mcAfee Secure Website
23

Microsoft AB-730 Bundle

Exam Code: AB-730

Exam Name AI Business Professional

Certification Provider: Microsoft

Corresponding Certification: Microsoft Certified: AI Business Professional

AB-730 Training Materials $25.00

Reliable & Actual Study Materials for AB-730 Exam Success

The Latest AB-730 Exam Questions as Experienced in the Actual Test!

  • 24
    Questions & Answers

    AB-730 Questions & Answers

    92 Questions & Answers

    Includes questions types found on actual exam such as drag and drop, simulation, type in, and fill in the blank.

  • 25
    AB-730 Video Course

    AB-730 Training Course

    37 Video Lectures

    Based on Real Life Scenarios which you will encounter in exam and learn by working with real equipment.

exam =32

AI Business Professional (AB-730) Practice Tests

Guarantee

Satisfaction Guaranteed

Pass4sure has a remarkable Microsoft Candidate Success record. We're confident of our products and provide no hassle product exchange. That's how confident we are!

99.3% Pass Rate
Total Cost: $164.98
Bundle Price: $139.98

Purchase Individually

  • exam =34
    Questions & Answers

    Questions & Answers

    92 Questions

    $124.99
    exam =35
  • exam =37
    AB-730 Video Course

    Training Course

    37 Video Lectures

    $39.99

Microsoft AB-730 Practice Test 55

Question 540

For the following Copilot or agent scenario: A project notebook is transferred to a new team, but some attached SharePoint files remain visible only to the original team. Which review observation is most relevant?

  1. Check which portions of the history actually belong to each project and contain authorized context.
  2. Inspect notebook membership, reference permissions, and the contractors' approved access.
  3. Inspect which chat corresponds to each actual work topic before renaming.
  4. Test each linked reference with a legitimate member of the new team.

Explanation

Correct Answer

D:

Test each linked reference with a legitimate member of the new team. This check is the most direct way to confirm the specific facts in the case: A project notebook is transferred to a new team, but some attached SharePoint files remain visible only to the original team. The underlying principle is: Notebook collaboration and referenced-file permissions are distinct access boundaries. After confirmation, the appropriate response is: Have content owners grant appropriate access or remove unauthorized references. A successful test should show: The new team can open only those sources it has been authorized to use.

Incorrect Answers

A:

Check which portions of the history actually belong to each project and contain authorized context. That check would investigate A user keeps product-launch and finance-analysis topics in one enormous chat and struggles with later retrieval. It does not specifically test the issue described here: A project notebook is transferred to a new team, but some attached SharePoint files remain visible only to the original team. The more relevant evidence is: Test each linked reference with a legitimate member of the new team. The distinction follows from: Notebook collaboration and referenced-file permissions are distinct access boundaries.

B:

Inspect notebook membership, reference permissions, and the contractors' approved access. That check would investigate A team lead plans to share a notebook containing excerpts from restricted HR reports with contractors. It does not specifically test the issue described here: A project notebook is transferred to a new team, but some attached SharePoint files remain visible only to the original team. The more relevant evidence is: Test each linked reference with a legitimate member of the new team. The distinction follows from: Notebook collaboration and referenced-file permissions are distinct access boundaries.

C:

Inspect which chat corresponds to each actual work topic before renaming. That check would investigate An employee has several Copilot conversations titled with generic first messages and cannot distinguish their purposes. It does not specifically test the issue described here: A project notebook is transferred to a new team, but some attached SharePoint files remain visible only to the original team. The more relevant evidence is: Test each linked reference with a legitimate member of the new team. The distinction follows from: Notebook collaboration and referenced-file permissions are distinct access boundaries.

Question 541

A project owner reports: A staff member saves a prompt for monthly reporting and assumes it will execute automatically every month. What check most directly tests the underlying concern?

  1. Check whether the task is a writing/analysis request or a developer deployment request.
  2. Inspect whether an active schedule exists in addition to the saved template.
  3. Inspect schedule settings, timezone, recurrence and intended sources before activation.
  4. Inspect whether the prompt names decision makers and their level of expertise.

