Tag: Data Security Posture Management (DSPM)

AI Security, azure, Cybersecurity, Microsoft Certification, SC-500, security

Identify overexposure of data in SharePoint (SC-500 Exam Prep)

 
This post is a part of the "SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads" Exam Prep Hub.
This topic falls under these sections:
Secure compute (20–25%)
   --> Implement security for AI
      --> Identify overexposure of data in SharePoint

Note that there are 10 practice questions (with answers) at the end of each section to help you solidify your knowledge of the material. Also, there are 4 practice tests with 30 questions each available from the hub's main page below the exam topics section.

Overview

SharePoint is commonly used to store documents, collaboration content, business records, and information accessed by Microsoft 365 Copilot and other AI applications. Although SharePoint permissions determine what users can access, poorly configured permissions and sharing links can expose information to a much broader audience than intended.

For the SC-500 exam, security engineers should understand how to use Microsoft Purview Data Security Posture Management for AI, SharePoint data access governance reports, and related SharePoint controls to identify potentially overshared content and prioritize remediation.

The central security principle is:

AI applications generally respect the permissions of the user making the request. However, if SharePoint content is incorrectly shared with a broad audience, that content may become available to Copilot or other authorized AI experiences through the user’s existing access.

What Is SharePoint Data Overexposure?

Data overexposure occurs when information is accessible to more people, groups, applications, or AI experiences than the organization intended.

Overexposure can result from:

  • Excessive SharePoint site permissions.
  • Broad Microsoft 365 group membership.
  • Broken permission inheritance.
  • Sharing links that are too permissive.
  • Files shared with Everyone.
  • Files or sites shared with Everyone except external users.
  • Anonymous or “Anyone” links.
  • Content shared with large internal groups.
  • Former employees or inappropriate groups retaining access.
  • Sensitive files stored in broadly accessible collaboration sites.
  • Inadequate review of site ownership and permissions.

Oversharing does not necessarily mean that a file is publicly available on the Internet. A file shared with Everyone except external users may be accessible to every authenticated user in the organization, which can still represent a significant security risk.

Why SharePoint Overexposure Matters for AI

Microsoft 365 Copilot and other AI experiences can use organizational content that the current user is authorized to access. Copilot does not need a separate permission assignment to every document. Instead, it can use the user’s existing Microsoft 365 permissions.

This creates an important relationship:

  1. A SharePoint file is shared with a broad audience.
  2. A user receives access through that broad permission.
  3. The user asks Copilot a question.
  4. Copilot may use the accessible content when generating a response.

Therefore, an organization may unintentionally expose sensitive information through AI without directly configuring Copilot to share that information.

Examples include:

  • Human resources documents shared with all employees.
  • Financial forecasts accessible to a broad department.
  • Customer records stored in a site with excessive membership.
  • Legal documents shared through an “Anyone” link.
  • Executive meeting notes accessible through a large internal group.
  • Confidential project files inherited from a parent site.

The security issue is usually not that Copilot bypasses SharePoint security. The issue is that the underlying SharePoint permissions are too broad.

Microsoft Purview Data Security Posture Management for AI

Microsoft Purview Data Security Posture Management for AI, often abbreviated as DSPM for AI, helps organizations identify risks involving sensitive data and AI usage.

For SharePoint, DSPM can help security teams:

  • Discover potentially overshared content.
  • Identify sites containing sensitive information.
  • Review sharing links and permission exposure.
  • Understand how data may be used as AI grounding data.
  • Prioritize remediation.
  • Apply sensitivity labels.
  • Notify site owners.
  • Remove inappropriate sharing links.
  • Track and review data exposure over time.

The relevant DSPM capability is the data risk assessment. Microsoft Purview provides default assessments and allows administrators to create custom assessments for selected users or SharePoint sites.

Accessing Data Risk Assessments

A typical workflow is:

  1. Open the Microsoft Purview portal.
  2. Navigate to Data Security Posture Management.
  3. Select Discover.
  4. Open Data risk assessments.
  5. Select the Microsoft 365 assessment area.
  6. Review an existing assessment or create a custom assessment.
  7. Examine potentially overshared sites and items.
  8. Prioritize remediation based on sensitivity and exposure.

The default assessment automatically runs weekly for the top SharePoint sites based on usage. Custom assessments can be used when the organization needs to evaluate particular sites, users, or business areas.

Default and Custom Data Risk Assessments

Default assessments

Default assessments provide a recurring view of oversharing risks in frequently used SharePoint sites.

They are useful for:

  • Establishing an initial baseline.
  • Finding high-usage sites with potential exposure.
  • Identifying sites that should be reviewed before or during Copilot deployment.
  • Monitoring common oversharing patterns.

The default assessment is not a guarantee that every risky file in the organization has been identified. It focuses on the supported scope of the assessment and its scanning limits.

Custom assessments

Custom assessments allow an administrator to target specific:

  • SharePoint sites.
  • Users.
  • Business units.
  • Sensitive data locations.
  • High-risk collaboration areas.

Custom assessments are useful when:

  • A department is preparing to deploy Copilot.
  • A site contains regulated information.
  • A security incident involves a specific location.
  • A business owner requests a permission review.
  • A previous assessment identifies a high-risk site.
  • The organization wants to validate remediation.

After a custom assessment runs, results may take time to become available. Assessment results should therefore not be treated as real-time permission telemetry.

