AB-730 Sample Questions Answers

Microsoft 365 Copilot fully respects Microsoft Purview Information Protection, including sensitivity labels applied to documents. When content is used as a source to generate new content (for example, creating a PowerPoint presentation from a Word document), Copilot ensures that data protection policies are preserved and inherited.

If the source Word document is labeled Highly Confidential, the generated presentation will automatically inherit the same sensitivity label. This ensures that the classification, encryption, and access restrictions applied to the original content are consistently enforced in derived content. This behavior aligns with Microsoft’s compliance and data governance model, which prevents accidental data exposure when content is reused or transformed.

Option A is incorrect because Copilot does not require manual reclassification when a label is already present on the source. Option B is incorrect because labels are not dropped during content generation. Option D is incorrect because Copilot can still generate content from labeled documents, provided the user has access.

Therefore, the presentation will be generated with the Highly Confidential label applied.

Microsoft 365 Copilot agents operate within the security, compliance, and identity boundaries of a Microsoft 365 tenant. Custom agents created in the Microsoft 365 Copilot app are governed by organizational policies, role-based access control, and Microsoft Entra ID authentication.

According to Microsoft AI Business Professional guidance, Copilot agents are designed for enterprise use and are shared within the organization unless administrators configure broader sharing capabilities. External sharing with personal Microsoft accounts or arbitrary email addresses is not supported by default due to security, data protection, and compliance requirements.

Because the agent in this scenario interacts with organizational data such as client emails, project milestones, and internal reports, access must remain restricted to authenticated users within the same tenant. This ensures that sensitive business information remains protected and that data access respects existing permissions.

Therefore, the agent can be shared only with people in your organization, making option D the correct answer.

Prompt injection is a generative AI security risk where an attacker inserts instructions (often hidden in text, documents, webpages, or user inputs) to override or manipulate the assistant’s intended behavior. This can lead to unintended actions such as ignoring policy controls, producing unsafe outputs, or attempting to reveal sensitive information. Because generative AI systems follow natural-language instructions, they can be socially engineered to prioritize malicious content unless safeguards are in place. This is why prompt injection can cause data exposure (for example, attempting to extract confidential content from grounded sources) and can also embed harmful instructions that redirect the model’s behavior. In enterprise settings like Microsoft 365 Copilot, mitigations include grounding boundaries, permission trimming, content filtering, and instruction hierarchy (system policies over user instructions). From a business governance perspective, users should treat untrusted inputs (emails, documents, web text) as potentially hostile and apply least-privilege access and validation when using AI outputs in decision-making.

Use the Analyst agent for Prompt 1 because it is optimized for structured data work: consolidating worksheets, performing calculations, sentiment breakdowns by category (product line), and producing visualizations. These tasks align with analysis-style workflows where quantitative processing and charting are required.

Use the Researcher agent for Prompt 2 because it is designed to synthesize information from multiple sources, including SharePoint content plus web grounding , and to produce a well-structured brief with citations . Researcher is best when you need evidence-backed insights, reputable sourcing, and an organized narrative with risks and gaps.

Use Chat for Prompt 3 because the goal is drafting a refined executive email based on an attached document with tone control and communication standards. Chat excels at business writing, rewriting, tone adjustment, and producing polished communications without needing the deeper research workflow or heavy data analytics specialization.

When creating an agent in the Microsoft 365 Copilot app using a template, administrators or authorized users can configure specific behaviors and knowledge sources for the agent. Therefore, it is correct that you can choose which knowledge sources the agent can use. This ensures proper grounding in approved Microsoft 365 data such as SharePoint sites, OneDrive folders, or other organizational repositories. Controlling knowledge sources supports responsible AI principles, including data security, relevance, and compliance.

Agents created within Microsoft 365 are designed primarily for internal organizational use. As a result, sharing the agent with users inside the organization is supported, enabling collaboration and productivity improvements across teams.

However, sharing the agent with external users is not supported by default. External sharing would introduce security and compliance risks, so Microsoft enforces tenant-level boundaries to protect enterprise data.

These capabilities reflect best practices in managing AI prompts and agents securely within enterprise environments.

