An organization in the European Union is deploying Microsoft Security Copilot and must ensure that all prompt and response data is processed and stored within EU data boundaries. Which Security Copilot configuration satisfies this requirement?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — a is correct because during Microsoft Security Copilot's initial provisioning, administrators can select the geographic location (such as Europe) where the service will process and store data. This selection determines the data residency for Copilot prompts and responses, ensuring compliance with EU data sovereignty requirements.
Full explanation below image
Full Explanation
A is correct because during Microsoft Security Copilot's initial provisioning, administrators can select the geographic location (such as Europe) where the service will process and store data. This selection determines the data residency for Copilot prompts and responses, ensuring compliance with EU data sovereignty requirements. B is wrong because Azure Policy governs Azure resource deployments; Microsoft Security Copilot is a SaaS service configured through its own settings, not through Azure Policy. C is wrong because Microsoft Security Copilot is a SaaS service that does not deploy into customer-owned Azure resource groups—it has its own multi-tenant infrastructure with geography selection. D is wrong because Entra ID data residency settings relate to directory data storage, not Security Copilot prompt and response data.