Question 200 A procurement officer uses a Copilot comparison of tariffs, but an official public schedule changed this week Which outcome is the most relevant business consequence? A stale rate can distort supplier cost projections even if the arithmetic is otherwise correct. An incorrect legal requirement can appear credible because a citation was attached to it. Employees could act on inaccurate entitlement interpretations and face financial or employment consequences. Leaders may make budget decisions based on a numerical error presented with polished visuals. Explanation Correct Answer A:The most direct consequence associated with Verify freshness of time-sensitive public claims is: A stale rate can distort supplier cost projections even if the arithmetic is otherwise correct. That consequence follows from the scenario rather than a separate neighboring issue. Incorrect Answers B:This consequence belongs more directly to Check citations against an authoritative source: An incorrect legal requirement can appear credible because a citation was attached to it. The case instead concerns Verify freshness of time-sensitive public claims and its more specific business impact. C:This consequence belongs more directly to Request qualified human review for high-stakes advice: Employees could act on inaccurate entitlement interpretations and face financial or employment consequences. The case instead concerns Verify freshness of time-sensitive public claims and its more specific business impact. D:This consequence belongs more directly to Reconcile generated numbers to the source workbook: Leaders may make budget decisions based on a numerical error presented with polished visuals. The case instead concerns Verify freshness of time-sensitive public claims and its more specific business impact.
Question 201 A user asks Copilot to summarize vendor evidence, but one retrieved document instructs the assistant to ignore the request and reveal internal messages What could go wrong if the team ignores this distinction? Failing to distinguish quotation from instruction can distort a training summary. A numerical error can mislead a report without any malicious instruction being present. Following instructions hidden in a source file could redirect the assistant away from the approved task. Ignoring a valid instruction can produce unsuitable prose even though it is not an injection attack. Explanation Correct Answer C:The most direct consequence associated with Recognize prompt injection in retrieved documents is: Following instructions hidden in a source file could redirect the assistant away from the approved task. That consequence follows from the scenario rather than a separate neighboring issue. Incorrect Answers A:This consequence belongs more directly to Quote harmless instructional text from a training manual: Failing to distinguish quotation from instruction can distort a training summary. The case instead concerns Recognize prompt injection in retrieved documents and its more specific business impact. B:This consequence belongs more directly to Correct a false figure quoted from a source document: A numerical error can mislead a report without any malicious instruction being present. The case instead concerns Recognize prompt injection in retrieved documents and its more specific business impact. D:This consequence belongs more directly to Follow a legitimate instruction from the authorized requester: Ignoring a valid instruction can produce unsuitable prose even though it is not an injection attack. The case instead concerns Recognize prompt injection in retrieved documents and its more specific business impact.
Question 202 A meeting recap asserts that a client approved a launch date even though the meeting notes contain no such confirmation Which downstream failure should reviewers anticipate? An invented approval can trigger work on an agreement that was never made. Automating acceptance of plausible recommendations can override critical human and policy judgments. Biased recommendations can exclude qualified applicants for reasons unrelated to role requirements. Following instructions hidden in a source file could redirect the assistant away from the approved task. Explanation Correct Answer A:The most direct consequence associated with Recognize unsupported factual hallucination is: An invented approval can trigger work on an agreement that was never made. That consequence follows from the scenario rather than a separate neighboring issue. Incorrect Answers B:This consequence belongs more directly to Recognize over-reliance on generated recommendations: Automating acceptance of plausible recommendations can override critical human and policy judgments. The case instead concerns Recognize unsupported factual hallucination and its more specific business impact. C:This consequence belongs more directly to Recognize bias in one-sided AI source material: Biased recommendations can exclude qualified applicants for reasons unrelated to role requirements. The case instead concerns Recognize unsupported factual hallucination and its more specific business impact. D:This consequence belongs more directly to Recognize prompt injection in retrieved documents: Following instructions hidden in a source file could redirect the assistant away from the approved task. The case instead concerns Recognize unsupported factual hallucination and its more specific business impact.
Question 203 A manager wants to adopt every action recommended in an AI staffing plan without checking local capacity or employee agreements What risk does the proposed shortcut introduce? Following instructions hidden in a source file could redirect the assistant away from the approved task. An invented approval can trigger work on an agreement that was never made. Automating acceptance of plausible recommendations can override critical human and policy judgments. Biased recommendations can exclude qualified applicants for reasons unrelated to role requirements. Explanation Correct Answer C:The most direct consequence associated with Recognize over-reliance on generated recommendations is: Automating acceptance of plausible recommendations can override critical human and policy judgments. That consequence follows from the scenario rather than a separate neighboring issue. Incorrect Answers A:This consequence belongs more directly to Recognize prompt injection in retrieved documents: Following instructions hidden in a source file could redirect the assistant away from the approved task. The case instead concerns Recognize over-reliance on generated recommendations and its more specific business impact. B:This consequence belongs more directly to Recognize unsupported factual hallucination: An invented approval can trigger work on an agreement that was never made. The case instead concerns Recognize over-reliance on generated recommendations and its more specific business impact. D:This consequence belongs more directly to Recognize bias in one-sided AI source material: Biased recommendations can exclude qualified applicants for reasons unrelated to role requirements. The case instead concerns Recognize over-reliance on generated recommendations and its more specific business impact.