Microsoft 365 Copilot follows Microsoft’s enterprise data governance and privacy principles, which allow users to manage their own conversation history where appropriate. According to Microsoft AI Business Professional guidance, users can review and delete individual Copilot conversation histories directly from their personal account settings without requiring administrative intervention.

Option D is correct because the My Account portal in Microsoft 365 Copilot allows individual users to manage their activity history, including deleting specific conversations. This enables targeted removal of sensitive interactions while retaining other conversation data.

Option A is incorrect because the Copilot app itself does not provide full account-level activity management capabilities. Options B and C are administrative tools used for tenant-wide governance, compliance, retention policies, and eDiscovery. These portals typically require administrative privileges and are not intended for individual user self-service deletion of specific conversations.

Therefore, to delete a single confidential Copilot conversation without affecting other chats and without requiring administrator approval, the correct tool is the My Account portal in Microsoft 365 Copilot.

When transcription is not enabled , Microsoft 365 Copilot in Teams cannot access a full historical record of the meeting conversation. Copilot relies on transcript data to provide complete summaries and recaps. Without transcription, Copilot can still assist during the meeting , but only from the point at which it is activated.

Copilot does not automatically activate at the start of the meeting; a user must explicitly invoke it. Once activated, Copilot processes the live conversation stream and can generate summaries, key points, or insights from that moment forward only . It cannot reconstruct earlier discussion because no transcript exists for prior content.

Options B and D are incorrect because they assume automatic activation and full-meeting recap capability, which require transcription. Option A is incorrect because Copilot summarizes the meeting content, not just the speech of the activating user.

Therefore, the correct answer is C .

==================================================

When you use Microsoft 365 Copilot Chat without a Microsoft 365 Copilot license, Copilot Chat operates in a “general” mode rather than a Microsoft Graph-grounded work mode. In this configuration, Copilot does not have the entitlement to access and reason over your organization’s protected Microsoft 365 content (such as SharePoint sites, OneDrive files, Outlook mail, Teams messages, or other tenant resources). It also does not connect directly to your organization’s internal databases unless separate, explicitly configured integrations exist.

Instead, Copilot relies on three primary sources to generate a response: (1) the prompt context you provide in the current request (what you ask, plus any text you paste), (2) the conversation history within the current chat thread to maintain continuity, and (3) internet search data (when web grounding is available) to supplement general knowledge with up-to-date public information.

Therefore, the correct selections are C (prompt context), E (internet search data), and F (conversation history) , while organizational Microsoft 365 data and Teams chat data are not used without the Copilot license.

To generate an effective monthly summary with Copilot in Excel, Microsoft prompting guidance emphasizes two core elements: clear intent and expected output structure . First, you should state the goal explicitly—such as “summarize total sales by month based on OrderDate and Amount, and highlight month-over-month changes.” This directs Copilot to the correct aggregation and analysis behavior (Option D).

Second, specifying the desired format improves usability and reduces ambiguity. For example, requesting “a table with Month, Total Sales, Number of Orders, and Average Order Value” or “a bulleted executive summary plus a small summary table” ensures Copilot returns results in a format you can immediately use (Option A).

A specific cell range (Option B) is usually unnecessary when the data is already in a recognized Excel table, because Copilot can work from the table context. The workbook file name (Option C) does not help analysis. Providing a formula (Option E) is not required because Copilot can compute monthly totals; formulas are optional if you want a specific calculation method, but they are not the best prompt ingredients for an effective summary.

Therefore, the best answers are A and D .

 When Microsoft 365 Copilot searches for content on the web, it uses the Bing search service.

Answer: Yes

 When Microsoft 365 Copilot searches for content on the web, it uploads the entire conversation history into the search request.

Answer: No

 When Microsoft 365 Copilot searches for content on the web, the query is anonymized and stripped of any user-identifiable information.

Answer: Yes

Microsoft 365 Copilot can use web grounding when a response requires current or public information. For web search, Copilot uses the Bing search service to retrieve relevant web results, so Statement 1 is Yes . This allows Copilot to supplement its response with up-to-date internet content when web grounding is enabled or selected.

