Your legal department requires that any document summary produced by a Copilot Studio agent that contains confidential contract data must automatically be labeled as 'Confidential – Legal' and have encryption applied. Which Microsoft technology enables this automatic labeling on agent outputs?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Sensitivity labels from Microsoft Purview are like invisible ink stamps baked into the file — wherever the document travels, the encryption and access controls travel with it. Auto-labeling policies detect confidential patterns (like contract language) and apply the label automatically, no human needed.
Full explanation below image
Full Explanation
Microsoft Purview Information Protection provides sensitivity labels that can be applied to documents, emails, and other content. When combined with auto-labeling policies, Purview can inspect content for sensitive patterns (like legal contract keywords, PII, or confidential markers) and automatically apply the appropriate sensitivity label — which in turn applies encryption, watermarking, and access restrictions.
For agent-generated outputs saved as files (Word, PDF, etc.), Purview auto-labeling works across Microsoft 365 services. The label travels with the file, so even if someone copies it to a USB drive, the encryption persists.
Option A (appending label text in the topic) adds a text string but provides zero enforcement — no encryption, no access control, just words. A user could delete the text.
Option C ('Require classification' in DLP) is not a real Power Platform DLP feature for content classification — DLP governs connectors, not document content labels.
Option D (Azure Policy resource tags) tags Azure infrastructure resources (storage accounts, VMs) — not document content or agent outputs.
Key exam distinction: Purview sensitivity labels = content-level protection with encryption + access control, applied to documents. DLP policies = connector-level control for Power Platform. These are complementary but different tools. For protecting what's inside agent outputs (document content), Purview is the answer.