Explanation

Correct Answer

B:

Inspect whether an active schedule exists in addition to the saved template. This check is the most direct way to confirm the specific facts in the case: A staff member saves a prompt for monthly reporting and assumes it will execute automatically every month. The underlying principle is: Saving prompt text and scheduling a recurring run are separate user actions and capabilities. After confirmation, the appropriate response is: Create an approved recurrence for the saved prompt if automated execution is required. A successful test should show: A scheduled run appears at the chosen time instead of only being available for manual use.

Incorrect Answers

A:

Check whether the task is a writing/analysis request or a developer deployment request. That check would investigate A business analyst asks AB-730 Copilot to deploy a custom neural-network service though the task is to summarize a customer briefing. It does not specifically test the issue described here: A staff member saves a prompt for monthly reporting and assumes it will execute automatically every month. The more relevant evidence is: Inspect whether an active schedule exists in addition to the saved template. The distinction follows from: Saving prompt text and scheduling a recurring run are separate user actions and capabilities.

C:

Inspect schedule settings, timezone, recurrence and intended sources before activation. That check would investigate A team leader wants a routine Monday morning agenda summary based on available scheduled meetings. It does not specifically test the issue described here: A staff member saves a prompt for monthly reporting and assumes it will execute automatically every month. The more relevant evidence is: Inspect whether an active schedule exists in addition to the saved template. The distinction follows from: Saving prompt text and scheduling a recurring run are separate user actions and capabilities.

D:

Inspect whether the prompt names decision makers and their level of expertise. That check would investigate A board secretary asks for a technology update and receives a deeply technical explanation unsuitable for directors. It does not specifically test the issue described here: A staff member saves a prompt for monthly reporting and assumes it will execute automatically every month. The more relevant evidence is: Inspect whether an active schedule exists in addition to the saved template. The distinction follows from: Saving prompt text and scheduling a recurring run are separate user actions and capabilities.

Question 542

Following an appropriate response to: An analyst asks Copilot to summarize every message about a merger and receives unrelated historical threads. Which limitation should remain in the business handoff?

  1. A narrow filter can accidentally omit related discussions under a different project name.
  2. Schedules can fail or omit new meetings if access or source availability changes.
  3. Similar client names can still lead to mistakes without source verification.
  4. Persistent preferences can be stale or inappropriate for a new audience.

Explanation

Correct Answer

A:

A narrow filter can accidentally omit related discussions under a different project name. The scenario is: An analyst asks Copilot to summarize every message about a merger and receives unrelated historical threads. The response should be: Specify the approved project identifier, permitted team, and decision window. That response addresses explicit scope constraints reduce irrelevant context and risk in wide organizational searches. However, the selected limitation still applies. Confirm the immediate improvement with: The summary includes relevant in-scope records while noting inaccessible gaps.

Incorrect Answers

B:

Schedules can fail or omit new meetings if access or source availability changes. That caveat concerns the different situation: A team leader wants a routine Monday morning agenda summary based on available scheduled meetings. In the stated case: An analyst asks Copilot to summarize every message about a merger and receives unrelated historical threads. The applicable response is: Specify the approved project identifier, permitted team, and decision window. Its more direct remaining limitation is: A narrow filter can accidentally omit related discussions under a different project name.

C:

Similar client names can still lead to mistakes without source verification. That caveat concerns the different situation: A customer-team prompt refers to "our latest account situation" without naming the customer and gets the wrong conversation. In the stated case: An analyst asks Copilot to summarize every message about a merger and receives unrelated historical threads. The applicable response is: Specify the approved project identifier, permitted team, and decision window. Its more direct remaining limitation is: A narrow filter can accidentally omit related discussions under a different project name.