Statement 2 is No because Copilot does not send the entire conversation history to Bing as a web search request. Instead, Copilot generates a search query based on the user’s prompt and relevant context. Sending the complete conversation would create unnecessary privacy and data exposure risk, which would conflict with Microsoft’s enterprise data protection model.

Statement 3 is Yes because Microsoft 365 Copilot is designed to protect user and tenant information during web grounding. Search queries are handled in a privacy-preserving way, with user-identifiable and tenant-identifiable information removed before the query is sent to Bing.

In the Microsoft 365 Copilot app, the Conversations list can display status indicators next to individual conversation titles. In the exhibit, the Standings conversation has a distinct indicator (a green badge) shown to the right of the conversation name. This badge is used to signal that the conversation includes a verified response.

A verified response indicator is intended to help users quickly recognize outputs that were produced with stronger grounding and traceability—for example, responses that include supporting citations or references that can be reviewed for accuracy. This aligns with Microsoft’s guidance on improving trust in AI output by making source-backed or verification-supported responses easier to identify and validate.

The other options do not match the indicator shown. Conversations that are shared or added to notebooks typically use different share/notebook iconography, and scheduled prompts are represented with scheduling-related indicators rather than a verification badge. “Anonymous data” is not something Copilot marks at the conversation level in this manner.

Therefore, the best inference is that the Standings conversation contains a verified response.

Agents created in the Microsoft 365 Copilot app are primarily designed for use within the Copilot Chat experience and related Copilot surfaces, not directly embedded inside individual applications like Word. Therefore, such agents are not automatically available in Microsoft Word, making Statement 1 incorrect.

However, these agents are designed for collaboration and reuse within an organization. Microsoft guidance confirms that agents can be shared with other users in the same tenant , allowing teams to leverage common tools, prompts, and knowledge sources. Hence, Statement 2 is correct.

For advanced automation scenarios involving complex workflows and third-party connectors, Microsoft provides Copilot Studio rather than the standard Copilot app. The Copilot app focuses on lightweight agent creation using natural language, files, and simple configurations. It does not support complex orchestration with external connectors. Therefore, Statement 3 is incorrect.

Thus, the correct answers are No, Yes, No .

Statements:

You can add a Microsoft Teams chat as a knowledge source to a Microsoft 365 Copilot agent.

Answer: Yes

You can add a Microsoft 365 Copilot conversation as a knowledge source to a Copilot agent.

Answer: No

You can use an image file, such as a JPG file, as a knowledge source for a Microsoft 365 Copilot agent.

Answer: NO

Microsoft 365 Copilot Agent Builder supports grounding agents in approved knowledge sources so responses are accurate and permission-trimmed. Teams chats can be used as a knowledge source: Microsoft Learn confirms you can ground an agent in Teams data, including chat messages (and optionally scope to specific chats), enabling the agent to reference collaboration context when answering questions.

A Copilot conversation itself is not a supported “knowledge source” option; knowledge sources are configured from items like SharePoint content, Teams, email, websites, uploaded files, and connectors—not prior chat transcripts.

Finally, JPG images are not supported as knowledge-source file types . Microsoft’s supported file types for agent knowledge include documents like .doc/.docx, .pdf, .ppt/.pptx, .txt, and Excel formats (.xls/.xlsx), but not image formats. Therefore, you cannot use a JPG as a knowledge source for a Copilot agent.

When you add a file to a Microsoft 365 Copilot notebook from a Microsoft SharePoint site , you are referencing a document that is stored and managed within Microsoft 365. SharePoint maintains a single authoritative file that can be updated over time (with version history behind the scenes). Copilot notebooks that reference SharePoint content are designed to stay grounded in the current version of that cloud-hosted document, subject to your permissions.

Because Process.docx is stored in SharePoint, the notebook reference points to the SharePoint document itself rather than a static local snapshot. When another user updates the document in SharePoint, the “latest” content becomes the current version available at that location. When you chat in the notebook, Copilot will use the file as it exists now in SharePoint, which means it will reference the most recent version.

Option A would be typical only if you attached a local file upload (a static copy) rather than a SharePoint-hosted file. Option C is incorrect because Copilot uses the current file at the referenced location, not multiple historical versions simultaneously.