Potentially Overshared Items

For supported Microsoft 365 assessments, Purview can identify items that are potentially overshared based on sharing links for:

  • External users.
  • Anonymous users.
  • Broadly accessible audiences.

The item-level results can show information such as:

  • The potentially overshared item.
  • The SharePoint site containing the item.
  • The item owner.
  • The applied sensitivity label.
  • The type of sharing link or exposure identified.

This allows security teams to investigate individual files rather than reviewing every document in a site manually.

Important distinction

A potentially overshared item is not automatically confirmed to be a security incident.

For example:

  • A public marketing brochure may legitimately use an “Anyone” link.
  • A confidential financial forecast should not normally use an “Anyone” link.
  • A project file may be intentionally shared with external partners.
  • A file may have an overly broad link but contain no sensitive information.

The correct response is to evaluate the item’s business purpose, sensitivity, audience, and sharing method.

SharePoint Data Access Governance Reports

SharePoint provides Data access governance reports that help administrators understand how broadly content is exposed.

These reports are available through the SharePoint admin center and can be used alongside Purview assessments.

Important report categories include:

  • Site permissions across the organization.
  • Site permissions for selected users.
  • Sites and files shared through special SharePoint groups.
  • Sensitivity labels applied to files.
  • Sharing links activity.
  • Content shared with Everyone except external users.

These reports provide a broader governance view than an individual file’s sharing dialog.

Site Permissions Across the Organization

The organization-wide site permissions report provides a snapshot of permission exposure across SharePoint and OneDrive sites.

Useful information can include:

  • Approximate file count.
  • Number of items with unique permissions.
  • Number of “People in your organization” links.
  • Number of “Anyone” links.
  • Number of permissions granted to Everyone except external users.
  • Number of permissions granted to Everyone.
  • Site sensitivity label information.

This report helps identify sites with:

  • Large numbers of users.
  • Many unique permissions.
  • Extensive use of broad sharing links.
  • Large amounts of content with weak access boundaries.

A site with many unique permissions may be difficult to govern because access is granted individually at many levels. A site with many broad links may be easier to use but more difficult to secure.

Site Permissions for a Specific User

The site permissions for users report helps determine which sites a particular user can access and how that access is granted.

Access may be granted:

  • Directly to the user.
  • Through a SharePoint group.
  • Through a Microsoft 365 group.
  • Through another group.
  • Through site membership.
  • Through item-level permissions.

This report is useful for questions such as:

  • Which SharePoint sites can this employee access?
  • Does the user have access to sensitive sites unrelated to their role?
  • Is access direct or inherited through a group?
  • Does a user retain access after changing departments?
  • Can a privileged or high-risk account access excessive content?

This is especially important when investigating insider-risk concerns, inappropriate access, or the potential impact of a compromised account.

Everyone and Everyone Except External Users

Everyone

The Everyone group represents an extremely broad audience. Depending on the context, content shared with Everyone may be accessible to a very large population.

Files containing confidential information should generally not be shared with Everyone unless the organization has explicitly approved that exposure.

Everyone except external users

The Everyone except external users group, often abbreviated EEEU, includes users inside the organization but excludes external users.

Although this group does not include external guests, it can still expose information to all internal users.

Examples of potentially risky content include:

  • Employee compensation information.
  • Internal investigations.
  • Strategic planning documents.
  • Security architecture.
  • Customer information.
  • Unreleased product plans.
  • Legal or regulatory material.

The EEEU report identifies sites and files where this group is used as a permission recipient. These permissions may be assigned at different levels, including sites, libraries, folders, and files.

Sites and Files Shared Through Special SharePoint Groups

The special-groups report is useful when the security team needs to identify the exact items affected by permissions granted to:

  • Everyone.
  • Everyone except external users.

The report can identify:

  • The affected site.
  • The affected file or folder.
  • The permission level.
  • The permission hierarchy.
  • The parent group through which access was granted.

This is more actionable than simply knowing that a site is overshared. It allows administrators to create a targeted cleanup plan or use scripting to address the affected permissions.

Sharing Links That Can Cause Overexposure

SharePoint supports several types of sharing links.

Anyone links

An Anyone link can allow access without requiring the recipient to authenticate with an organizational account.

Depending on the configuration, an Anyone link may allow:

  • Viewing.
  • Editing.
  • Downloading.
  • Sharing with others.

Anyone links should be carefully controlled because the link may be forwarded beyond the original intended audience.

People in your organization links

A People in your organization link can make content available to authenticated users in the organization.

This may be appropriate for general internal communications but risky for sensitive content.

Specific people links

A Specific people link is more restrictive because it is intended for named recipients.

However, administrators should still review:

  • Whether the recipients are correct.
  • Whether the recipients still need access.
  • Whether the link allows editing.
  • Whether the content should have a sensitivity label.
  • Whether the link has been forwarded or replaced.

The presence of a sharing link is not automatically a problem. The security risk depends on the link type, content sensitivity, intended audience, and organizational policy.

Activity Reports

Snapshot reports show the current or baseline state of permissions. Activity reports help identify recent sharing behavior.

Important activity reports include:

  • Sharing links created recently.
  • Content shared with Everyone except external users.
  • Sites with unusually high sharing activity.

Activity reports can help detect emerging risks before they become widespread.