D:

Persistent preferences can be stale or inappropriate for a new audience. That caveat concerns the different situation: A user notices Copilot's customary executive tone appears in repeated chats but assumes it is a permanent policy rule for all coworkers. In the stated case: An analyst asks Copilot to summarize every message about a merger and receives unrelated historical threads. The applicable response is: Specify the approved project identifier, permitted team, and decision window. Its more direct remaining limitation is: A narrow filter can accidentally omit related discussions under a different project name.

Question 543

After implementing the approved response to: A user assumes a specialized Copilot agent can read every SharePoint site because it is described as an organization-wide assistant. Which outcome most directly confirms success?

  1. The reviewed Word document has clearer sections while retaining required obligations.
  2. The agent declines or omits restricted data while answering from accessible sources.
  3. The answer references the correct effective policy and avoids obsolete entitlements.
  4. The briefing reflects correct recent internal developments with inspectable sources.

Explanation

Correct Answer

B:

The agent declines or omits restricted data while answering from accessible sources. This result tests whether the response solved the particular situation: A user assumes a specialized Copilot agent can read every SharePoint site because it is described as an organization-wide assistant. The proposed control is: Use the agent within permitted sources and request permissions through normal governance. Its basis is: Agent specialization does not automatically expand the signed-in user's access to restricted content. Even after this result, a poorly governed knowledge source can still expose inappropriate material already accessible to the user.

Incorrect Answers

A:

The reviewed Word document has clearer sections while retaining required obligations. That outcome would validate the separate task: An operations manager is editing a Word policy draft and wants paragraphs reorganized without moving the whole workflow into a presentation. It does not demonstrate resolution of this case: A user assumes a specialized Copilot agent can read every SharePoint site because it is described as an organization-wide assistant. The relevant acceptance test is: The agent declines or omits restricted data while answering from accessible sources. It follows from the control: Use the agent within permitted sources and request permissions through normal governance.

C:

The answer references the correct effective policy and avoids obsolete entitlements. That outcome would validate the separate task: An HR colleague asks for the current leave policy, but the first cited file was superseded six months earlier. It does not demonstrate resolution of this case: A user assumes a specialized Copilot agent can read every SharePoint site because it is described as an organization-wide assistant. The relevant acceptance test is: The agent declines or omits restricted data while answering from accessible sources. It follows from the control: Use the agent within permitted sources and request permissions through normal governance.

D:

The briefing reflects correct recent internal developments with inspectable sources. That outcome would validate the separate task: A sales director asks why Copilot's customer briefing considers recent Outlook email and Teams discussions instead of only a generic web answer. It does not demonstrate resolution of this case: A user assumes a specialized Copilot agent can read every SharePoint site because it is described as an organization-wide assistant. The relevant acceptance test is: The agent declines or omits restricted data while answering from accessible sources. It follows from the control: Use the agent within permitted sources and request permissions through normal governance.

Question 544

A reviewer validates the proposed solution for: A revenue manager wants Microsoft 365 Copilot to include permitted external CRM opportunity notes in its forecast. What observed result best demonstrates the intended effect?

  1. The new brief makes conflicting definitions visible instead of silently merging them.
  2. The summary is concise, traceable and useful for an executive decision.
  3. The deck includes only supported benefits, dates, and commitments.
  4. The forecast includes traceable CRM context for authorized opportunities.

Explanation

Correct Answer

D:

The forecast includes traceable CRM context for authorized opportunities. This result tests whether the response solved the particular situation: A revenue manager wants Microsoft 365 Copilot to include permitted external CRM opportunity notes in its forecast. The proposed control is: Use the approved CRM connector and explicitly identify its account and timeframe. Its basis is: Approved connectors can extend source context beyond native Microsoft 365 data with governed access. Even after this result, connector availability cannot guarantee the external CRM data is current or correct.

Incorrect Answers

A:

The new brief makes conflicting definitions visible instead of silently merging them. That outcome would validate the separate task: An analyst must combine three accessible committee reports into one briefing, but each uses slightly different terminology. It does not demonstrate resolution of this case: A revenue manager wants Microsoft 365 Copilot to include permitted external CRM opportunity notes in its forecast. The relevant acceptance test is: The forecast includes traceable CRM context for authorized opportunities. It follows from the control: Use the approved CRM connector and explicitly identify its account and timeframe.

