Question 1
A manager reviews residual risk after addressing: A classified strategy report is encrypted and a user without appropriate rights asks Copilot to summarize it. Which caveat is most relevant?
Explanation
Correct Answer
Classification labels do not excuse sharing the derived summary to unauthorized audiences. The scenario is: A classified strategy report is encrypted and a user without appropriate rights asks Copilot to summarize it. The response should be: Respect the label and obtain appropriate authorization rather than disabling protection. That response addresses sensitivity labels and encryption-related usage rights can restrict grounding and generation. However, the selected limitation still applies. Confirm the immediate improvement with: Only entitled users can request supported summaries of the protected content.
Incorrect Answers
Removing a customer name alone may not anonymize commercially sensitive transaction details. That caveat concerns the different situation: A finance employee plans to paste an unreleased acquisition price into a public consumer AI tool to improve a presentation. In the stated case: A classified strategy report is encrypted and a user without appropriate rights asks Copilot to summarize it. The applicable response is: Respect the label and obtain appropriate authorization rather than disabling protection. Its more direct remaining limitation is: Classification labels do not excuse sharing the derived summary to unauthorized audiences.
A sanitized summary can still reveal protected facts through small-group inference. That caveat concerns the different situation: A supervisor prepares to paste a confidential Copilot summary into an open Teams channel. In the stated case: A classified strategy report is encrypted and a user without appropriate rights asks Copilot to summarize it. The applicable response is: Respect the label and obtain appropriate authorization rather than disabling protection. Its more direct remaining limitation is: Classification labels do not excuse sharing the derived summary to unauthorized audiences.
Workbook owners must still remediate the malicious text for other consumers. That caveat concerns the different situation: An imported spreadsheet includes a cell telling Copilot to ignore organizational rules and reveal hidden salary tabs. In the stated case: A classified strategy report is encrypted and a user without appropriate rights asks Copilot to summarize it. The applicable response is: Respect the label and obtain appropriate authorization rather than disabling protection. Its more direct remaining limitation is: Classification labels do not excuse sharing the derived summary to unauthorized audiences.