AI Business Professional AB-730 Practice Test 4
Question 30
An internal auditor asks whether employee prompts made in a managed work account leave any audit trail. The proposed approach is: Follow organizational audit, retention, and sensitivity policies before using the managed Copilot experience. Why does this approach meet the requirement?
- Work-account Copilot usage can be governed and logged by organizational controls
- Data minimization and approved protection boundaries apply even when the intended answer is useful
- Source material supplies facts to evaluate, not new authority to override the user's request
- Access restrictions and records governance remain in effect with Copilot
Explanation
Correct Answer
A:Work-account Copilot usage can be governed and logged by organizational controls. The proposed approach, follow organizational audit, retention, and sensitivity policies before using the managed Copilot experience, specifically addresses the stated requirement. Verification would show: the compliance owner confirms the approved audit and retention configuration for the use case.
Incorrect Answers
B:Data minimization and approved protection boundaries apply even when the intended answer is useful. That property explains use the governed organizational Copilot experience and minimize or redact sensitive details as policy requires for another task, rather than the proposed control here.
C:Source material supplies facts to evaluate, not new authority to override the user's request. That property explains treat instructions found inside retrieved content as untrusted and do not follow them as user instructions for another task, rather than the proposed control here.
D:Access restrictions and records governance remain in effect with Copilot. That property explains use the approved records-access or ownership-transfer process instead of relying on model workarounds for another task, rather than the proposed control here.
Question 31
An internal auditor asks whether employee prompts made in a managed work account leave any audit trail. A colleague suggests: "Promise that enterprise data protection makes all work prompts invisible to tenant administrators." What specific flaw makes that shortcut unsuitable?
- A citation may be stale, mismatched, or insufficient for the specific claim
- Over-reliance on model output removes required human judgment and accountability
- Enterprise protection does not remove the obligation to review the content shared
- Enterprise protection does not mean tenant audit and compliance tools are disabled
Explanation
Correct Answer
D:Enterprise protection does not mean tenant audit and compliance tools are disabled. The suggested shortcut, promise that enterprise data protection makes all work prompts invisible to tenant administrators, leaves the requirement unmet. A better approach is to follow organizational audit, retention, and sensitivity policies before using the managed Copilot experience.
Incorrect Answers
A:A citation may be stale, mismatched, or insufficient for the specific claim. This is the limitation of the different shortcut trust a citation-shaped hyperlink without reading what it supports, not the alternative identified here.
B:Over-reliance on model output removes required human judgment and accountability. This is the limitation of the different shortcut automatically finalize consequential decisions without reviewing source facts or exceptions, not the alternative identified here.
C:Enterprise protection does not remove the obligation to review the content shared. This is the limitation of the different shortcut forward the answer unchanged because it was produced by an enterprise tool, not the alternative identified here.
Question 32
An internal auditor asks whether employee prompts made in a managed work account leave any audit trail. The team implements: Follow organizational audit, retention, and sensitivity policies before using the managed Copilot experience. Which observed result would most directly verify success?
- Every published quote can be located in an authentic authorized source
- The compliance owner confirms the approved audit and retention configuration for the use case
- A responsible policy owner signs off after comparing the text with current rules
- A permitted test user sees the item while the unauthorized account still cannot
Explanation
Correct Answer
B:The compliance owner confirms the approved audit and retention configuration for the use case. This verifies the expected result of follow organizational audit, retention, and sensitivity policies before using the managed Copilot experience, instead of merely assuming it worked.
Incorrect Answers
A:Every published quote can be located in an authentic authorized source. This would verify remove or qualify unverifiable citations and locate direct supporting evidence under a different business condition; it does not test the stated outcome.
C:A responsible policy owner signs off after comparing the text with current rules. This would verify route the high-impact claim to a qualified reviewer and require the authoritative policy text under a different business condition; it does not test the stated outcome.
D:A permitted test user sees the item while the unauthorized account still cannot. This would verify check effective file permissions, sharing settings, and indexing before drawing conclusions under a different business condition; it does not test the stated outcome.
Question 33
A contractor's work account can read only its assigned SharePoint site but the question references other departments. Which action best meets the stated business requirement?
- Respect denied access and request the document owner's authorization through established channels
- Use shared work sources within the user's granted access or obtain authorization from the content owner
- Copy restricted content into a public folder just to improve Copilot's response
- Separate measured facts from model assumptions and label estimates before circulating the report
Explanation
Correct Answer
B:Use shared work sources within the user's granted access or obtain authorization from the content owner. Permission-scoped grounding cannot justify changing sharing boundaries without business authorization. In this scenario, the key acceptance result is: only the allowed site contributes grounded results and the original restricted access stays intact.
Incorrect Answers
A:Respect denied access and request the document owner's authorization through established channels. This is better suited to a different case: A user with no permission to an HR case file asks Copilot to list confidential salary reviews. It does not directly satisfy the access, source, or output constraint here.