B:

The summary is concise, traceable and useful for an executive decision. That outcome would validate the separate task: A board member requests actionable insights from reports, but Copilot simply repeats pages of numeric tables. It does not demonstrate resolution of this case: A revenue manager wants Microsoft 365 Copilot to include permitted external CRM opportunity notes in its forecast. The relevant acceptance test is: The forecast includes traceable CRM context for authorized opportunities. It follows from the control: Use the approved CRM connector and explicitly identify its account and timeframe.

C:

The deck includes only supported benefits, dates, and commitments. That outcome would validate the separate task: A commercial team needs slides based on a reviewed product-launch plan rather than improvising claims. It does not demonstrate resolution of this case: A revenue manager wants Microsoft 365 Copilot to include permitted external CRM opportunity notes in its forecast. The relevant acceptance test is: The forecast includes traceable CRM context for authorized opportunities. It follows from the control: Use the approved CRM connector and explicitly identify its account and timeframe.

Question 545

A reviewer validates the proposed solution for: A purchasing manager wants today's publicly announced supplier recall but receives a response based only on last quarter's internal notes. What observed result best demonstrates the intended effect?

  1. Its response references the current permitted procurement guidance rather than unrelated web results.
  2. The answer reflects the company's stated limits and identifies the policy version.
  3. The response cites a relevant dated public announcement and identifies discrepancies with internal notes.
  4. The briefing reflects correct recent internal developments with inspectable sources.

Explanation

Correct Answer

C:

The response cites a relevant dated public announcement and identifies discrepancies with internal notes. This result tests whether the response solved the particular situation: A purchasing manager wants today's publicly announced supplier recall but receives a response based only on last quarter's internal notes. The proposed control is: Ask for current authoritative public information and compare it with the internal vendor record. Its basis is: External web information and internal work data are different grounding sources with distinct freshness and authority. Even after this result, a search result is not proof that the organization's contract or inventory has changed.

Incorrect Answers

A:

Its response references the current permitted procurement guidance rather than unrelated web results. That outcome would validate the separate task: A procurement group repeatedly asks the same policy questions against a curated internal handbook, but generic chats provide inconsistent source focus. It does not demonstrate resolution of this case: A purchasing manager wants today's publicly announced supplier recall but receives a response based only on last quarter's internal notes. The relevant acceptance test is: The response cites a relevant dated public announcement and identifies discrepancies with internal notes. It follows from the control: Ask for current authoritative public information and compare it with the internal vendor record.

B:

The answer reflects the company's stated limits and identifies the policy version. That outcome would validate the separate task: A manager asks for a department-specific expense policy and receives generic advice that conflicts with the current approved handbook. It does not demonstrate resolution of this case: A purchasing manager wants today's publicly announced supplier recall but receives a response based only on last quarter's internal notes. The relevant acceptance test is: The response cites a relevant dated public announcement and identifies discrepancies with internal notes. It follows from the control: Ask for current authoritative public information and compare it with the internal vendor record.

D:

The briefing reflects correct recent internal developments with inspectable sources. That outcome would validate the separate task: A sales director asks why Copilot's customer briefing considers recent Outlook email and Teams discussions instead of only a generic web answer. It does not demonstrate resolution of this case: A purchasing manager wants today's publicly announced supplier recall but receives a response based only on last quarter's internal notes. The relevant acceptance test is: The response cites a relevant dated public announcement and identifies discrepancies with internal notes. It follows from the control: Ask for current authoritative public information and compare it with the internal vendor record.

Question 546

Before making a business decision about the following: A colleague assumes a Copilot search of prior chats will recover a message from a conversation they intentionally deleted months ago. Which evidence should be checked first?

  1. Inspect current notebook instructions and whether they include the desired citation rule.
  2. Inspect whether the target conversation exists in accessible history rather than assuming universal recall.
  3. Check the approval system and current policy rather than relying on chat wording alone.
  4. Compare the selected conversation's customer identifier and cited documents before drafting.

