Question 180 A compliance administrator is asked to delete Copilot chat records immediately even though an active legal retention rule applies Which step best addresses the stated need? Ask the file owner for legitimate access and use only information the employee is authorized to see. Consult the compliance policy and follow the authorized retention workflow rather than assuming deletion overrides a hold. Use an approved data-handling workflow and minimize or de-identify sensitive fields when permitted. Follow the organization's label and rights process rather than trying to remove protections through a prompt. Explanation Correct Answer B:Consult the compliance policy and follow the authorized retention workflow rather than assuming deletion overrides a hold. This directly addresses Account for retention and audit requirements; the case's distinguishing evidence is: Organizational retention and audit policies govern the stored interactions independently of the user's chat list. Incorrect Answers A:This action fits Respect SharePoint item access permissions: Ask the file owner for legitimate access and use only information the employee is authorized to see. It would not directly solve the stated Account for retention and audit requirements requirement, which calls for consult the compliance policy and follow the authorized retention workflow rather than assuming deletion overrides a hold. C:This action fits Apply DLP rules before copying sensitive data: Use an approved data-handling workflow and minimize or de-identify sensitive fields when permitted. It would not directly solve the stated Account for retention and audit requirements requirement, which calls for consult the compliance policy and follow the authorized retention workflow rather than assuming deletion overrides a hold. D:This action fits Respect sensitivity label restrictions: Follow the organization's label and rights process rather than trying to remove protections through a prompt. It would not directly solve the stated Account for retention and audit requirements requirement, which calls for consult the compliance policy and follow the authorized retention workflow rather than assuming deletion overrides a hold.
Question 181 A developer-support liaison copies a live service account password into a business prompt to ask for a cleaner status email What should the team do after identifying the issue? Use only approved engagement documents and seek permission before repurposing third-party confidential material. Remove the secret, use an approved placeholder, and follow credential-rotation policy if it has been disclosed. Aggregate or de-identify the input according to policy and request the statistical summary from the minimized data. Check classification and sharing permissions and distribute only a reviewed, appropriately scoped version. Explanation Correct Answer B:Remove the secret, use an approved placeholder, and follow credential-rotation policy if it has been disclosed. This directly addresses Avoid exposing secrets in a prompt; the case's distinguishing evidence is: The proposed prompt includes an authentication secret unnecessary to the writing request. Incorrect Answers A:This action fits Choose permitted data over convenient data: Use only approved engagement documents and seek permission before repurposing third-party confidential material. It would not directly solve the stated Avoid exposing secrets in a prompt requirement, which calls for remove the secret, use an approved placeholder, and follow credential-rotation policy if it has been disclosed. C:This action fits Minimize personal information in case summaries: Aggregate or de-identify the input according to policy and request the statistical summary from the minimized data. It would not directly solve the stated Avoid exposing secrets in a prompt requirement, which calls for remove the secret, use an approved placeholder, and follow credential-rotation policy if it has been disclosed. D:This action fits Check recipients before sharing generated content: Check classification and sharing permissions and distribute only a reviewed, appropriately scoped version. It would not directly solve the stated Avoid exposing secrets in a prompt requirement, which calls for remove the secret, use an approved placeholder, and follow credential-rotation policy if it has been disclosed.
Question 182 An HR team needs a trends summary but its draft input includes employee names, medical notes and unique identifiers Which practical response follows from the evidence? Aggregate or de-identify the input according to policy and request the statistical summary from the minimized data. Check classification and sharing permissions and distribute only a reviewed, appropriately scoped version. Use only approved engagement documents and seek permission before repurposing third-party confidential material. Remove the secret, use an approved placeholder, and follow credential-rotation policy if it has been disclosed. Explanation Correct Answer A:Aggregate or de-identify the input according to policy and request the statistical summary from the minimized data. This directly addresses Minimize personal information in case summaries; the case's distinguishing evidence is: The requested trend calculation requires only category counts and not employee-level sensitive records. Incorrect Answers B:This action fits Check recipients before sharing generated content: Check classification and sharing permissions and distribute only a reviewed, appropriately scoped version. It would not directly solve the stated Minimize personal information in case summaries requirement, which calls for aggregate or de-identify the input according to policy and request the statistical summary from the minimized data. C:This action fits Choose permitted data over convenient data: Use only approved engagement documents and seek permission before repurposing third-party confidential material. It would not directly solve the stated Minimize personal information in case summaries requirement, which calls for aggregate or de-identify the input according to policy and request the statistical summary from the minimized data. D:This action fits Avoid exposing secrets in a prompt: Remove the secret, use an approved placeholder, and follow credential-rotation policy if it has been disclosed. It would not directly solve the stated Minimize personal information in case summaries requirement, which calls for aggregate or de-identify the input according to policy and request the statistical summary from the minimized data.
