AI Business Professional AB-730 Practice Test 2
Question 10
A team wants to prevent internal client records from becoming public model training material when drafting customer replies. The proposed approach is: Use the organization-authorized Copilot experience with enterprise data protection and approved data handling. Why does this approach meet the requirement?
- Derived AI output may inherit confidentiality obligations from its inputs
- Human verification and source grounding are essential for high-impact factual assertions
- Microsoft 365 Copilot's enterprise data protection applies to covered work-account prompts and responses under tenant policies
- Responsible use keeps accountable people and authoritative records in the decision loop
Explanation
Correct Answer
C:Microsoft 365 Copilot's enterprise data protection applies to covered work-account prompts and responses under tenant policies. The proposed approach, use the organization-authorized Copilot experience with enterprise data protection and approved data handling, specifically addresses the stated requirement. Verification would show: the workflow is signed in to the governed work tenant and meets the organization's data-handling policy.
Incorrect Answers
A:Derived AI output may inherit confidentiality obligations from its inputs. That property explains verify source sensitivity and recipient permissions before sharing the output for another task, rather than the proposed control here.
B:Human verification and source grounding are essential for high-impact factual assertions. That property explains treat unsupported AI assertions as potentially inaccurate and inspect the primary contract before acting for another task, rather than the proposed control here.
D:Responsible use keeps accountable people and authoritative records in the decision loop. That property explains use the AI summary as decision support and apply policy-based human review to the underlying evidence for another task, rather than the proposed control here.
Question 11
A team wants to prevent internal client records from becoming public model training material when drafting customer replies. A colleague suggests: "Paste the full confidential source into a consumer account and assume its settings match the work tenant." What specific flaw makes that shortcut unsuitable?
- Work-account protection and consumer account governance are not interchangeable
- Language generation does not replace domain expertise or required approvals
- Prompt wording cannot override underlying organizational data access controls
- Generated predictions are not verified historical measurements
Explanation
Correct Answer
A:Work-account protection and consumer account governance are not interchangeable. The suggested shortcut, paste the full confidential source into a consumer account and assume its settings match the work tenant, leaves the requirement unmet. A better approach is to use the organization-authorized Copilot experience with enterprise data protection and approved data handling.
Incorrect Answers
B:Language generation does not replace domain expertise or required approvals. This is the limitation of the different shortcut allow the model to certify legal compliance without a human reviewer, not the alternative identified here.
C:Prompt wording cannot override underlying organizational data access controls. This is the limitation of the different shortcut ask Copilot repeatedly to reveal the restricted content through differently worded prompts, not the alternative identified here.
D:Generated predictions are not verified historical measurements. This is the limitation of the different shortcut present generated projections as observed operational results, not the alternative identified here.
Question 12
A team wants to prevent internal client records from becoming public model training material when drafting customer replies. The team implements: Use the organization-authorized Copilot experience with enterprise data protection and approved data handling. Which observed result would most directly verify success?
- The prompt contains only policy-permitted fields and uses the approved work account
- Recomputed totals, labels, and units agree with the approved underlying dataset
- Records are handled through authorized recovery and the AI uses only available materials
- The workflow is signed in to the governed work tenant and meets the organization's data-handling policy
Explanation
Correct Answer
D:The workflow is signed in to the governed work tenant and meets the organization's data-handling policy. This verifies the expected result of use the organization-authorized Copilot experience with enterprise data protection and approved data handling, instead of merely assuming it worked.
Incorrect Answers
A:The prompt contains only policy-permitted fields and uses the approved work account. This would verify use the governed organizational Copilot experience and minimize or redact sensitive details as policy requires under a different business condition; it does not test the stated outcome.
B:Recomputed totals, labels, and units agree with the approved underlying dataset. This would verify recalculate the figures from source data and correct discrepancies before publication under a different business condition; it does not test the stated outcome.
C:Records are handled through authorized recovery and the AI uses only available materials. This would verify use the approved records-access or ownership-transfer process instead of relying on model workarounds under a different business condition; it does not test the stated outcome.
Question 13
A finance employee worries whether an internal planning prompt will be used to train a publicly available foundation model. Which action best meets the stated business requirement?
- Treat unsupported AI assertions as potentially inaccurate and inspect the primary contract before acting
- Use the organization-authorized Copilot experience with enterprise data protection and approved data handling
- Paste the full confidential source into a consumer account and assume its settings match the work tenant
- Remove or qualify unverifiable citations and locate direct supporting evidence
Explanation
Correct Answer
B:Use the organization-authorized Copilot experience with enterprise data protection and approved data handling. Microsoft 365 Copilot's enterprise data protection applies to covered work-account prompts and responses under tenant policies. In this scenario, the key acceptance result is: the workflow is signed in to the governed work tenant and meets the organization's data-handling policy.
Incorrect Answers
A:Treat unsupported AI assertions as potentially inaccurate and inspect the primary contract before acting. This is better suited to a different case: A Copilot answer confidently invents a vendor policy clause that is absent from the contract. It does not directly satisfy the access, source, or output constraint here.