Therefore, the chat will reference the most recent version of Process.docx .

Comprehensive and Detailed 150 to 200 words of Explanation Microsoft AI Business professional documents:

When you share a Microsoft 365 Copilot prompt that references files stored in OneDrive, the prompt sharing action does not automatically change file permissions. Copilot follows the Microsoft 365 permission model, meaning users can only access, summarize, analyze, or ground responses in files that they already have permission to open.

Option C is correct because the shared prompt can be used successfully with the referenced files only if the recipient already has access to those OneDrive files. Sharing the prompt shares the prompt structure and instructions, not the underlying file access rights. This prevents accidental exposure of private or confidential business documents.

Option B is incorrect because Copilot does not automatically grant access to files when a prompt is shared. Option A is too strong because the files are not necessarily removed from the prompt; they remain referenced but usable only if permissions allow. Option D may happen in some Microsoft 365 file-sharing contexts, but the best general rule is that access must already exist or be granted separately.

Therefore, the user can run the prompt successfully only if they have access to the referenced OneDrive files.

When Microsoft 365 Copilot cannot access a referenced file, it may return a message indicating that the file is empty, corrupted, or cannot be processed. In many cases, this message appears when the user does not have sufficient permissions to open the file in SharePoint, OneDrive, or another Microsoft 365 location.

Copilot operates within the Microsoft Graph security boundary and strictly respects user permissions. If a saved prompt references File.docx but the user no longer has access to it—due to permission changes, file relocation, or removal—Copilot cannot retrieve the content for grounding. As a result, it cannot analyze or summarize the file and returns a processing-related error.

Not scheduling the prompt is unrelated to file processing. Running from a web or desktop app does not affect file readability. Using a different agent does not typically cause a file-format processing error.

Therefore, the most likely cause is that you do not have access to the file.

In Microsoft 365 Copilot, agents such as Researcher are accessed through the Agents experience within the Copilot app. If the user interface does not immediately display a specific agent, the correct action is to browse or search the available agents catalog. The exhibit shows the left navigation pane with an Explore agents option.

According to Microsoft AI Business Professional guidance, built-in and custom agents can be discovered and enabled through the Explore agents section. If the user already has the appropriate Copilot license and is signed in with their work account, there is no need to switch accounts or request another license.

Signing in through a browser does not change feature availability, and using a personal account would remove access to organizational features. Therefore, to access the Researcher agent, you should select Explore agents and search for Researcher.

==================================================

To ensure cited information is accurate, Microsoft’s AI guidance emphasizes human verification of AI-generated outputs, especially when the content will be used in formal business documents. Even when Copilot grounds responses in SharePoint files, it can still misinterpret text, summarize imprecisely, or attribute a statement to the wrong section of a source. The most reliable way to confirm accuracy is to check each citation against the original SharePoint document and validate that the claim is supported exactly as written.

Option A is the best answer because manual verification is the definitive control for accuracy and accountability. Option B may help by asking Copilot to re-check or restate where information came from, but it is still an AI-generated confirmation and does not replace direct source validation. Options C and D can improve consistency and reuse of standards or references, but they do not guarantee citation correctness; they still depend on model interpretation.

Therefore, the best approach is to manually verify the citations in the generated proposal content.

The correct answer is instructions because an agent’s persona—such as being warm, friendly, formal, or analytical—is defined through its behavioral and communication guidance. In Microsoft 365 Copilot, the Instructions field controls how the agent responds, including tone, style, personality, response structure, and interaction patterns.

The description typically explains what the agent does, not how it communicates. Capabilities define what tasks the agent can perform, such as summarizing documents or analyzing data. Suggested prompts provide example user queries but do not control the agent’s personality or communication style.

To establish a warm and friendly persona, the instructions should explicitly state guidance such as: “Respond in a supportive, conversational tone. Use clear and positive language. Be encouraging and approachable.” This ensures consistent tone across all interactions.

Defining persona through instructions reflects prompt engineering best practices in generative AI, enabling predictable behavior, improved user experience, and alignment with organizational communication standards within Microsoft 365 Copilot environments.