For example, a site may not currently have a large number of overshared files, but a sudden increase in Anyone links could indicate:

  • A change in business process.
  • A new collaboration project.
  • User misunderstanding.
  • An inappropriate sharing practice.
  • A compromised account.

Sharing link activity reports focus on recently active sites and can be used with baseline reports to understand both current exposure and recent changes.

Snapshot Reports Versus Activity Reports

Report typePrimary purpose
Snapshot reportShows the current or baseline permission state
Activity reportShows recent sharing behavior
Site permissions reportShows how broadly a site is accessible
User permissions reportShows which sites a particular user can access
Special-groups reportIdentifies specific files and sites shared with Everyone or EEEU
Sharing links reportIdentifies sites with recent sharing-link activity
Sensitivity label reportHelps identify how sensitive content is labeled

A mature governance program uses both snapshot and activity reports:

  1. Use snapshot reports to understand the current exposure.
  2. Use activity reports to identify new or increasing risks.
  3. Investigate high-risk sites and files.
  4. Remediate inappropriate access.
  5. Repeat the assessment periodically.

Sensitivity Labels and SharePoint Overexposure

Sensitivity labels help classify and protect content based on its sensitivity.

Examples of classification categories include:

  • Public.
  • General.
  • Confidential.
  • Highly confidential.

A sensitivity label may provide:

  • Visual classification.
  • Encryption.
  • Access restrictions.
  • Content marking.
  • Protection that persists with the file.
  • Policy-based protection.

Sensitivity labels can help security teams distinguish between:

  • Content that is intentionally broadly shared.
  • Content that is sensitive and should have restricted access.
  • Content that is unlabeled and requires review.

An unlabeled file is not necessarily insecure, but unlabeled sensitive content is harder to govern consistently. Purview assessments can help identify potentially overshared items that are unlabeled or may require a different sensitivity label.

Remediation Options

After identifying overexposure, choose remediation based on:

  • Sensitivity of the content.
  • Number of users with access.
  • Whether external users are involved.
  • Whether AI applications may use the content.
  • Business impact.
  • Whether access is intentional.
  • Whether the content is still required.

1. Resolve the finding

Use Resolve when the item has been reviewed and the apparent risk is acceptable.

Examples:

  • The file is an approved public document.
  • The business owner confirms the sharing is intentional.
  • The content is not sensitive.
  • The item has already been remediated outside the assessment.

Resolving a finding does not necessarily change the permissions. It records that the finding has been reviewed.

2. Apply or change a sensitivity label

Apply a sensitivity label when:

  • The item is unlabeled.
  • The existing label is too permissive.
  • The content requires encryption or access restrictions.
  • The organization needs better classification.

3. Notify the site owner

Site owners often understand the business context better than central security teams.

A notification can request that the owner:

  • Review the affected item.
  • Confirm the intended audience.
  • Remove unnecessary access.
  • Replace a broad sharing link.
  • Apply an appropriate sensitivity label.
  • Move the content to a more restricted site.

4. Remove a sharing link

Removing an inappropriate sharing link prevents that link from being used to access the content.

This action should be used carefully because it may disrupt legitimate collaboration. After removing the link, the owner may need to create a more restrictive link for authorized users.

5. Restrict access temporarily

SharePoint capabilities such as Restricted Access Control can be used to limit access to specified groups while remediation is performed.

This can be useful when:

  • A site contains highly sensitive information.
  • Permissions cannot be reviewed immediately.
  • Copilot exposure must be reduced quickly.
  • A security investigation is underway.

6. Use restricted content discovery

Restricted content discovery can help prevent high-risk SharePoint sites and files from surfacing in Microsoft Copilot and related agentic experiences while the organization works on remediation.

This is an interim control. It should not replace correcting the underlying permissions and content governance problems.

7. Initiate a site access review

A site access review sends a request to the site owner to review and update access.

A site owner can review:

  • Users with access.
  • Groups with access.
  • Items with broad permissions.
  • Sharing links.
  • Items with unusually high exposure.

This approach distributes remediation to the people most familiar with the site’s business purpose.

Recommended Investigation Workflow

Step 1: Identify the site or user at risk

Use:

  • DSPM data risk assessments.
  • Site permissions reports.
  • User permissions reports.
  • Sharing link activity reports.
  • EEEU reports.

Step 2: Determine the exposure type

Identify whether access is granted through:

  • An Anyone link.
  • A People in your organization link.
  • A Specific people link.
  • A SharePoint group.
  • A Microsoft 365 group.
  • Everyone.
  • Everyone except external users.
  • Direct permissions.
  • Inherited permissions.

Step 3: Determine the data sensitivity

Review:

  • Sensitivity labels.
  • File content.
  • Business owner.
  • Regulatory classification.
  • Customer or employee information.
  • Intellectual property.
  • Security or legal information.

Step 4: Determine whether the exposure is intentional

Ask:

  • Is the audience appropriate?
  • Is the file still needed?
  • Is external sharing required?
  • Is broad internal access justified?
  • Is the link type appropriate?
  • Is the access temporary or permanent?

Step 5: Prioritize remediation

A useful priority model is:

  1. Sensitive content shared externally or anonymously.
  2. Sensitive content shared with Everyone.
  3. Sensitive content shared with Everyone except external users.
  4. Sensitive content accessible to large groups.
  5. Unlabeled content with broad access.
  6. Low-risk content with legitimate broad sharing.

