Free Microsoft SC-401 Actual Exam Questions - Question 10 Discussion
You plan to deploy Microsoft Purview Data Security Posture Management for AI (DSPM for AI).
You need to ensure that you can monitor user activities on third-party generative AI websites.
Which two prerequisites should you complete for DSPM for AI? Each correct answer presents part of
the solution.
NOTE: Each correct selection is worth one point.
B imo since a data leaks policy is crucial to define what to monitor, plus A because without the Purview extension, monitoring third-party AI sites isn’t possible. Intune (F) helps but isn't mandatory if devices are already managed somehow.
A and F, since the extension needs Intune for deployment and management.
A imo since the extension is needed for monitoring, plus E because Endpoint DLP policies help enforce data protection on these devices accessing AI sites. C feels like just part of the process, not a strict prereq here.
Option A sounds right since the Purview extension is how you monitor activity on those AI sites directly from the devices. For the second, I’d go with C because onboarding devices to Purview is usually necessary to get them reporting data back for monitoring. Endpoint DLP (E) seems more about preventing data leaks rather than just monitoring user activities specifically on third-party AI websites. Intune enrollment (F) might help with deployment but isn’t explicitly a monitoring prerequisite here. So, A and C make the most sense from my side.
A and E. You definitely need the Purview extension installed to track activity, and Endpoint DLP policies help control and monitor what data can be shared or leaked on those AI sites. Intune enrollment might help with managing devices but isn’t strictly a prerequisite for DSPM for AI monitoring. Creating communication compliance or data leaks policies feels more like follow-up steps rather than core setup requirements.
It’s A and E