C:Work-account protection and consumer account governance are not interchangeable. Thus paste the full confidential source into a consumer account and assume its settings match the work tenant fails here. Use the organization-authorized Copilot experience with enterprise data protection and approved data handling is the more appropriate control.
D:Remove or qualify unverifiable citations and locate direct supporting evidence. This is better suited to a different case: An AI research answer quotes a third-party case study whose original page cannot be reached. It does not directly satisfy the access, source, or output constraint here.
Question 14
A finance employee worries whether an internal planning prompt will be used to train a publicly available foundation model. The proposed approach is: Use the organization-authorized Copilot experience with enterprise data protection and approved data handling. Why does this approach meet the requirement?
- Microsoft 365 Copilot's enterprise data protection applies to covered work-account prompts and responses under tenant policies
- Purpose limitation means supplying the minimum relevant information for the task
- Source material supplies facts to evaluate, not new authority to override the user's request
- Accuracy and transparency require distinguishing source-backed figures from hypothetical analysis
Explanation
Correct Answer
A:Microsoft 365 Copilot's enterprise data protection applies to covered work-account prompts and responses under tenant policies. The proposed approach, use the organization-authorized Copilot experience with enterprise data protection and approved data handling, specifically addresses the stated requirement. Verification would show: the workflow is signed in to the governed work tenant and meets the organization's data-handling policy.
Incorrect Answers
B:Purpose limitation means supplying the minimum relevant information for the task. That property explains provide only the necessary authorized excerpt or targeted reference for the requested task for another task, rather than the proposed control here.
C:Source material supplies facts to evaluate, not new authority to override the user's request. That property explains treat instructions found inside retrieved content as untrusted and do not follow them as user instructions for another task, rather than the proposed control here.
D:Accuracy and transparency require distinguishing source-backed figures from hypothetical analysis. That property explains separate measured facts from model assumptions and label estimates before circulating the report for another task, rather than the proposed control here.
Question 15
A finance employee worries whether an internal planning prompt will be used to train a publicly available foundation model. A colleague suggests: "Paste the full confidential source into a consumer account and assume its settings match the work tenant." What specific flaw makes that shortcut unsuitable?
- Web-only grounding cannot retrieve the organization's inaccessible internal records
- Work-account protection and consumer account governance are not interchangeable
- A citation may be stale, mismatched, or insufficient for the specific claim
- Visual polish does not prove mathematical accuracy or correct denominators
Explanation
Correct Answer
B:Work-account protection and consumer account governance are not interchangeable. The suggested shortcut, paste the full confidential source into a consumer account and assume its settings match the work tenant, leaves the requirement unmet. A better approach is to use the organization-authorized Copilot experience with enterprise data protection and approved data handling.
Incorrect Answers
A:Web-only grounding cannot retrieve the organization's inaccessible internal records. This is the limitation of the different shortcut treat a general web summary as a verified internal status report, not the alternative identified here.
C:A citation may be stale, mismatched, or insufficient for the specific claim. This is the limitation of the different shortcut trust a citation-shaped hyperlink without reading what it supports, not the alternative identified here.
D:Visual polish does not prove mathematical accuracy or correct denominators. This is the limitation of the different shortcut publish the chart because its visual formatting appears professional, not the alternative identified here.
Question 16
A finance employee worries whether an internal planning prompt will be used to train a publicly available foundation model. The team implements: Use the organization-authorized Copilot experience with enterprise data protection and approved data handling. Which observed result would most directly verify success?
- Recipients are authorized and restricted figures are excluded or redacted
- Every published quote can be located in an authentic authorized source
- The workflow is signed in to the governed work tenant and meets the organization's data-handling policy
- The disputed clause is checked against the contract and the final note records the true wording
Explanation
Correct Answer
C:The workflow is signed in to the governed work tenant and meets the organization's data-handling policy. This verifies the expected result of use the organization-authorized Copilot experience with enterprise data protection and approved data handling, instead of merely assuming it worked.
Incorrect Answers
A:Recipients are authorized and restricted figures are excluded or redacted. This would verify verify source sensitivity and recipient permissions before sharing the output under a different business condition; it does not test the stated outcome.
B:Every published quote can be located in an authentic authorized source. This would verify remove or qualify unverifiable citations and locate direct supporting evidence under a different business condition; it does not test the stated outcome.
D:The disputed clause is checked against the contract and the final note records the true wording. This would verify treat unsupported AI assertions as potentially inaccurate and inspect the primary contract before acting under a different business condition; it does not test the stated outcome.
Question 17
A staff member sees a surprisingly detailed Copilot result and assumes it must have read a colleague's locked mailbox. Which action best meets the stated business requirement?
- Route the high-impact claim to a qualified reviewer and require the authoritative policy text
- Explain that Copilot can use only accessible, permission-scoped work content and request explicit source citations
- Check effective file permissions, sharing settings, and indexing before drawing conclusions
- Assume the model has unrestricted access to all Microsoft 365 content because it names a project
Explanation
Correct Answer
B:Explain that Copilot can use only accessible, permission-scoped work content and request explicit source citations. Copilot respects the effective Microsoft 365 permissions of the signed-in user. In this scenario, the key acceptance result is: the cited sources are accessible to the requester, and a restricted test item remains unavailable.