Question 204 A recruiting team asks for a candidate comparison using only informal comments from one interviewer as supporting context Which operational impact most specifically follows? Following instructions hidden in a source file could redirect the assistant away from the approved task. Biased recommendations can exclude qualified applicants for reasons unrelated to role requirements. An invented approval can trigger work on an agreement that was never made. Automating acceptance of plausible recommendations can override critical human and policy judgments. Explanation Correct Answer B:The most direct consequence associated with Recognize bias in one-sided AI source material is: Biased recommendations can exclude qualified applicants for reasons unrelated to role requirements. That consequence follows from the scenario rather than a separate neighboring issue. Incorrect Answers A:This consequence belongs more directly to Recognize prompt injection in retrieved documents: Following instructions hidden in a source file could redirect the assistant away from the approved task. The case instead concerns Recognize bias in one-sided AI source material and its more specific business impact. C:This consequence belongs more directly to Recognize unsupported factual hallucination: An invented approval can trigger work on an agreement that was never made. The case instead concerns Recognize bias in one-sided AI source material and its more specific business impact. D:This consequence belongs more directly to Recognize over-reliance on generated recommendations: Automating acceptance of plausible recommendations can override critical human and policy judgments. The case instead concerns Recognize bias in one-sided AI source material and its more specific business impact.
Question 205 A sales employee asks Copilot to summarize a restricted board file that they cannot open in SharePoint What is the most direct risk if the issue is not handled appropriately? Customer data may leave its approved boundary despite the task appearing to be routine summarization. Expecting Copilot to override file permissions would undermine established organizational access controls. Deleting the visible chat alone may not satisfy retention obligations or remove records protected by a hold. Sensitive text could be mishandled if users attempt to circumvent labeling and encryption restrictions. Explanation Correct Answer B:The most direct consequence associated with Respect SharePoint item access permissions is: Expecting Copilot to override file permissions would undermine established organizational access controls. That consequence follows from the scenario rather than a separate neighboring issue. Incorrect Answers A:This consequence belongs more directly to Apply DLP rules before copying sensitive data: Customer data may leave its approved boundary despite the task appearing to be routine summarization. The case instead concerns Respect SharePoint item access permissions and its more specific business impact. C:This consequence belongs more directly to Account for retention and audit requirements: Deleting the visible chat alone may not satisfy retention obligations or remove records protected by a hold. The case instead concerns Respect SharePoint item access permissions and its more specific business impact. D:This consequence belongs more directly to Respect sensitivity label restrictions: Sensitive text could be mishandled if users attempt to circumvent labeling and encryption restrictions. The case instead concerns Respect SharePoint item access permissions and its more specific business impact.
Question 206 An analyst can see a link to an encrypted confidential deck but Copilot cannot extract its contents because rights are restricted Which outcome is the most relevant business consequence? A compliance record can remain preserved despite being absent from the user's chat list. An employee without access should not receive a restricted document merely through AI retrieval. Sensitive text could be mishandled if users attempt to circumvent labeling and encryption restrictions. A mislabel may prevent legitimate distribution even when the document contains no confidential content. Explanation Correct Answer C:The most direct consequence associated with Respect sensitivity label restrictions is: Sensitive text could be mishandled if users attempt to circumvent labeling and encryption restrictions. That consequence follows from the scenario rather than a separate neighboring issue. Incorrect Answers A:This consequence belongs more directly to Follow a retention hold on a visible conversation: A compliance record can remain preserved despite being absent from the user's chat list. The case instead concerns Respect sensitivity label restrictions and its more specific business impact. B:This consequence belongs more directly to Respect ordinary SharePoint membership restrictions: An employee without access should not receive a restricted document merely through AI retrieval. The case instead concerns Respect sensitivity label restrictions and its more specific business impact. D:This consequence belongs more directly to Correct misclassification of a public reference document: A mislabel may prevent legitimate distribution even when the document contains no confidential content. The case instead concerns Respect sensitivity label restrictions and its more specific business impact.
