Microsoft Entra β€” Identity and Conditional Access

πŸ“‹ Original Microsoft Learn Question
Question 41 of 50
Your company plans to deploy Microsoft 365 Copilot to 200 employees. A company security policy requires that access to Microsoft 365 services be limited to compliant devices and protected by strong authentication controls. You need to ensure that Copilot access meets the requirements. Which two actions should you perform? Each correct answer presents part of the solution.
Select TWO correct answers:
βœ“Enforce Microsoft Entra Conditional Access policies.
β—‹Increase the maximum token limit for Copilot responses.
βœ“Enable multifactor authentication (MFA) for all Copilot users.
β—‹Move Microsoft 365 Apps to the Semi-Annual Enterprise Channel.
β—‹Use web-grounded Microsoft Copilot instead of tenant-grounded Copilot.
Your comment (SS23): What does Microsoft Entra mean? Is it one of those trick or distraction options?

Microsoft Entra is NOT a distractor β€” it is the correct answer. Microsoft Entra = Microsoft's identity and access management platform (formerly Azure Active Directory). It is the HR department of your IT systems β€” deciding which users and devices can access which systems.

βœ“Conditional Access β€” only company-managed compliant devices can access Copilot. Personal laptops blocked.
βœ—Token limit β€” about response LENGTH not security.
βœ“MFA β€” even if a password is stolen, attacker cannot access Copilot without the second factor.
βœ—Semi-Annual Channel β€” about update cadence, not security.
βœ—Web-grounded Copilot β€” switches to public internet. Would REDUCE enterprise security.
EXAM TIP: "Device compliance + strong authentication" for Copilot = Microsoft Entra: Conditional Access + MFA. Never token limits or update channels.
⚠️ Section 8 β€” AI Challenges
Section 8 Β· SS17

AI Challenges β€” Fabrication, Reliability & Hallucination

Three terms that appear in exam questions. One clear rule keeps them straight.

SS17 Β· Q34

Fabrication vs Hallucination vs Reliability

πŸ“‹ Original Microsoft Learn Question
Question 34 of 50
A company deploys generative AI to draft internal knowledge base articles. During testing, the generative AI system produces clear and accurate drafts in some test cases and incomplete or inconsistent drafts during other tests. Which challenge of generative AI is this an example of?
Select ONE correct answer:
β—‹bias
βœ“fabrication
β—‹reliability
β—‹scalability
Your comment (SS17): What is the difference between Fabrication, Reliability and Hallucination? Where does each apply?
TermDefinitionNigerian Example
Fabrication / HallucinationAI generates false information presented as true with full confidence.Copilot says "CBN inflation report shows 8%" β€” but that statistic does not exist in the report.
Reliability IssueAI performs inconsistently β€” correct sometimes, wrong other times with identical inputs.AI drafts excellent articles on Monday, incomplete ones on Friday β€” same prompts.
BiasAI systematically treats certain groups unfairly due to training data patterns.AI loan tool consistently rejects applicants from certain Nigerian states.
ScalabilityAI cannot handle the required volume or speed of processing.AI system crashes when 10,000 users query simultaneously.
THE DISCRIMINATION RULE:
"AI states a fact that doesn't exist" β†’ FABRICATION
"AI is correct sometimes, wrong other times with same inputs" β†’ RELIABILITY
"AI consistently disadvantages a group" β†’ BIAS
"AI cannot handle the volume" β†’ SCALABILITY