Step 6: Apply the least disruptive effective control

Possible actions include:

  • Remove a broad link.
  • Replace it with a Specific people link.
  • Remove unnecessary group membership.
  • Change site permissions.
  • Apply a sensitivity label.
  • Initiate a site access review.
  • Restrict access temporarily.
  • Restrict content discovery while remediation is performed.

Step 7: Validate and document

After remediation:

  • Re-run the assessment or report.
  • Confirm that access is reduced as intended.
  • Verify that legitimate users retain access.
  • Document the business justification.
  • Record the owner and remediation date.
  • Monitor for recurrence.

Important Limitations and Considerations

Assessments are not necessarily real-time

Reports and assessments may have processing delays. A newly changed permission may not appear immediately.

Do not assume that a report showing no issue proves that the current configuration is risk-free.

OneDrive and SharePoint coverage can differ

Some item-level scanning capabilities are limited to SharePoint sites. OneDrive support and reporting methods may differ depending on the specific feature and current service capabilities.

Broad access is not always inappropriate

A public brochure, product announcement, or company policy may legitimately be shared broadly.

Security engineers must evaluate the context rather than automatically removing every broad link.

Removing links may disrupt business operations

Removing a sharing link can prevent legitimate recipients from accessing the content. Use owner review and business validation where possible.

Fix permissions, not just AI visibility

Restricted content discovery can reduce the chance that content appears in Copilot or agentic experiences, but the underlying SharePoint permissions should still be corrected.

Common Exam Traps

Trap 1: Copilot bypasses SharePoint permissions

Incorrect. Copilot generally uses the current user’s authorized access. The risk often comes from excessive SharePoint permissions.

Trap 2: Everyone except external users means secure

Incorrect. It excludes external users but may grant access to every internal user.

Trap 3: An Anyone link always indicates a security incident

Incorrect. The link may be intentional for public content. The content’s sensitivity and business purpose must be evaluated.

Trap 4: A site permissions report identifies every affected file

Not necessarily. Site-level reports identify exposure patterns. Item-level reports, such as the special-groups report, are needed to identify specific files and folders affected by certain broad permissions.

Trap 5: Restricted content discovery fixes the permissions

Incorrect. It is an interim control that can reduce AI discovery exposure. The underlying permissions should still be remediated.

Trap 6: A resolved finding automatically removes access

Incorrect. Resolving a finding records that it has been reviewed. It does not necessarily change the item’s permissions.

Trap 7: Activity reports and snapshot reports serve the same purpose

Incorrect. Snapshot reports describe the current or baseline state. Activity reports focus on recent sharing behavior.

Trap 8: Every unlabeled file is insecure

Incorrect. Lack of a sensitivity label is a governance concern, but the actual risk depends on the content and access permissions.

Practice Exam Questions

Question 1

An organization is preparing to deploy Microsoft 365 Copilot. The security team wants to identify SharePoint content that may be accessible to a broader audience than intended. Which capability is most appropriate?

A. Microsoft Defender for Endpoint
B. Microsoft Purview Data Security Posture Management data risk assessments
C. Azure Network Watcher
D. Azure Firewall

Answer: B

Explanation: Purview DSPM data risk assessments help identify potentially overshared Microsoft 365 content, including SharePoint data that may affect AI grounding and Copilot responses.

Question 2

A SharePoint document is shared with Everyone except external users. What is the primary security concern?

A. The document is automatically encrypted with a Microsoft-managed key.
B. Only the site owner can access the document.
C. The document is available only to external guests.
D. The document may be accessible to all authenticated users inside the organization.

Answer: D

Explanation: Everyone except external users excludes external users but can expose the document to the entire internal organization.

Question 3

A security engineer needs to identify the exact files and folders that have permissions granted to Everyone or Everyone except external users. Which report should be used?

A. Sites and files shared via special SharePoint groups report
B. Azure Activity Log
C. Microsoft Defender for Servers report
D. Site collection storage report

Answer: A

Explanation: The special-groups report identifies the specific sites, files, and folders affected by permissions granted to Everyone or Everyone except external users.

Question 4

A security team wants to understand which SharePoint sites a particular employee can access and whether access is direct or inherited through groups. Which report is most appropriate?

A. Sharing links activity report
B. Site permissions for users report
C. Sensitivity labels for files report
D. External attack surface report

Answer: B

Explanation: The site permissions for users report shows the sites a specified user can access and how access is granted.

Question 5

A potentially overshared file is identified in Purview. The file contains confidential financial information and is currently unlabeled. What is an appropriate remediation action?

A. Apply an appropriate sensitivity label and review the sharing permissions.
B. Resolve the finding without reviewing it.
C. Make the file available to Everyone.
D. Disable Microsoft 365 Copilot for the entire tenant.

Answer: A

Explanation: Sensitive unlabeled content should be classified and its permissions reviewed. Applying a sensitivity label can improve protection and governance.

Question 6

A site owner confirms that a file identified by a Purview assessment is an approved public marketing brochure. What should the security engineer do if the sharing is intentional and acceptable?

A. Delete the SharePoint site.
B. Remove all site members.
C. Resolve the finding after documenting the business justification.
D. Apply a highly confidential label automatically.

Answer: C

Explanation: Not every broad sharing configuration is inappropriate. If the exposure is intentional and approved, the finding can be resolved after review.