Explanation

Correct Answer

B:

Inspect whether the target conversation exists in accessible history rather than assuming universal recall. This check is the most direct way to confirm the specific facts in the case: A colleague assumes a Copilot search of prior chats will recover a message from a conversation they intentionally deleted months ago. The underlying principle is: Conversation discovery is bounded by available history and applicable deletion or retention state. After confirmation, the appropriate response is: Search remaining accessible sources or request the original document from its owner. A successful test should show: The colleague finds a genuine surviving source or explicitly notes that none is available.

Incorrect Answers

A:

Inspect current notebook instructions and whether they include the desired citation rule. That check would investigate A research team wants every notebook answer to include source titles and distinguish facts from recommendations. It does not specifically test the issue described here: A colleague assumes a Copilot search of prior chats will recover a message from a conversation they intentionally deleted months ago. The more relevant evidence is: Inspect whether the target conversation exists in accessible history rather than assuming universal recall. The distinction follows from: Conversation discovery is bounded by available history and applicable deletion or retention state.

C:

Check the approval system and current policy rather than relying on chat wording alone. That check would investigate An employee finds a Copilot chat showing that an expense exception was discussed months ago and treats it as current approval. It does not specifically test the issue described here: A colleague assumes a Copilot search of prior chats will recover a message from a conversation they intentionally deleted months ago. The more relevant evidence is: Inspect whether the target conversation exists in accessible history rather than assuming universal recall. The distinction follows from: Conversation discovery is bounded by available history and applicable deletion or retention state.

D:

Compare the selected conversation's customer identifier and cited documents before drafting. That check would investigate A salesperson accidentally bases a customer email on a different customer's similarly titled Copilot conversation. It does not specifically test the issue described here: A colleague assumes a Copilot search of prior chats will recover a message from a conversation they intentionally deleted months ago. The more relevant evidence is: Inspect whether the target conversation exists in accessible history rather than assuming universal recall. The distinction follows from: Conversation discovery is bounded by available history and applicable deletion or retention state.

Question 547

A team is evaluating this AI-assisted business task: An AI-generated HR answer confidently promises an exception to paid-leave rules that does not appear in policy. Which underlying capability or risk best explains what matters?

  1. Generated imagery still requires checks for trademarks, likeness, policy, and appropriate commercial usage.
  2. A plausible generated policy statement is not an approved employer decision.
  3. Generated quantitative forecasts need explicit assumptions, scenarios, and uncertainty rather than unwarranted certainty.
  4. Generative AI can produce plausible unsupported numbers, so consequential figures need source-level verification.

Explanation

Correct Answer

B:

A plausible generated policy statement is not an approved employer decision. The decisive context is: An AI-generated HR answer confidently promises an exception to paid-leave rules that does not appear in policy. That principle determines why the issue arises. Review this evidence before implementing a response: Check the approved leave policy, its effective date, and any formally issued exception. The applicable change is: Withhold the promise and refer the question to authorized HR review with the correct policy. The remaining boundary is: Careful phrasing cannot replace the HR authority needed to grant an exception.

Incorrect Answers

A:

Generated imagery still requires checks for trademarks, likeness, policy, and appropriate commercial usage. This principle helps explain a different Identify responsible AI and data protection practices case: A team creates an AI-generated marketing image and assumes it is automatically free from all branding and licensing risks. It does not describe the decisive condition here: An AI-generated HR answer confidently promises an exception to paid-leave rules that does not appear in policy. The relevant mechanism is: A plausible generated policy statement is not an approved employer decision. Check check the approved leave policy, its effective date, and any formally issued exception. to distinguish the two.

