A city open-data portal team wants visibility into where AI experiences interact with municipal sensitive data. Which Purview capability should the team use?

Microsoft Purview DSPM for AI (Data Security Posture Management for AI) helps organizations assess AI-related data security posture, including how AI experiences interact with sensitive organizational data and where exposure risks appear. A city open-data portal team that wants visibility into where AI experiences interact with municipal sensitive data should use DSPM for AI rather than unrelated collaboration or mail settings. Insider Risk Management for AI assesses AI-related user risk signals for insider threat scenarios; it is not built to show where AI experiences like Copilot interact with sensitive organizational data. Data Loss Prevention for AI blocks AI-related sensitive data sharing, not a posture view of where AI experiences are exposed to sensitive data across the tenant. Communication Compliance for AI reviews AI-related chats for violations; it does not assess AI-related data security posture or exposure. Exam caveat: AB-900 expects recognition that DSPM for AI is the Purview family for AI data-security posture and exposure visibility—not Insider Risk Management for AI, Data Loss Prevention for AI, or Communication Compliance for AI. Operational check: review DSPM for AI findings for the portal team's sensitive datasets, prioritize high-exposure interactions, and pair posture insights with permissions and labeling improvements before expanding AI use.