Question 7

A security team wants to identify newly created sharing links that may introduce oversharing risks. Which capability should it use?

A. Site storage metrics
B. Sharing links activity reports
C. Azure Resource Graph
D. Microsoft Entra Connect Health

Answer: B

Explanation: Sharing links activity reports identify sites with recent sharing-link activity and help detect emerging oversharing risks.

Question 8

An organization discovers that a high-risk SharePoint site may expose sensitive content to Copilot users. The permissions cannot be fully reviewed immediately. Which interim control may help reduce the content’s visibility in Copilot and agentic experiences?

A. Disable all Microsoft Entra users.
B. Delete all sensitivity labels.
C. Enable restricted content discovery for the high-risk content.
D. Remove every NSG from the organization.

Answer: C

Explanation: Restricted content discovery can help prevent high-risk SharePoint content from surfacing in Copilot and related agentic experiences while the organization remediates the underlying access risks.

Question 9

Which statement best describes the difference between a snapshot report and an activity report?

A. A snapshot report shows a permission baseline, while an activity report focuses on recent sharing behavior.
B. A snapshot report only applies to Azure virtual machines, while an activity report applies to SharePoint.
C. A snapshot report changes permissions automatically, while an activity report deletes files.
D. A snapshot report identifies malware, while an activity report identifies vulnerabilities.

Answer: A

Explanation: Snapshot reports describe the current or baseline permission state. Activity reports focus on recent sharing activity that may introduce new exposure.

Question 10

A security engineer removes an inappropriate Anyone sharing link from a sensitive SharePoint file. What should the engineer do next?

A. Assume that all access to the file is now impossible.
B. Validate that authorized users still have appropriate access and confirm that the broad link is no longer usable.
C. Grant Everyone access as a replacement.
D. Disable SharePoint for the entire organization.

Answer: B

Explanation: Removing a sharing link may affect legitimate collaboration. The engineer should validate the resulting access and ensure that authorized users retain an appropriate, more restrictive access method.

Summary

For the SC-500 exam, remember these key points:

  • SharePoint overexposure occurs when content is accessible to a broader audience than intended.
  • Copilot generally uses the current user’s existing permissions.
  • Excessive SharePoint permissions can therefore create AI data exposure risks.
  • Purview DSPM data risk assessments help identify potentially overshared content.
  • SharePoint Data access governance reports provide organization-wide, user-specific, item-level, and activity-based visibility.
  • Everyone except external users can expose content to all internal users.
  • Anyone links can expose content beyond the organization and should be reviewed carefully.
  • Snapshot reports show the current or baseline state.
  • Activity reports identify recent sharing behavior.
  • Sensitivity labels help classify and protect sensitive content.
  • Remediation may include changing permissions, removing links, applying labels, notifying site owners, initiating access reviews, or temporarily restricting content discovery.
  • Restricted content discovery is an interim AI-visibility control, not a replacement for correcting SharePoint permissions.
  • Always validate the business purpose before removing legitimate access.

Go to the SC-500 Exam Prep Hub main page

AI Governance, AI Security, azure, Microsoft Certification, SC-500, security

Identify risks related to Microsoft Copilot and AI apps by using Microsoft Purview Data Security Posture Management (DSPM) (SC-500 Exam Prep)

 
This post is a part of the "SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads" Exam Prep Hub.
This topic falls under these sections:
Secure compute (20–25%)
   --> Implement security for AI
      --> Identify risks related to Microsoft Copilot and AI apps by using Microsoft Purview Data Security Posture Management (DSPM)

Note that there are 10 practice questions (with answers) at the end of each section to help you solidify your knowledge of the material. Also, there are 4 practice tests with 30 questions each available from the hub's main page below the exam topics section.

Introduction

This topic focuses on using Microsoft Purview Data Security Posture Management (DSPM) to identify risks associated with Microsoft Copilot and other AI applications.

You should understand how to:

  • Discover which AI applications are being used.
  • Identify sensitive information involved in AI interactions.
  • Detect potential data exposure and oversharing.
  • Review prompts, responses, and referenced content when permitted.
  • Use DSPM insights and recommendations to prioritize security controls.
  • Understand the relationship between DSPM, Microsoft Purview, Microsoft Defender, and Microsoft 365 security controls.

Why AI-related data risks matter

Generative AI applications can make sensitive information easier to discover, summarize, combine, and distribute. A user might ask Copilot to summarize documents, analyze business information, or answer questions using organizational data. If the underlying data is incorrectly shared or insufficiently protected, AI can amplify the exposure by making that information easier to retrieve and use.

Microsoft 365 Copilot is designed to respect existing user permissions. Therefore, many Copilot data-exposure risks are not caused by Copilot bypassing permissions. Instead, they occur because users already have access to information that is too broadly shared, improperly classified, stale, or insufficiently governed.

Microsoft Purview DSPM helps organizations understand these risks by bringing together information about data, users, AI interactions, sensitive information, and existing security controls. It provides analytics, trends, recommendations, and guided actions that help security and compliance teams improve their data security posture.

What is Microsoft Purview DSPM?

Microsoft Purview Data Security Posture Management is a centralized capability for discovering, assessing, and managing data security risks across an organization.

