Chapter 2 of 3 · Microsoft AB-900
Data Protection and Governance for Microsoft 365 and Copilot
Purview solutions, how Copilot uses data, risk tools and fixing oversharing in SharePoint.
- 6topics
- 27 minfast track
- 2diagrams and exhibits
- 35–40%of the exam
Topics in this chapter
Take them in order, or jump to the one you need.
- 1Purview Solutions at a GlanceAB-900 Purview basics: what Information Protection, DLP, Insider Risk, Communication Compliance, DSPM for AI and Data Lifecycle…4 min
- 2Sensitivity Labels, Classification and RetentionAB-900 data protection: use cases for sensitivity labels, how Purview classifies data with sensitive info types and classifiers…4 min
- 3How Copilot Accesses and Protects DataAB-900: how Microsoft 365 Copilot uses Microsoft Graph and permissions, which controls protect data, and the Microsoft…Diagram5 min
- 4Compliance Manager, Explorers and Content SearchAB-900: use Compliance Manager for compliance risks, Data explorer for sensitive items, Activity explorer for user actions and…4 min
- 5Insider Risk, DLP Alerts, Communication Compliance and DSPM for AIAB-900: review Insider Risk alerts, respond to DLP alerts, find Communication Compliance violations and manage AI activity with…5 min
- 6Oversharing and SharePoint Advanced ManagementAB-900: find oversharing before Copilot, run SharePoint data access governance reports and use Advanced Management and restricted…Diagram5 min
About this chapter
What this chapter covers
This chapter covers how an administrator protects and governs data in Microsoft 365 and Copilot. It is 35 to 40% of the Microsoft AB-900 exam, the largest share. It spans Microsoft Purview, how Copilot reaches data, the tools that surface risk, and the SharePoint features that fix oversharing.
Questions give a need or a symptom and ask which solution, report or tool fits. At fundamentals depth you pick the right tool and know where an administrator finds it, not how to build a policy step by step.
How the topics fit together
The pages move from knowing the Purview solutions, to understanding how Copilot uses data, to finding risks, to fixing oversharing.
- Purview Solutions at a Glance names the six solutions and what each is for.
- Sensitivity Labels, Classification and Retention covers labels, how data is classified and how retention works.
- How Copilot Accesses and Protects Data covers Microsoft Graph, permissions, the protecting controls and responsible AI.
- Compliance Manager, Explorers and Content Search covers the tools that show compliance status, sensitive items, activities and search results.
- Insider Risk, DLP Alerts, Communication Compliance and DSPM for AI covers reviewing alerts and AI activity.
- Oversharing and SharePoint Advanced Management covers governance reports and restricted access.
Copilot never bypasses permissions. When a scenario says Copilot showed something it should not have, the root cause is oversharing, and the fix is permissions, labels or SharePoint restrictions.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with examples and tables.
- What to remember for the exam: the facts to memorize and how questions are phrased.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Ready for more practice?
The full Microsoft AB-900 question bank has 499 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by Microsoft. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.