C:Broadening file permissions solely for AI grounding creates unnecessary disclosure risk. Thus copy restricted content into a public folder just to improve Copilot's response fails here. Use shared work sources within the user's granted access or obtain authorization from the content owner is the more appropriate control.
D:Separate measured facts from model assumptions and label estimates before circulating the report. This is better suited to a different case: An AI-generated customer report includes a fabricated statistic and unlabeled forecast. It does not directly satisfy the access, source, or output constraint here.
Question 34
A contractor's work account can read only its assigned SharePoint site but the question references other departments. The proposed approach is: Use shared work sources within the user's granted access or obtain authorization from the content owner. Why does this approach meet the requirement?
- Permission-scoped grounding cannot justify changing sharing boundaries without business authorization
- The selected grounding mode constrains which work sources can inform an answer
- Validation includes quantitative recomputation and matching charts to source data
- Access restrictions and records governance remain in effect with Copilot
Explanation
Correct Answer
A:Permission-scoped grounding cannot justify changing sharing boundaries without business authorization. The proposed approach, use shared work sources within the user's granted access or obtain authorization from the content owner, specifically addresses the stated requirement. Verification would show: only the allowed site contributes grounded results and the original restricted access stays intact.
Incorrect Answers
B:The selected grounding mode constrains which work sources can inform an answer. That property explains enable authorized work grounding or provide a permitted file instead of inventing missing internal details for another task, rather than the proposed control here.
C:Validation includes quantitative recomputation and matching charts to source data. That property explains recalculate the figures from source data and correct discrepancies before publication for another task, rather than the proposed control here.
D:Access restrictions and records governance remain in effect with Copilot. That property explains use the approved records-access or ownership-transfer process instead of relying on model workarounds for another task, rather than the proposed control here.
Question 35
A contractor's work account can read only its assigned SharePoint site but the question references other departments. A colleague suggests: "Copy restricted content into a public folder just to improve Copilot's response." What specific flaw makes that shortcut unsuitable?
- Over-reliance on model output removes required human judgment and accountability
- Broadening file permissions solely for AI grounding creates unnecessary disclosure risk
- Generative AI may produce persuasive but unsupported details
- A summary can still disclose sensitive source information
Explanation
Correct Answer
B:Broadening file permissions solely for AI grounding creates unnecessary disclosure risk. The suggested shortcut, copy restricted content into a public folder just to improve Copilot's response, leaves the requirement unmet. A better approach is to use shared work sources within the user's granted access or obtain authorization from the content owner.
Incorrect Answers
A:Over-reliance on model output removes required human judgment and accountability. This is the limitation of the different shortcut automatically finalize consequential decisions without reviewing source facts or exceptions, not the alternative identified here.
C:Generative AI may produce persuasive but unsupported details. This is the limitation of the different shortcut approve a legal decision because the answer sounds confident and fluent, not the alternative identified here.
D:A summary can still disclose sensitive source information. This is the limitation of the different shortcut assume generated text becomes public information because it was paraphrased by AI, not the alternative identified here.
Question 36
A contractor's work account can read only its assigned SharePoint site but the question references other departments. The team implements: Use shared work sources within the user's granted access or obtain authorization from the content owner. Which observed result would most directly verify success?
- The restricted information remains inaccessible unless permission is explicitly granted
- The final report labels assumptions and cross-checks measured numbers with trusted records
- A responsible policy owner signs off after comparing the text with current rules
- Only the allowed site contributes grounded results and the original restricted access stays intact
Explanation
Correct Answer
D:Only the allowed site contributes grounded results and the original restricted access stays intact. This verifies the expected result of use shared work sources within the user's granted access or obtain authorization from the content owner, instead of merely assuming it worked.
Incorrect Answers
A:The restricted information remains inaccessible unless permission is explicitly granted. This would verify respect denied access and request the document owner's authorization through established channels under a different business condition; it does not test the stated outcome.
B:The final report labels assumptions and cross-checks measured numbers with trusted records. This would verify separate measured facts from model assumptions and label estimates before circulating the report under a different business condition; it does not test the stated outcome.
C:A responsible policy owner signs off after comparing the text with current rules. This would verify route the high-impact claim to a qualified reviewer and require the authoritative policy text under a different business condition; it does not test the stated outcome.
Question 37
A sales coordinator requests a Copilot summary of files outside the sharing scope granted to their team. Which action best meets the stated business requirement?
- Open the cited source, verify the exact figure, its date, and whether it applies to this decision
- Use shared work sources within the user's granted access or obtain authorization from the content owner
- Copy restricted content into a public folder just to improve Copilot's response
- Enable authorized work grounding or provide a permitted file instead of inventing missing internal details
Explanation
Correct Answer
B:Use shared work sources within the user's granted access or obtain authorization from the content owner. Permission-scoped grounding cannot justify changing sharing boundaries without business authorization. In this scenario, the key acceptance result is: only the allowed site contributes grounded results and the original restricted access stays intact.
