A compliance team needs to review all Microsoft 365 Copilot prompts containing the word 'acquisition' to ensure no material non-public information (MNPI) is being shared with AI. Which Purview tool provides this capability?
Select an answer to reveal the explanation.
Short Explanation
Here's the deal — the Microsoft Purview eDiscovery content search option is right because it can query Copilot interaction data stored in Exchange Online mailboxes using keyword queries. You search for 'acquisition' across in-scope employee mailboxes, surface matching Copilot interactions, and review them for MNPI.
Full Explanation
The Microsoft Purview eDiscovery content search option is correct because Microsoft Purview eDiscovery Content Search can query Copilot interaction data stored in Exchange Online mailboxes (where Copilot interactions are stored) using keyword queries. Searching for the keyword 'acquisition' across the mailboxes of in-scope employees surfaces Copilot interactions containing that term, enabling compliance review for MNPI. It is the direct, purpose-built tool for searching content. The Purview Audit (Premium) option filtered on CopilotInteraction record type can surface CopilotInteraction records, but it provides metadata-level details (user, timestamp, app) rather than full-text search of prompt content; eDiscovery provides full content search. The Insider Risk Management option using sequence indicators is wrong because Insider Risk Management detects behavioral risk patterns, not targeted keyword searches in AI interactions. The Defender XDR Advanced Hunting option on CloudAppEvents is wrong because Advanced Hunting in Defender XDR captures security event telemetry, not Copilot interaction content.