AB-900 - Understand data protection and governance tasks for Microsoft 365 and Copilot (38% of the exam) - Section 2.2
Understand how Copilot accesses data and the controls that constrain what it can surface.
How Copilot accesses data, how Microsoft Graph influences Copilot responses, how Copilot honours existing permissions and Purview and Defender controls, and responsible AI principles. The central idea is that Copilot inherits the user's existing permissions, so an oversharing problem becomes a Copilot problem.
Microsoft GraphCopilot honours existing permissionssemantic indexresponsible AI principlesCopilot data residency and boundaries
Practice question for this objective
lock_openFree sampleUnderstand data protection and governance tasks for Microsoft 365 and Copilothard
During a data residency review, an organisation in the European Union must confirm where Microsoft 365 Copilot processes the tenant's data. Which statement correctly describes how Copilot handles data location and boundaries?
ACopilot copies the tenant's data to a shared public model for training before returning any response.
BCopilot processes the request within the Microsoft 365 service boundary and honours the tenant's data residency commitments.check_circle Correct
CCopilot stores every prompt indefinitely in a region chosen at random to balance load.
DCopilot bypasses tenant residency settings because generative processing must occur in the United States.
Microsoft 365 Copilot processes data inside the Microsoft 365 service boundary and honours the tenant's data residency commitments. Copilot grounds its answers on tenant content accessed through Microsoft Graph and runs within the Microsoft 365 trust boundary, so it inherits the same residency and compliance commitments as the tenant and does not train foundation models on customer data.
Why A is wrong: Tempting because people worry generative AI trains on their content, but Microsoft states that tenant data is not used to train the foundation models, so this describes a boundary violation that does not occur.
Why B is correct: Correct: Copilot operates inside the Microsoft 365 trust and compliance boundary, grounding responses on tenant content through Microsoft Graph while honouring the tenant's data residency commitments, which is what the residency review needs to confirm.
Why C is wrong: Tempting because load balancing is real in cloud services, but Copilot does not place customer data in random regions or retain prompts outside governed compliance and residency controls, so this contradicts the data boundary model.
Why D is wrong: Tempting because some early cloud services centralised processing, but Copilot is bound by the same Microsoft 365 residency commitments as the rest of the service, so it does not override them by forcing processing to one country.
Exam traps in Understand data protection and governance tasks for Microsoft 365 and Copilot
Answers that look right on this material and are not. Each one is a distractor from a different question in the AB-900 bank for this domain.
Disable Microsoft 365 Copilot for the affected user in the Microsoft 365 admin center
errorWhy it is wrong: Tempting because it appears to stop Copilot exposing the file, but Copilot only surfaced content the user could already open, so turning off Copilot leaves the underlying oversharing intact and the user can still reach the file directly.
Copilot applies a dedicated permission set configured in the Microsoft Purview portal that overrides SharePoint and Exchange access for prompts.
errorWhy it is wrong: There is no separate Copilot permission set overriding source access; this invents a control and contradicts the fact that Copilot has no independent access model.
Copilot searches all tenant content regardless of permissions and filters the results afterwards for relevance only.
errorWhy it is wrong: Tempting because it sounds efficient to search everything first, but Copilot never reaches content the user lacks permission to see, so a permission-blind search followed by relevance filtering misstates the access model.