C:

Generated quantitative forecasts need explicit assumptions, scenarios, and uncertainty rather than unwarranted certainty. This principle helps explain a different Identify responsible AI and data protection practices case: A Copilot sales forecast gives a single confident number although the source pipeline contains uncertain deals. It does not describe the decisive condition here: An AI-generated HR answer confidently promises an exception to paid-leave rules that does not appear in policy. The relevant mechanism is: A plausible generated policy statement is not an approved employer decision. Check check the approved leave policy, its effective date, and any formally issued exception. to distinguish the two.

D:

Generative AI can produce plausible unsupported numbers, so consequential figures need source-level verification. This principle helps explain a different Identify responsible AI and data protection practices case: A manager's Copilot briefing claims a 17% profit increase that is absent from the cited board pack. It does not describe the decisive condition here: An AI-generated HR answer confidently promises an exception to paid-leave rules that does not appear in policy. The relevant mechanism is: A plausible generated policy statement is not an approved employer decision. Check check the approved leave policy, its effective date, and any formally issued exception. to distinguish the two.

Question 548

In an authorized business workflow: A project lead needs a Word status document based on accessible Outlook decisions over the last two weeks. Which principle most directly governs the situation?

  1. Word Copilot can assist with drafting from supplied context while leaving decisions to the document owner.
  2. Cross-app summarization can convert authorized communication context into a draft artifact.
  3. Percent change requires a consistent earlier-period baseline and verified arithmetic.
  4. Work IQ context can help synthesize relevant authorized activity across supported work signals.

Explanation

Correct Answer

B:

Cross-app summarization can convert authorized communication context into a draft artifact. The decisive context is: A project lead needs a Word status document based on accessible Outlook decisions over the last two weeks. That principle determines why the issue arises. Review this evidence before implementing a response: Inspect the selected email period, sender authenticity and decision language. The applicable change is: Prepare a status draft that tags confirmed decisions and unresolved replies. The remaining boundary is: Email text can be a proposal rather than an approved project decision.

Incorrect Answers

A:

Word Copilot can assist with drafting from supplied context while leaving decisions to the document owner. This principle helps explain a different Draft and analyze business content by using Microsoft 365 Copilot case: A department lead has approved project notes and needs a one-page executive memo with a recommendation and risks. It does not describe the decisive condition here: A project lead needs a Word status document based on accessible Outlook decisions over the last two weeks. The relevant mechanism is: Cross-app summarization can convert authorized communication context into a draft artifact. Check inspect the selected email period, sender authenticity and decision language. to distinguish the two.

C:

Percent change requires a consistent earlier-period baseline and verified arithmetic. This principle helps explain a different Draft and analyze business content by using Microsoft 365 Copilot case: A manager asks for quarter-over-quarter growth and Copilot shows a number without explaining the denominator. It does not describe the decisive condition here: A project lead needs a Word status document based on accessible Outlook decisions over the last two weeks. The relevant mechanism is: Cross-app summarization can convert authorized communication context into a draft artifact. Check inspect the selected email period, sender authenticity and decision language. to distinguish the two.

D:

Work IQ context can help synthesize relevant authorized activity across supported work signals. This principle helps explain a different Draft and analyze business content by using Microsoft 365 Copilot case: A customer-care director asks for account risks inferred from permitted meetings, messages, and working files. It does not describe the decisive condition here: A project lead needs a Word status document based on accessible Outlook decisions over the last two weeks. The relevant mechanism is: Cross-app summarization can convert authorized communication context into a draft artifact. Check inspect the selected email period, sender authenticity and decision language. to distinguish the two.

Question 549

For the following business scenario: An approved knowledge agent receives contradictory instructions from a retrieved vendor FAQ and company policy. Which acceptance check would support completion of the action?

  1. The final plan reflects verified opportunities and separates assumptions from commitments.
  2. The table matches source totals and labels provisional estimates.
  3. The user receives the complete requested report rather than a search progress message.
  4. The answer cites official policy and does not obey the vendor FAQ as an instruction.

