Question 250
In a repository maintenance task, the following condition is confirmed: A policy owner needs assurance that a vendor's data-handling terms meet internal requirements. Which recommendation correctly handles the situation?
Explanation
Correct Answer
The choice "Review the current product-specific privacy documentation and agreement" matches the requirement: A policy owner needs assurance that a vendor's data-handling terms meet internal requirements. Data policies should be established from applicable terms, not generic claims. This is the best-supported approach under the stated constraint.
Incorrect Answers
The action "Configure approved content exclusions at the appropriate admin scope" is useful when An organization needs to exclude selected sensitive repository paths from supported Copilot features. Organizational exclusion controls can reduce context exposure in supported surfaces. Under the stated condition A policy owner needs assurance that a vendor's data-handling terms meet internal requirements, instead choose "Review the current product-specific privacy documentation and agreement". Data policies should be established from applicable terms, not generic claims.
The alternative "Apply the selected public-code matching policy centrally" fits another situation: An administrator wants to permit public-code matching suggestions only after a legal review. Matching filters express an organization licensing risk decision. Here the condition is A policy owner needs assurance that a vendor's data-handling terms meet internal requirements; use "Review the current product-specific privacy documentation and agreement" instead. Data policies should be established from applicable terms, not generic claims.
For the different scenario A security team wants Copilot availability restricted without removing all GitHub access, "Configure product-specific Copilot policies and license assignments" could be appropriate. Source-control access and AI assistant entitlement are distinct permissions. The present requirement is A policy owner needs assurance that a vendor's data-handling terms meet internal requirements, which calls for "Review the current product-specific privacy documentation and agreement". Data policies should be established from applicable terms, not generic claims.