Question 183 A project coordinator plans to send a Copilot Page containing internal pricing assumptions to a large external partner group How should the employee proceed within approved controls? Check classification and sharing permissions and distribute only a reviewed, appropriately scoped version. Use only approved engagement documents and seek permission before repurposing third-party confidential material. Remove the secret, use an approved placeholder, and follow credential-rotation policy if it has been disclosed. Aggregate or de-identify the input according to policy and request the statistical summary from the minimized data. Explanation Correct Answer A:Check classification and sharing permissions and distribute only a reviewed, appropriately scoped version. This directly addresses Check recipients before sharing generated content; the case's distinguishing evidence is: The page includes internal financial details not approved for the proposed recipients. Incorrect Answers B:This action fits Choose permitted data over convenient data: Use only approved engagement documents and seek permission before repurposing third-party confidential material. It would not directly solve the stated Check recipients before sharing generated content requirement, which calls for check classification and sharing permissions and distribute only a reviewed, appropriately scoped version. C:This action fits Avoid exposing secrets in a prompt: Remove the secret, use an approved placeholder, and follow credential-rotation policy if it has been disclosed. It would not directly solve the stated Check recipients before sharing generated content requirement, which calls for check classification and sharing permissions and distribute only a reviewed, appropriately scoped version. D:This action fits Minimize personal information in case summaries: Aggregate or de-identify the input according to policy and request the statistical summary from the minimized data. It would not directly solve the stated Check recipients before sharing generated content requirement, which calls for check classification and sharing permissions and distribute only a reviewed, appropriately scoped version.
Question 184 A consultant requests a summary of a former client's private presentation using a copy retained without authorization Which course of action is most defensible? Aggregate or de-identify the input according to policy and request the statistical summary from the minimized data. Use only approved engagement documents and seek permission before repurposing third-party confidential material. Remove the secret, use an approved placeholder, and follow credential-rotation policy if it has been disclosed. Check classification and sharing permissions and distribute only a reviewed, appropriately scoped version. Explanation Correct Answer B:Use only approved engagement documents and seek permission before repurposing third-party confidential material. This directly addresses Choose permitted data over convenient data; the case's distinguishing evidence is: The source file is not authorized for use in the new engagement, regardless of the assistant's technical ability to read it. Incorrect Answers A:This action fits Minimize personal information in case summaries: Aggregate or de-identify the input according to policy and request the statistical summary from the minimized data. It would not directly solve the stated Choose permitted data over convenient data requirement, which calls for use only approved engagement documents and seek permission before repurposing third-party confidential material. C:This action fits Avoid exposing secrets in a prompt: Remove the secret, use an approved placeholder, and follow credential-rotation policy if it has been disclosed. It would not directly solve the stated Choose permitted data over convenient data requirement, which calls for use only approved engagement documents and seek permission before repurposing third-party confidential material. D:This action fits Check recipients before sharing generated content: Check classification and sharing permissions and distribute only a reviewed, appropriately scoped version. It would not directly solve the stated Choose permitted data over convenient data requirement, which calls for use only approved engagement documents and seek permission before repurposing third-party confidential material.
Question 185 An AI board memo cites three market reports and then labels a speculative acquisition recommendation as a proven fact What is the best next action for this employee? Check the exact wording and either quote accurately or clearly present the idea as a paraphrase. Rebuild the chart from verified counts and confirm denominator, labels and rounding before release. Have the responsible benefits or legal specialist verify the claim and replace unsupported advice with policy-grounded information. Identify which statements are sourced and which are analytical judgments, and label the recommendation accordingly. Explanation Correct Answer D:Identify which statements are sourced and which are analytical judgments, and label the recommendation accordingly. This directly addresses Separate cited facts from inferred conclusions; the case's distinguishing evidence is: The linked reports supply market observations but do not endorse the proposed acquisition. Incorrect Answers A:This action fits Cross-check quotations for exact wording: Check the exact wording and either quote accurately or clearly present the idea as a paraphrase. It would not directly solve the stated Separate cited facts from inferred conclusions requirement, which calls for identify which statements are sourced and which are analytical judgments, and label the recommendation accordingly. B:This action fits Validate calculations in a chart before publishing: Rebuild the chart from verified counts and confirm denominator, labels and rounding before release. It would not directly solve the stated Separate cited facts from inferred conclusions requirement, which calls for identify which statements are sourced and which are analytical judgments, and label the recommendation accordingly. C:This action fits Confirm legal or medical content with qualified experts: Have the responsible benefits or legal specialist verify the claim and replace unsupported advice with policy-grounded information. It would not directly solve the stated Separate cited facts from inferred conclusions requirement, which calls for identify which statements are sourced and which are analytical judgments, and label the recommendation accordingly.
