A county public-health department needs to identify which AI experiences interact with municipal sensitive sites. Which capability supports discovering that AI activity?
Select an answer to reveal the explanation.
Short Explanation
Public health wants to know which AI experiences are touching sensitive sites — DSPM for AI is built for exactly that discovery story. Audit search, Secure Score, or DLP policy won't show you that AI interaction on their own. Find the AI activity first, then manage the posture from there.
Full Explanation
DSPM for AI discovery is the capability that identifies which AI experiences interact with organizational—including municipal sensitive—sites and data. For a county public-health department, that discovery answers which AI tools are touching sensitive health-related SharePoint or other Microsoft 365 locations so security and privacy owners can manage exposure. The stem asks specifically for discovering that AI activity, which is DSPM for AI's role.
Purview Audit search lets you search the unified audit log for recorded events, but it is a reactive log search queried event by event—not built to discover which AI experiences are interacting with organizational data, and interacting with audit log data is not the same as interacting with municipal sensitive sites. Entra Identity Secure Score measures identity security posture and suggests posture improvements, but it does not discover AI activity with identity risks—it scores controls like MFA coverage and Conditional Access hygiene and carries no inventory of which AI experiences touched organizational data. Purview DLP policy enforces protection for sensitive site data in places like SharePoint Online, but it blocks or alerts on matching sharing activity rather than discovering which AI experiences interacted with that data in the first place.
Exam caveat: Do not confuse DSPM for AI with Audit search discovery, Identity Secure Score discovery, or DLP policy discovery—each is a real Purview or Entra capability, but none is built to specifically discover AI activity interacting with organizational data. The other tools handle logging, identity posture, and DLP enforcement after you know where AI is active.
Operational check: In Purview DSPM for AI, filter or review AI experiences tied to public-health sensitive sites, document which apps or experiences appear, classify findings by data sensitivity, and open remediation work items for sites with excessive sharing or missing labels before authorizing additional AI workloads against those libraries.
Prefer to study offline? Printable PDF study book + test engine ($7.50, unofficial). These questions stay free here.