An organization needs to restrict Microsoft 365 Copilot from returning results based on files stored in a specific SharePoint site containing merger and acquisition data. The data cannot be labeled with sensitivity labels due to technical constraints. What is the most effective approach?
Select an answer to reveal the explanation.
Short Explanation
You want SharePoint Advanced Management restricted content discovery on the merger and acquisition site. It stops Copilot from discovering that site while authorized users can still access it directly. The other approaches either block too broadly, rely on permissions Copilot still honors, or don't control Copilot discovery.
Full Explanation
Enable SharePoint Advanced Management restricted content discovery on the merger and acquisition site. This feature prevents the site from being discoverable through Microsoft 365 Copilot while still allowing direct site access by authorized users. The conditional access approach blocking Copilot for users with access to that SharePoint site is incorrect because conditional access cannot selectively restrict Copilot from specific SharePoint sites. The permission-restriction approach, limiting the site to only authorized merger and acquisition team members, is incorrect because permissions help, but Copilot still surfaces content the user has access to, including all merger and acquisition team files if they are members. The Microsoft Purview data loss prevention policy approach targeting the SharePoint site to block Copilot access is incorrect because data loss prevention policies control data sharing and exfiltration but do not block Copilot from surfacing content from specific sites.