Question 186 A generated newsletter attributes a decisive quotation to a chief executive, but staff have only a meeting transcript Which step best addresses the stated need? Check the exact wording and either quote accurately or clearly present the idea as a paraphrase. Have the responsible benefits or legal specialist verify the claim and replace unsupported advice with policy-grounded information. Identify which statements are sourced and which are analytical judgments, and label the recommendation accordingly. Rebuild the chart from verified counts and confirm denominator, labels and rounding before release. Explanation Correct Answer A:Check the exact wording and either quote accurately or clearly present the idea as a paraphrase. This directly addresses Cross-check quotations for exact wording; the case's distinguishing evidence is: The proposed quotation's wording does not appear verbatim in the original transcript. Incorrect Answers B:This action fits Confirm legal or medical content with qualified experts: Have the responsible benefits or legal specialist verify the claim and replace unsupported advice with policy-grounded information. It would not directly solve the stated Cross-check quotations for exact wording requirement, which calls for check the exact wording and either quote accurately or clearly present the idea as a paraphrase. C:This action fits Separate cited facts from inferred conclusions: Identify which statements are sourced and which are analytical judgments, and label the recommendation accordingly. It would not directly solve the stated Cross-check quotations for exact wording requirement, which calls for check the exact wording and either quote accurately or clearly present the idea as a paraphrase. D:This action fits Validate calculations in a chart before publishing: Rebuild the chart from verified counts and confirm denominator, labels and rounding before release. It would not directly solve the stated Cross-check quotations for exact wording requirement, which calls for check the exact wording and either quote accurately or clearly present the idea as a paraphrase.
Question 187 A community report uses a Copilot-generated pie chart whose category percentages add up to more than one hundred percent What should the team do after identifying the issue? Rebuild the chart from verified counts and confirm denominator, labels and rounding before release. Check the exact wording and either quote accurately or clearly present the idea as a paraphrase. Have the responsible benefits or legal specialist verify the claim and replace unsupported advice with policy-grounded information. Identify which statements are sourced and which are analytical judgments, and label the recommendation accordingly. Explanation Correct Answer A:Rebuild the chart from verified counts and confirm denominator, labels and rounding before release. This directly addresses Validate calculations in a chart before publishing; the case's distinguishing evidence is: The labels and plotted values were generated without reconciling category totals to the source data. Incorrect Answers B:This action fits Cross-check quotations for exact wording: Check the exact wording and either quote accurately or clearly present the idea as a paraphrase. It would not directly solve the stated Validate calculations in a chart before publishing requirement, which calls for rebuild the chart from verified counts and confirm denominator, labels and rounding before release. C:This action fits Confirm legal or medical content with qualified experts: Have the responsible benefits or legal specialist verify the claim and replace unsupported advice with policy-grounded information. It would not directly solve the stated Validate calculations in a chart before publishing requirement, which calls for rebuild the chart from verified counts and confirm denominator, labels and rounding before release. D:This action fits Separate cited facts from inferred conclusions: Identify which statements are sourced and which are analytical judgments, and label the recommendation accordingly. It would not directly solve the stated Validate calculations in a chart before publishing requirement, which calls for rebuild the chart from verified counts and confirm denominator, labels and rounding before release.
