A city clerk wants to review AI application posture findings before expanding custom agents into more departments. What should the clerk use DSPM for AI to do?
Select an answer to reveal the explanation.
Short Explanation
Before more agents roll out, DSPM for AI is the clerk's posture check—see AI activity and risk findings first, then expand. It isn't reviewing insider risk alerts for those findings, checking Compliance Manager scores on them, or applying sensitivity labels to them first. Discover, manage, then grow agents carefully.
Full Explanation
A city clerk evaluating custom agents for more departments should use DSPM for AI to discover and manage AI activity and posture findings first. Those findings show where AI already interacts with municipal data and which risks should be fixed before broader agent rollout. Safer expansion is informed by posture visibility, not by disabling core platform services or weakening identity hygiene.
Reviewing insider risk alerts for AI activity and posture findings guiding safer agent expansion uses the wrong capability, because insider risk management surfaces user-risk signals and does not discover and manage AI activity and posture findings like DSPM for AI does. Checking Compliance Manager scores on AI activity and posture findings for safer agent expansion substitutes a compliance framework-progress score for DSPM discovery and management, because Compliance Manager measures control compliance and does not discover and manage AI activity and posture findings. Applying sensitivity labels to AI activity and posture findings for safer agent expansion misapplies labeling, because sensitivity labels classify and protect data itself, they are not applied to findings and do not discover and manage AI activity and posture findings needed for controlled expansion.
Exam caveat: DSPM for AI informs safer AI and agent adoption; it does not itself replace least-privilege Entra roles, sensitivity labeling, or change-control for agent deployment. On AB-900, “review AI posture before expanding agents” maps to DSPM for AI discovery and management of AI activity and findings.
Operational check: Run DSPM for AI against current departmental data locations the clerk cares about, export or note critical posture findings (overshared sensitive sites, unprotected high-value content touched by AI), remediate owners’ sharing and labeling gaps, then stage agent expansion only for departments that clear the posture bar. Re-scan after the first wave of agents go live.
Prefer to study offline? Printable PDF study book + test engine ($7.50, unofficial). These questions stay free here.