An organization has deployed Microsoft Copilot Studio to build a custom enterprise chatbot. The security team discovers the bot can be manipulated via crafted user messages to reveal internal SharePoint document contents. Which Microsoft service provides runtime protection against this type of prompt injection attack targeting Copilot Studio bots?
Select an answer to reveal the explanation.
Short Explanation
Here's the deal — Azure AI Content Safety with Prompt Shield is the right pick because it's built to catch and block prompt injection attempts against Copilot Studio bots at runtime. It looks for direct and indirect injection patterns before the bot can leak SharePoint content.
Full Explanation
Azure AI Content Safety with Prompt Shield is correct because it's specifically designed to detect and block prompt injection attacks, including direct and indirect injection attempts targeting AI applications like Copilot Studio bots. Microsoft Defender XDR with Copilot for Security is incorrect because it's a security operations tool, not a runtime prompt injection defense for custom bots. Microsoft Purview DLP with endpoint policies is incorrect because Purview DLP endpoint policies protect data on devices, not AI chatbot runtime interactions. Microsoft Entra ID Protection risk-based Conditional Access is incorrect because Entra ID Protection focuses on user sign-in risk, not AI prompt injection.