DSPM can help organizations:

  1. Understand where sensitive data exists.
  2. Identify how data is accessed and used.
  3. Detect potential oversharing and exposure.
  4. Identify risky AI interactions.
  5. Review recommendations for improving protection.
  6. Connect findings to Microsoft Purview security and compliance controls.

DSPM for AI provides visibility into AI-related risks, including sensitive data in prompts and responses, risky AI usage, and interactions involving enterprise or third-party AI applications. Microsoft Purview also provides related capabilities through auditing, data classification, sensitivity labels, Data Loss Prevention, Insider Risk Management, and eDiscovery.

Microsoft documentation now distinguishes between the current Data Security Posture Management experience and the earlier DSPM for AI (classic) experience. The current DSPM experience provides broader data-security workflows, while some older one-click policies and documentation may still use the “DSPM for AI” terminology.

Important AI-related risks

1. Overshared data

Oversharing occurs when sensitive information is accessible to more users than necessary.

Examples include:

  • A confidential SharePoint site accessible to all employees.
  • A document shared through an “Anyone” link.
  • A sensitive file available through a broad Microsoft 365 group.
  • A former project site that still contains confidential information.
  • A document with unique permissions that were never reviewed.
  • A file that lacks an appropriate sensitivity label.

When Copilot or an agent can access data through a user’s existing permissions, overshared information may become easier to discover in AI-generated responses. DSPM and related SharePoint governance reports help identify these conditions.

2. Sensitive information in prompts and responses

Users may enter sensitive information into AI applications, such as:

  • Customer information.
  • Financial data.
  • Employee records.
  • Intellectual property.
  • Credentials or secrets.
  • Health-related information.
  • Legal or regulatory information.
  • Confidential source code.

Microsoft Purview data classification can use sensitive information types and trainable classifiers to identify sensitive data in AI prompts and responses. These findings can appear in Microsoft Purview reports and Activity Explorer.

3. Risky AI usage

Risky AI usage can include:

  • Attempted prompt injection.
  • Attempts to access protected material.
  • Use of AI to expose confidential information.
  • Unusual or potentially malicious AI activity.
  • Inappropriate use of AI applications.
  • Copying sensitive organizational data into an unapproved AI service.

Microsoft Purview Insider Risk Management can use AI-related signals to help identify potentially risky behavior. For example, the risky AI usage policy template can detect activities such as prompt injection attempts and attempts to access protected materials.

4. Use of unapproved third-party AI applications

Employees may use public AI websites without organizational approval. Examples include consumer versions of ChatGPT, Google Gemini, or other generative AI services.

These applications can create risks when users:

  • Paste sensitive business information into prompts.
  • Upload confidential files.
  • Use organizational data in an application without approved controls.
  • Circumvent organizational AI policies.
  • Use an AI service that does not meet organizational compliance requirements.

Microsoft Purview supports visibility into certain third-party AI interactions. Network-based data security capabilities can help audit prompts and responses through supported Secure Access Service Edge or Security Service Edge integrations. The Microsoft Purview browser extension and onboarded devices may also be required for particular discovery and endpoint DLP scenarios.

Microsoft Purview DSPM capabilities for AI

AI activity discovery

DSPM helps organizations understand which AI applications are being used and how users interact with them.

Depending on the application and configuration, organizations may be able to identify:

  • The AI application involved.
  • The user or activity associated with an interaction.
  • The presence of sensitive information.
  • Risk indicators.
  • Related prompts and responses.
  • Referenced files or data sources.
  • Potentially unethical or inappropriate interactions.

The level of detail available depends on the application, licensing, permissions, collection policies, and supported integration.

Sensitive-data insights

DSPM can use Microsoft Purview classification capabilities to identify sensitive information in AI interactions.

Classification may be based on:

  • Sensitive information types.
  • Trainable classifiers.
  • Existing sensitivity labels.
  • Other Microsoft Purview classification signals.

These insights help security teams determine whether users are submitting or receiving information that requires additional protection.

Risk assessments and recommendations

DSPM provides data risk assessments and recommendations that help organizations identify security weaknesses and determine appropriate next steps.

Examples of recommendations may include:

  • Protecting sensitive data with sensitivity labels.
  • Reviewing overshared SharePoint content.
  • Capturing AI interactions for investigation or compliance.
  • Creating DLP policies.
  • Creating Insider Risk Management policies.
  • Reviewing risky users or activities.
  • Restricting access to sensitive content.

DSPM is not simply a reporting dashboard. Its purpose is to help transform data-discovery findings into practical security and compliance actions.

How to access DSPM

The current Microsoft Purview experience provides DSPM functionality through the Microsoft Purview portal.

A typical workflow is:

  1. Sign in to the Microsoft Purview portal.
  2. Open Data Security Posture Management.
  3. Review the available security objectives, dashboards, assessments, and recommendations.
  4. Select the relevant AI or data-risk area.
  5. Review the affected applications, users, data, or activities.
  6. Drill into details using available reports or Activity Explorer.
  7. Apply or configure the recommended security controls.

Some older documentation refers to:

Microsoft Purview portal → Solutions → DSPM for AI (classic)

The exact navigation and available capabilities may vary as Microsoft transitions functionality from the classic experience to the current DSPM experience.

Recommended setup tasks

Before DSPM can provide meaningful insights, several prerequisites and setup tasks may be required.

Activate Microsoft Purview Audit

Auditing provides visibility into activities that occur in supported Microsoft services and applications. In many new tenants, auditing is already enabled, but administrators should verify that it is available and configured appropriately.