Incorrect Answers
A:Open the cited source, verify the exact figure, its date, and whether it applies to this decision. This is better suited to a different case: A proposal cites an internal budget figure but its source document is dated two fiscal years ago. It does not directly satisfy the access, source, or output constraint here.
C:Broadening file permissions solely for AI grounding creates unnecessary disclosure risk. Thus copy restricted content into a public folder just to improve Copilot's response fails here. Use shared work sources within the user's granted access or obtain authorization from the content owner is the more appropriate control.
D:Enable authorized work grounding or provide a permitted file instead of inventing missing internal details. This is better suited to a different case: A response includes publicly available company information but the prompt requests private project milestones. It does not directly satisfy the access, source, or output constraint here.
Question 38
A sales coordinator requests a Copilot summary of files outside the sharing scope granted to their team. The proposed approach is: Use shared work sources within the user's granted access or obtain authorization from the content owner. Why does this approach meet the requirement?
- Permission-scoped grounding cannot justify changing sharing boundaries without business authorization
- Information protection can legitimately restrict what a prompt may retrieve
- Human verification and source grounding are essential for high-impact factual assertions
- Verification requires traceable underlying evidence, not decorative reference markers
Explanation
Correct Answer
A:Permission-scoped grounding cannot justify changing sharing boundaries without business authorization. The proposed approach, use shared work sources within the user's granted access or obtain authorization from the content owner, specifically addresses the stated requirement. Verification would show: only the allowed site contributes grounded results and the original restricted access stays intact.
Incorrect Answers
B:Information protection can legitimately restrict what a prompt may retrieve. That property explains check effective file permissions, sharing settings, and indexing before drawing conclusions for another task, rather than the proposed control here.
C:Human verification and source grounding are essential for high-impact factual assertions. That property explains treat unsupported AI assertions as potentially inaccurate and inspect the primary contract before acting for another task, rather than the proposed control here.
D:Verification requires traceable underlying evidence, not decorative reference markers. That property explains remove or qualify unverifiable citations and locate direct supporting evidence for another task, rather than the proposed control here.
Question 39
A sales coordinator requests a Copilot summary of files outside the sharing scope granted to their team. A colleague suggests: "Copy restricted content into a public folder just to improve Copilot's response." What specific flaw makes that shortcut unsuitable?
- Generated predictions are not verified historical measurements
- Unnecessary sensitive context increases data exposure without improving the focused answer
- Prompt injection attempts to redirect a model from its authorized task through untrusted content
- Broadening file permissions solely for AI grounding creates unnecessary disclosure risk
Explanation
Correct Answer
D:Broadening file permissions solely for AI grounding creates unnecessary disclosure risk. The suggested shortcut, copy restricted content into a public folder just to improve Copilot's response, leaves the requirement unmet. A better approach is to use shared work sources within the user's granted access or obtain authorization from the content owner.
Incorrect Answers
A:Generated predictions are not verified historical measurements. This is the limitation of the different shortcut present generated projections as observed operational results, not the alternative identified here.
B:Unnecessary sensitive context increases data exposure without improving the focused answer. This is the limitation of the different shortcut include the maximum possible confidential data to make the model more certain, not the alternative identified here.
C:Prompt injection attempts to redirect a model from its authorized task through untrusted content. This is the limitation of the different shortcut obey commands embedded in source documents because they appear beside relevant facts, not the alternative identified here.
Question 40
A sales coordinator requests a Copilot summary of files outside the sharing scope granted to their team. The team implements: Use shared work sources within the user's granted access or obtain authorization from the content owner. Which observed result would most directly verify success?
- Only the allowed site contributes grounded results and the original restricted access stays intact
- Recomputed totals, labels, and units agree with the approved underlying dataset
- The reviewer can reproduce the figure from a current source or marks it unsupported
- The final response uses accessible project data or clearly states the information is unavailable
Explanation
Correct Answer
A:Only the allowed site contributes grounded results and the original restricted access stays intact. This verifies the expected result of use shared work sources within the user's granted access or obtain authorization from the content owner, instead of merely assuming it worked.
Incorrect Answers
B:Recomputed totals, labels, and units agree with the approved underlying dataset. This would verify recalculate the figures from source data and correct discrepancies before publication under a different business condition; it does not test the stated outcome.
C:The reviewer can reproduce the figure from a current source or marks it unsupported. This would verify open the cited source, verify the exact figure, its date, and whether it applies to this decision under a different business condition; it does not test the stated outcome.
D:The final response uses accessible project data or clearly states the information is unavailable. This would verify enable authorized work grounding or provide a permitted file instead of inventing missing internal details under a different business condition; it does not test the stated outcome.