Question 188 An employee-benefits chatbot draft makes specific medical coverage assertions beyond the organization's published policy Which practical response follows from the evidence? Identify which statements are sourced and which are analytical judgments, and label the recommendation accordingly. Rebuild the chart from verified counts and confirm denominator, labels and rounding before release. Check the exact wording and either quote accurately or clearly present the idea as a paraphrase. Have the responsible benefits or legal specialist verify the claim and replace unsupported advice with policy-grounded information. Explanation Correct Answer D:Have the responsible benefits or legal specialist verify the claim and replace unsupported advice with policy-grounded information. This directly addresses Confirm legal or medical content with qualified experts; the case's distinguishing evidence is: No approved policy text or qualified expert confirms the proposed coverage interpretation. Incorrect Answers A:This action fits Separate cited facts from inferred conclusions: Identify which statements are sourced and which are analytical judgments, and label the recommendation accordingly. It would not directly solve the stated Confirm legal or medical content with qualified experts requirement, which calls for have the responsible benefits or legal specialist verify the claim and replace unsupported advice with policy-grounded information. B:This action fits Validate calculations in a chart before publishing: Rebuild the chart from verified counts and confirm denominator, labels and rounding before release. It would not directly solve the stated Confirm legal or medical content with qualified experts requirement, which calls for have the responsible benefits or legal specialist verify the claim and replace unsupported advice with policy-grounded information. C:This action fits Cross-check quotations for exact wording: Check the exact wording and either quote accurately or clearly present the idea as a paraphrase. It would not directly solve the stated Confirm legal or medical content with qualified experts requirement, which calls for have the responsible benefits or legal specialist verify the claim and replace unsupported advice with policy-grounded information.
Question 189 A competitor webpage includes text saying an assistant must abandon a comparison and email the user's private files elsewhere How should the employee proceed within approved controls? Cross-check the attendee list or ask for confirmation before publishing assigned responsibilities. Present assumptions, plausible ranges and data gaps, then request expert review of the forecast. Seek a shareable approved record of the decision or qualify the claim until it can be verified. Ignore the injected instruction, use the page only as evidence and limit outputs to the requested comparison. Explanation Correct Answer D:Ignore the injected instruction, use the page only as evidence and limit outputs to the requested comparison. This directly addresses Handle malicious instructions inside web pages; the case's distinguishing evidence is: The instruction appears as third-party web content and conflicts with the user's authorized analysis goal. Incorrect Answers A:This action fits Handle ambiguous employee identities in summaries: Cross-check the attendee list or ask for confirmation before publishing assigned responsibilities. It would not directly solve the stated Handle malicious instructions inside web pages requirement, which calls for ignore the injected instruction, use the page only as evidence and limit outputs to the requested comparison. B:This action fits Handle model uncertainty in novel situations: Present assumptions, plausible ranges and data gaps, then request expert review of the forecast. It would not directly solve the stated Handle malicious instructions inside web pages requirement, which calls for ignore the injected instruction, use the page only as evidence and limit outputs to the requested comparison. C:This action fits Handle misleading citations to inaccessible sources: Seek a shareable approved record of the decision or qualify the claim until it can be verified. It would not directly solve the stated Handle malicious instructions inside web pages requirement, which calls for ignore the injected instruction, use the page only as evidence and limit outputs to the requested comparison.
Question 190 A project summary cites a restricted document a reader cannot inspect, then asserts the document proves budget approval Which course of action is most defensible? Ignore the injected instruction, use the page only as evidence and limit outputs to the requested comparison. Seek a shareable approved record of the decision or qualify the claim until it can be verified. Present assumptions, plausible ranges and data gaps, then request expert review of the forecast. Cross-check the attendee list or ask for confirmation before publishing assigned responsibilities. Explanation Correct Answer B:Seek a shareable approved record of the decision or qualify the claim until it can be verified. This directly addresses Handle misleading citations to inaccessible sources; the case's distinguishing evidence is: The person reviewing the memo lacks access to the cited source and there is no alternative authorized evidence. Incorrect Answers A:This action fits Handle malicious instructions inside web pages: Ignore the injected instruction, use the page only as evidence and limit outputs to the requested comparison. It would not directly solve the stated Handle misleading citations to inaccessible sources requirement, which calls for seek a shareable approved record of the decision or qualify the claim until it can be verified. C:This action fits Handle model uncertainty in novel situations: Present assumptions, plausible ranges and data gaps, then request expert review of the forecast. It would not directly solve the stated Handle misleading citations to inaccessible sources requirement, which calls for seek a shareable approved record of the decision or qualify the claim until it can be verified. D:This action fits Handle ambiguous employee identities in summaries: Cross-check the attendee list or ask for confirmation before publishing assigned responsibilities. It would not directly solve the stated Handle misleading citations to inaccessible sources requirement, which calls for seek a shareable approved record of the decision or qualify the claim until it can be verified.