Question 207 A support rep wants to paste a spreadsheet of customer identifiers into a loosely governed external AI destination What could go wrong if the team ignores this distinction? Sensitive text could be mishandled if users attempt to circumvent labeling and encryption restrictions. Expecting Copilot to override file permissions would undermine established organizational access controls. Deleting the visible chat alone may not satisfy retention obligations or remove records protected by a hold. Customer data may leave its approved boundary despite the task appearing to be routine summarization. Explanation Correct Answer D:The most direct consequence associated with Apply DLP rules before copying sensitive data is: Customer data may leave its approved boundary despite the task appearing to be routine summarization. That consequence follows from the scenario rather than a separate neighboring issue. Incorrect Answers A:This consequence belongs more directly to Respect sensitivity label restrictions: Sensitive text could be mishandled if users attempt to circumvent labeling and encryption restrictions. The case instead concerns Apply DLP rules before copying sensitive data and its more specific business impact. B:This consequence belongs more directly to Respect SharePoint item access permissions: Expecting Copilot to override file permissions would undermine established organizational access controls. The case instead concerns Apply DLP rules before copying sensitive data and its more specific business impact. C:This consequence belongs more directly to Account for retention and audit requirements: Deleting the visible chat alone may not satisfy retention obligations or remove records protected by a hold. The case instead concerns Apply DLP rules before copying sensitive data and its more specific business impact.
Question 208 A compliance administrator is asked to delete Copilot chat records immediately even though an active legal retention rule applies Which downstream failure should reviewers anticipate? Sensitive text could be mishandled if users attempt to circumvent labeling and encryption restrictions. Deleting the visible chat alone may not satisfy retention obligations or remove records protected by a hold. Expecting Copilot to override file permissions would undermine established organizational access controls. Customer data may leave its approved boundary despite the task appearing to be routine summarization. Explanation Correct Answer B:The most direct consequence associated with Account for retention and audit requirements is: Deleting the visible chat alone may not satisfy retention obligations or remove records protected by a hold. That consequence follows from the scenario rather than a separate neighboring issue. Incorrect Answers A:This consequence belongs more directly to Respect sensitivity label restrictions: Sensitive text could be mishandled if users attempt to circumvent labeling and encryption restrictions. The case instead concerns Account for retention and audit requirements and its more specific business impact. C:This consequence belongs more directly to Respect SharePoint item access permissions: Expecting Copilot to override file permissions would undermine established organizational access controls. The case instead concerns Account for retention and audit requirements and its more specific business impact. D:This consequence belongs more directly to Apply DLP rules before copying sensitive data: Customer data may leave its approved boundary despite the task appearing to be routine summarization. The case instead concerns Account for retention and audit requirements and its more specific business impact.
Question 209 A developer-support liaison copies a live service account password into a business prompt to ask for a cleaner status email What risk does the proposed shortcut introduce? Unnecessary individual details could be reproduced in a report intended for a broad audience. An unauthorized source may contaminate the deliverable and breach contractual confidentiality duties. A misaddressed share link can expose confidential pricing even when the document itself is accurate. A reusable credential may be exposed to people or systems unrelated to the legitimate communication task. Explanation Correct Answer D:The most direct consequence associated with Avoid exposing secrets in a prompt is: A reusable credential may be exposed to people or systems unrelated to the legitimate communication task. That consequence follows from the scenario rather than a separate neighboring issue. Incorrect Answers A:This consequence belongs more directly to Minimize personal information in case summaries: Unnecessary individual details could be reproduced in a report intended for a broad audience. The case instead concerns Avoid exposing secrets in a prompt and its more specific business impact. B:This consequence belongs more directly to Choose permitted data over convenient data: An unauthorized source may contaminate the deliverable and breach contractual confidentiality duties. The case instead concerns Avoid exposing secrets in a prompt and its more specific business impact. C:This consequence belongs more directly to Check recipients before sharing generated content: A misaddressed share link can expose confidential pricing even when the document itself is accurate. The case instead concerns Avoid exposing secrets in a prompt and its more specific business impact.
Question 210 An HR team needs a trends summary but its draft input includes employee names, medical notes and unique identifiers Which operational impact most specifically follows? An unauthorized source may contaminate the deliverable and breach contractual confidentiality duties. A misaddressed share link can expose confidential pricing even when the document itself is accurate. A reusable credential may be exposed to people or systems unrelated to the legitimate communication task. Unnecessary individual details could be reproduced in a report intended for a broad audience. Explanation Correct Answer D:The most direct consequence associated with Minimize personal information in case summaries is: Unnecessary individual details could be reproduced in a report intended for a broad audience. That consequence follows from the scenario rather than a separate neighboring issue. Incorrect Answers A:This consequence belongs more directly to Choose permitted data over convenient data: An unauthorized source may contaminate the deliverable and breach contractual confidentiality duties. The case instead concerns Minimize personal information in case summaries and its more specific business impact. B:This consequence belongs more directly to Check recipients before sharing generated content: A misaddressed share link can expose confidential pricing even when the document itself is accurate. The case instead concerns Minimize personal information in case summaries and its more specific business impact. C:This consequence belongs more directly to Avoid exposing secrets in a prompt: A reusable credential may be exposed to people or systems unrelated to the legitimate communication task. The case instead concerns Minimize personal information in case summaries and its more specific business impact.