Configure AI interaction collection

Some AI investigations require collection policies to capture prompts and responses.

For example, Microsoft Purview provides one-click policies for capturing interactions from supported Copilot experiences and enterprise AI applications. These policies allow the interactions to be analyzed by supported Purview solutions such as DSPM, eDiscovery, Data Lifecycle Management, and compliance workflows.

Configure sensitive-data discovery

Organizations can extend insights into sensitive data shared with AI applications by configuring the appropriate data-classification and network-based discovery capabilities.

Onboard devices when required

Device onboarding may be required for scenarios such as:

  • Discovering sensitive information shared with third-party AI sites.
  • Applying endpoint DLP policies.
  • Detecting users who paste sensitive information into public AI applications.

Configure sensitivity labels

Sensitivity labels help classify and protect files, emails, and other supported content. Labels can provide protection even when content is moved or downloaded, depending on the configured label settings.

Configure pay-as-you-go billing when required

Some DSPM and AI-related data storage or processing capabilities require pay-as-you-go billing. The applicable requirements depend on the specific feature and configuration.

Reviewing AI risk dashboards

DSPM for AI can provide reports and dashboards that help security teams identify patterns such as:

  • Total AI interactions over time.
  • Sensitive interactions by AI application.
  • Risky AI usage.
  • Potentially unethical interactions.
  • Insider Risk severity.
  • AI applications associated with sensitive data.
  • Activities involving protected material.

Security teams can select View details or similar drill-down options to inspect individual activities in Activity Explorer. The ability to view prompts, responses, and referenced files is controlled by Microsoft Purview permissions and role groups. For example, viewing content details may require membership in an appropriate Content Explorer or related role group.

Why activity-level investigation matters

A dashboard may show that sensitive AI interactions are increasing, but it may not explain:

  • Which application is involved.
  • Which users are involved.
  • What type of sensitive data was used.
  • Whether the activity was accidental or intentional.
  • Whether a policy violation occurred.
  • Which control should be applied.

Activity-level investigation provides the context needed to determine whether the issue requires:

  • User education.
  • A sensitivity label.
  • A DLP policy.
  • An Insider Risk Management policy.
  • Access remediation.
  • An investigation.
  • A change to the approved AI application list.

Relationship between DSPM and other Microsoft Purview capabilities

DSPM is not a replacement for all other security and compliance solutions. It provides visibility and recommendations while working with other Microsoft Purview capabilities.

CapabilityPrimary purpose in AI risk management
DSPMDiscover and assess data-security risks and provide recommendations
Microsoft Purview AuditRecord and investigate supported AI and user activities
Data classificationIdentify sensitive information in supported content and interactions
Sensitivity labelsClassify and protect sensitive content
Data Loss PreventionDetect, warn, or block inappropriate sharing of sensitive data
Insider Risk ManagementIdentify potentially risky user behavior
Communication ComplianceDetect inappropriate or policy-violating communications
eDiscoverySearch and preserve supported AI interaction content for investigations or legal matters
Data Lifecycle ManagementRetain or delete content according to organizational requirements

For example, DSPM might identify that users are frequently submitting sensitive information to an AI application. A security team could then use the finding to create a DLP policy, configure an Insider Risk Management policy, or improve sensitivity-label coverage.

Microsoft Copilot and permission-based access

Microsoft 365 Copilot uses the permissions available to the user. This means that an organization should not assume that deploying Copilot automatically creates a new permission model or bypasses SharePoint and Microsoft 365 access controls.

However, existing permissions may be too broad.

For example:

  • A user may belong to a large group that has access to a confidential site.
  • A document may be shared with everyone in the organization.
  • A file may be available through an overly broad sharing link.
  • A site may contain outdated information that is still accessible.
  • A sensitive document may not have an appropriate label or protection.

In these cases, Copilot may make the information more discoverable, but the underlying problem is usually the organization’s data-access or governance configuration. DSPM and SharePoint data-access governance capabilities help identify these issues.

Important distinction: DSPM versus SharePoint data-access governance

Both DSPM and SharePoint data-access governance can help identify exposure risks, but they serve different purposes.

DSPM

DSPM focuses on the broader data-security posture, including:

  • Sensitive data.
  • AI interactions.
  • Risk trends.
  • Recommendations.
  • Data exposure.
  • User and application activity.
  • AI-related security objectives.

SharePoint data-access governance

SharePoint data-access governance reports focus more directly on SharePoint and OneDrive permissions, sharing links, and access patterns.

Examples include:

  • Site permissions across the organization.
  • Site permissions for individual users.
  • Sites or files shared with everyone in the organization.
  • Sites or files shared with everyone except external users.
  • Sharing-link activity.
  • Sensitivity labels applied to files.
  • Site-access reviews.

These reports can help identify the underlying access configuration that may cause sensitive data to be exposed to Copilot or other authorized users.

Recommended process for identifying AI-related data risks

Step 1: Identify approved AI applications

Create an inventory of:

  • Microsoft 365 Copilot.
  • Microsoft Copilot Studio agents.
  • Microsoft Security Copilot.
  • Enterprise AI applications.
  • AI applications connected through Microsoft Entra.
  • AI applications built with Microsoft Foundry.
  • Approved third-party AI applications.
  • Unapproved or consumer AI applications.

