A public hospital district IT team discovers AI experiences interacting with confidential case libraries and wants to manage that posture. Which Purview capability is designed for discovering and managing AI activity?
Select an answer to reveal the explanation.
Short Explanation
DSPM for AI is the "where did AI touch our data?" radar for hospital case libraries—discover and manage AI activity, not a Compliance Manager score or a Data Explorer inventory. It surfaces posture findings before agents sprawl. Use that lens when confidential sites meet Copilot-style experiences.
Full Explanation
DSPM for AI is the Purview capability designed to discover and manage AI activity and the related data-security posture when hospital-district AI experiences interact with confidential case libraries. It helps IT see which AI apps or experiences touch organizational data, surface posture findings, and prioritize remediation before those interactions expand. That maps directly to discovering and managing AI activity against sensitive clinical case content.
Compliance Manager's framework score for the tenant tracks regulatory/privacy framework progress; it does not inventory AI experiences or AI-to-data interactions on case libraries. Purview Data Explorer's inventory of sensitive information locations shows where sensitive content sits, but it does not discover which AI experiences are interacting with that content—that is DSPM for AI's job. Microsoft Purview eDiscovery search to collect AI interaction content for legal cases is for legal holds and content collection; it does not discover which AI experiences touch case libraries or manage AI data-security posture.
Exam caveat: DSPM for AI is not a substitute for DLP policies, sensitivity labels, or eDiscovery. It focuses on discovering and managing AI activity and posture findings so defenders understand AI exposure. AB-900 expects you to select DSPM for AI when the stem emphasizes AI activity discovery and posture management rather than eDiscovery searches for legal content collection.
Operational check: In Purview, open DSPM for AI (or the AI data-security posture experience), review which AI experiences interact with confidential case libraries, note high-risk findings, and assign owners to remediate oversharing or unprotected sensitive content before approving additional AI agents against those libraries. Re-check posture after remediation and retain findings for compliance evidence.
Prefer to study offline? Printable PDF study book + test engine ($7.50, unofficial). These questions stay free here.