The latest changes and updates from the administration for this exam.
Latest Update: Jun 14 2026
All questions are working fine.
A business analyst at Tailwind Traders has several CSV exports with sales data. They want Copilot to act like a data expert: attach the files, ask “Where are we losing margin?” and get charts and explanations they can present to leadership, without learning Power BI.
Analyst is best used when you need Copilot to _____.
Contoso’s compliance officer is worried about harassment, inappropriate language, and accidental sharing of confidential deal details in Teams chats and email, especially as people start using Copilot to draft messages faster. They want a solution that can sample communications across channels, flag potentially problematic messages, and route them to reviewers under privacy controls. A colleague suggests “just turning on more DLP” and treating it as the same problem as file exfiltration.
In this scenario, using Microsoft Purview Communication Compliance policies to detect and review problematic communications is appropriate.
A security engineer explains Identity Secure Score to management as follows:
“Some improvement actions give partial credit if you roll them out to only part of the organisation. For example, enabling MFA for all admins but not all users can still give you some points, even though the action isn’t fully completed for the whole tenant.”
Is this statement True or False?
You are developing a custom line-of-business web API and a SPA that will use Microsoft Entra ID for sign-in and tokens. You need to define:
Redirect URIs
Supported account types
Exposed API scopes
This global blueprint of the app is stored as an application object in the tenant and is created and managed in the _____ blade of the Microsoft Entra admin center.
Your organisation has enabled DLP policies that include Microsoft 365 Copilot as a policy location. The SOC complains that DLP alerts are being handled in isolation and they can’t easily see:
When DLP alerts correlate with endpoint or email threats
Whether multiple DLP alerts relate to a single user or incident
A unified queue where they can hunt, tag, and remediate
You’ve confirmed that DLP alerts are being generated. Which action should you take to give the SOC the investigation experience they want, without moving policy authoring out of Purview?
Contoso’s legal team is preparing for Microsoft 365 Copilot and wants to make sure contracts and regulatory opinions are consistently classified and protected wherever they are stored or used. They also want Copilot and DLP policies to understand the same sensitivity categories without rewriting rules for every app. The compliance lead decides to start by defining a common set of labels that travel with the data.
Which Microsoft Purview solution should they configure first?
You need to prevent external senders from emailing an existing internal announcement list [email protected] while keeping internal use unchanged. A colleague suggests:
“In Exchange Online, you should edit the distribution group object in the Exchange admin center and configure its delivery management and address list options there, instead of touching each member’s mailbox.”
Is this guidance correct?
Fabrikam’s IT support team wants a guided “IT Triage” experience that gathers key details, checks known issues, and then creates or updates tickets in their IT system. They want this behaviour to be consistent every time and separate from ad-hoc Copilot questions users might ask elsewhere.
Fill in the blank:
To meet these goals, the team should create a ____.
At Fabrikam, the transformation office wants to go beyond basic usage counts and understand deeper patterns like which departments use Copilot most frequently, how consistently people use it week to week, and how usage clusters across roles. They ask a data analyst to use Microsoft’s dedicated Copilot Analytics experience instead of building a custom data model from scratch.
Fill in the blank:
To answer these questions at the organizational level, the analyst should use the ____.
Woodgrove Bank has several custom agents in production and wants to understand how often they are used and how adoption varies by agent. The AI admin prefers a built-in report in the Microsoft 365 admin center that shows active users and usage for each agent without exporting raw logs.
Which report should the admin use?