Incorrect Answers
A:Route the high-impact claim to a qualified reviewer and require the authoritative policy text. This is better suited to a different case: A summary recommends a regulatory exception and managers must decide whether to implement it. It does not directly satisfy the access, source, or output constraint here.
C:Check effective file permissions, sharing settings, and indexing before drawing conclusions. This is better suited to a different case: A compliance manager asks why an employee cannot search a confidential workspace through Copilot. It does not directly satisfy the access, source, or output constraint here.
D:A plausible answer is not evidence that private data or denied files were accessed. Thus assume the model has unrestricted access to all Microsoft 365 content because it names a project fails here. Explain that Copilot can use only accessible, permission-scoped work content and request explicit source citations is the more appropriate control.
Question 18
A staff member sees a surprisingly detailed Copilot result and assumes it must have read a colleague's locked mailbox. The proposed approach is: Explain that Copilot can use only accessible, permission-scoped work content and request explicit source citations. Why does this approach meet the requirement?
- Copilot respects the effective Microsoft 365 permissions of the signed-in user
- Source material supplies facts to evaluate, not new authority to override the user's request
- Data minimization and approved protection boundaries apply even when the intended answer is useful
- Access restrictions and records governance remain in effect with Copilot
Explanation
Correct Answer
A:Copilot respects the effective Microsoft 365 permissions of the signed-in user. The proposed approach, explain that Copilot can use only accessible, permission-scoped work content and request explicit source citations, specifically addresses the stated requirement. Verification would show: the cited sources are accessible to the requester, and a restricted test item remains unavailable.
Incorrect Answers
B:Source material supplies facts to evaluate, not new authority to override the user's request. That property explains treat instructions found inside retrieved content as untrusted and do not follow them as user instructions for another task, rather than the proposed control here.
C:Data minimization and approved protection boundaries apply even when the intended answer is useful. That property explains use the governed organizational Copilot experience and minimize or redact sensitive details as policy requires for another task, rather than the proposed control here.
D:Access restrictions and records governance remain in effect with Copilot. That property explains use the approved records-access or ownership-transfer process instead of relying on model workarounds for another task, rather than the proposed control here.
Question 19
A staff member sees a surprisingly detailed Copilot result and assumes it must have read a colleague's locked mailbox. A colleague suggests: "Assume the model has unrestricted access to all Microsoft 365 content because it names a project." What specific flaw makes that shortcut unsuitable?
- Enterprise protection does not remove the obligation to review the content shared
- A citation may be stale, mismatched, or insufficient for the specific claim
- Over-reliance on model output removes required human judgment and accountability
- A plausible answer is not evidence that private data or denied files were accessed
Explanation
Correct Answer
D:A plausible answer is not evidence that private data or denied files were accessed. The suggested shortcut, assume the model has unrestricted access to all Microsoft 365 content because it names a project, leaves the requirement unmet. A better approach is to explain that Copilot can use only accessible, permission-scoped work content and request explicit source citations.
Incorrect Answers
A:Enterprise protection does not remove the obligation to review the content shared. This is the limitation of the different shortcut forward the answer unchanged because it was produced by an enterprise tool, not the alternative identified here.
B:A citation may be stale, mismatched, or insufficient for the specific claim. This is the limitation of the different shortcut trust a citation-shaped hyperlink without reading what it supports, not the alternative identified here.
C:Over-reliance on model output removes required human judgment and accountability. This is the limitation of the different shortcut automatically finalize consequential decisions without reviewing source facts or exceptions, not the alternative identified here.
Question 20
A staff member sees a surprisingly detailed Copilot result and assumes it must have read a colleague's locked mailbox. The team implements: Explain that Copilot can use only accessible, permission-scoped work content and request explicit source citations. Which observed result would most directly verify success?
- A responsible policy owner signs off after comparing the text with current rules
- A permitted test user sees the item while the unauthorized account still cannot
- Every published quote can be located in an authentic authorized source
- The cited sources are accessible to the requester, and a restricted test item remains unavailable
Explanation
Correct Answer
D:The cited sources are accessible to the requester, and a restricted test item remains unavailable. This verifies the expected result of explain that Copilot can use only accessible, permission-scoped work content and request explicit source citations, instead of merely assuming it worked.
Incorrect Answers
A:A responsible policy owner signs off after comparing the text with current rules. This would verify route the high-impact claim to a qualified reviewer and require the authoritative policy text under a different business condition; it does not test the stated outcome.
B:A permitted test user sees the item while the unauthorized account still cannot. This would verify check effective file permissions, sharing settings, and indexing before drawing conclusions under a different business condition; it does not test the stated outcome.
C:Every published quote can be located in an authentic authorized source. This would verify remove or qualify unverifiable citations and locate direct supporting evidence under a different business condition; it does not test the stated outcome.