The correct selections are No, No, Yes . Microsoft states that in Microsoft 365 Copilot and Microsoft 365 Copilot Chat, prompts and responses aren’t used to train the underlying foundation models . Microsoft also documents that Copilot works within the Microsoft 365 service boundary and that data accessed through Microsoft Graph isn’t used to train foundation models . That makes statements 1 and 2 No .

Statement 3 is Yes because Microsoft documents that Microsoft 365 Copilot honors the same data protection, access control, and compliance capabilities that apply across Microsoft 365. Microsoft also states that Copilot only surfaces organizational data that users already have permission to access, including content retrieved through Microsoft Graph in services such as SharePoint, OneDrive, Exchange, and Teams.

The correct answer is Microsoft 365 Copilot . Microsoft Learn states that Restricted SharePoint Search (RSS) gives organizations time to review and correct permissions on SharePoint sites, and then add only those reviewed sites to an allowed list that Copilot can access . That means RSS is specifically about restricting Copilot’s access to SharePoint content, not blocking administrators, guest users, or Microsoft Purview eDiscovery from those sites.

This distinction is important. Microsoft explains that users can still access SharePoint content based on their normal permissions, while RSS limits what Microsoft 365 Copilot can use as grounding data until site permissions are reviewed and approved. So the feature helps reduce oversharing risk in Copilot without removing a user’s direct ability to find or open content they already have permission to access in SharePoint. In other words, the restriction is placed on Copilot’s searchable grounding scope , not on the user’s own SharePoint permissions. That is why the sentence is correctly completed with Microsoft 365 Copilot .

a site member of

The correct answer is a site member of . In the exhibit, the Site members group for Site1 contains Everyone except external users with Edit permissions. Microsoft documents that “Everyone except external users” automatically includes all internal users and excludes external guests . Since User1 is a newly created user in the organization, User1 is an internal user and is therefore included in that built-in principal.

Because that built-in principal is placed in the Site members group, User1 inherits member-level access to the site. User1 is not a site owner, because the Site owners group contains only the Global Administrator entry shown in the exhibit. User1 is also not merely a visitor, because the Site visitors group is listed as None . Finally, User1 is not prevented from accessing the site, because the membership granted through Everyone except external users gives internal users access to the site according to the permissions assigned to that group.