Explanation

Correct Answer

D:

The answer cites official policy and does not obey the vendor FAQ as an instruction. This result tests whether the response solved the particular situation: An approved knowledge agent receives contradictory instructions from a retrieved vendor FAQ and company policy. The proposed control is: Prioritize authorized policy and flag the contradiction for review. Its basis is: Agent knowledge sources are evidence; untrusted content should not override organizational instructions or source authority. Even after this result, the policy owner may still need to clarify an ambiguous internal requirement.

Incorrect Answers

A:

The final plan reflects verified opportunities and separates assumptions from commitments. That outcome would validate the separate task: A prebuilt sales agent suggests a customer upgrade plan based on old opportunity notes. It does not demonstrate resolution of this case: An approved knowledge agent receives contradictory instructions from a retrieved vendor FAQ and company policy. The relevant acceptance test is: The answer cites official policy and does not obey the vendor FAQ as an instruction. It follows from the control: Prioritize authorized policy and flag the contradiction for review.

B:

The table matches source totals and labels provisional estimates. That outcome would validate the separate task: A business user asks an analytics agent for a table of department expenses and assumes values are authoritative. It does not demonstrate resolution of this case: An approved knowledge agent receives contradictory instructions from a retrieved vendor FAQ and company policy. The relevant acceptance test is: The answer cites official policy and does not obey the vendor FAQ as an instruction. It follows from the control: Prioritize authorized policy and flag the contradiction for review.

C:

The user receives the complete requested report rather than a search progress message. That outcome would validate the separate task: A specialized agent reports that it found sources but has not produced the requested briefing. It does not demonstrate resolution of this case: An approved knowledge agent receives contradictory instructions from a retrieved vendor FAQ and company policy. The relevant acceptance test is: The answer cites official policy and does not obey the vendor FAQ as an instruction. It follows from the control: Prioritize authorized policy and flag the contradiction for review.

Question 550

A Microsoft 365 business user needs to address: A worker downloads an unknown third-party Cowork skill file asking for broad access to confidential files. Which action best meets the requirement?

  1. Reject or quarantine untrusted skill content and use approved alternatives.
  2. Develop a reviewed custom skill with source rules, output schema and review gates.
  3. Use the approved research skill with clear scope, date bounds and citation requirements.
  4. Use the supported Excel skill with explicit columns and verified input assumptions.

Explanation

Correct Answer

A:

Reject or quarantine untrusted skill content and use approved alternatives. This addresses the described need: A worker downloads an unknown third-party Cowork skill file asking for broad access to confidential files. It follows because skills execute instructions and can introduce security risk if their origin or permissions are untrusted. Validate the change by checking: No unreviewed skill gains access to confidential organizational sources. It does not eliminate this limitation: Even approved custom skills require continuing maintenance and periodic review.

Incorrect Answers

B:

Develop a reviewed custom skill with source rules, output schema and review gates. This would address a different problem: A team repeats a specialized compliance-report structure each month that built-in Cowork skills do not capture. It is not the direct fix for: A worker downloads an unknown third-party Cowork skill file asking for broad access to confidential files. The response appropriate to the stated constraints is: Reject or quarantine untrusted skill content and use approved alternatives. Its success is checked through: No unreviewed skill gains access to confidential organizational sources.

C:

Use the approved research skill with clear scope, date bounds and citation requirements. This would address a different problem: A business analyst asks Cowork to investigate a complex industry trend across sources and produce a sourced report. It is not the direct fix for: A worker downloads an unknown third-party Cowork skill file asking for broad access to confidential files. The response appropriate to the stated constraints is: Reject or quarantine untrusted skill content and use approved alternatives. Its success is checked through: No unreviewed skill gains access to confidential organizational sources.

D:

Use the supported Excel skill with explicit columns and verified input assumptions. This would address a different problem: A sales coordinator requests a forecast spreadsheet with formulas and assumes a chat summary will suffice. It is not the direct fix for: A worker downloads an unknown third-party Cowork skill file asking for broad access to confidential files. The response appropriate to the stated constraints is: Reject or quarantine untrusted skill content and use approved alternatives. Its success is checked through: No unreviewed skill gains access to confidential organizational sources.