This inventory helps distinguish expected business use from potentially unauthorized AI usage.

Step 2: Identify sensitive data

Review the organization’s use of:

  • Sensitive information types.
  • Sensitivity labels.
  • Trainable classifiers.
  • Confidentiality classifications.
  • DLP policies.
  • Data-retention requirements.

AI-risk detection is more effective when sensitive data has already been classified consistently.

Step 3: Configure the required collection and auditing

Verify that:

  • Microsoft Purview Audit is enabled.
  • Required AI interaction collection policies are configured.
  • Devices are onboarded where required.
  • Network integrations are configured for supported third-party AI scenarios.
  • Required licensing and billing prerequisites are satisfied.

Step 4: Review DSPM dashboards and recommendations

Look for:

  • Sensitive AI interactions.
  • Risky AI usage.
  • High-risk applications.
  • Repeated policy violations.
  • Users interacting with sensitive data.
  • AI activities involving protected material.
  • Recommendations for improving security posture.

Step 5: Investigate individual activities

Use available drill-down capabilities to determine:

  • Which user performed the activity.
  • Which AI application was used.
  • What data was involved.
  • Whether the data was sensitive.
  • Whether the activity was permitted.
  • Whether the activity was accidental or suspicious.
  • Which policy or control should be applied.

Step 6: Remediate the underlying risk

Possible actions include:

  • Applying or improving sensitivity labels.
  • Reducing SharePoint permissions.
  • Removing unnecessary sharing links.
  • Restricting access to sensitive sites.
  • Creating DLP policies.
  • Creating Insider Risk Management policies.
  • Blocking or restricting unapproved AI applications.
  • Educating users.
  • Archiving or deleting unnecessary content.
  • Reviewing AI agent permissions and data sources.

Step 7: Monitor continuously

AI usage and data exposure change over time. Organizations should regularly review:

  • New AI applications.
  • New agents.
  • Changes to permissions.
  • New sensitive-data findings.
  • Risk trends.
  • DLP incidents.
  • Insider Risk alerts.
  • Newly overshared content.
  • Changes in AI application usage.

Licensing and permissions considerations

The available DSPM capabilities depend on the organization’s licensing, tenant configuration, application support, and assigned administrative roles.

Some capabilities may require:

  • Microsoft Purview licensing.
  • Microsoft 365 licensing.
  • Microsoft Defender licensing.
  • Pay-as-you-go billing.
  • Appropriate Microsoft Entra or Microsoft Purview roles.
  • Device onboarding.
  • Audit configuration.
  • AI interaction collection policies.
  • Supported application integrations.

For example, some AI investigations require additional permissions before administrators can view prompt and response text or referenced files. Administrators should follow least-privilege principles and assign only the roles necessary for the investigation or compliance task.

Common exam traps

Trap 1: Assuming Copilot bypasses permissions

Copilot generally works with the permissions available to the user. The issue may be that the user already has excessive access.

Trap 2: Confusing DSPM with DLP

DSPM primarily helps discover, assess, and understand risks. DLP is used to enforce policies that can warn, block, or restrict certain data-sharing activities.

Trap 3: Confusing Audit with DSPM

Audit provides activity records. DSPM provides broader risk analysis, dashboards, assessments, and recommendations.

Trap 4: Assuming every AI application is monitored automatically

Coverage depends on the application, integration, licensing, configuration, and collection policies.

Trap 5: Assuming all prompt and response content is visible to every administrator

Viewing detailed content is controlled by permissions and role groups.

Trap 6: Treating every risk finding as proof of malicious behavior

A DSPM finding may indicate potential exposure or risky activity. It requires investigation and context before a conclusion is reached.

Trap 7: Confusing sensitivity labels with permissions

A sensitivity label can classify and protect content, but labeling alone does not necessarily replace SharePoint permissions or correct an incorrectly configured access group.

Trap 8: Ignoring third-party AI applications

AI risks can exist outside Microsoft Copilot. Microsoft Purview can provide supported visibility into certain enterprise and third-party AI scenarios, but coverage is not universal.

Summary

Microsoft Purview DSPM helps organizations identify and manage risks associated with Microsoft Copilot and other AI applications.

The most important concepts are:

  • AI can amplify existing data oversharing.
  • Microsoft 365 Copilot generally respects existing permissions.
  • DSPM provides centralized visibility into data-security risks.
  • DSPM for AI can identify sensitive AI interactions and risky usage.
  • Microsoft Purview Audit provides activity records.
  • Data classification identifies sensitive information.
  • Sensitivity labels classify and protect content.
  • DLP can enforce data-sharing restrictions.
  • Insider Risk Management helps identify potentially risky behavior.
  • Activity Explorer supports detailed investigation when the administrator has the required permissions.
  • AI-risk monitoring requires appropriate configuration, licensing, and collection policies.
  • DSPM findings should lead to investigation, remediation, and continuous monitoring.

Practice Exam Questions

Question 1

An organization wants to identify whether users are submitting sensitive information to Microsoft Copilot and other supported AI applications. Which Microsoft Purview capability is the best starting point?

A. Microsoft Purview Data Lifecycle Management
B. Microsoft Purview Communication Compliance
C. Microsoft Purview Records Management
D. Microsoft Purview Data Security Posture Management

Answer: D

Explanation: Microsoft Purview DSPM provides dashboards, assessments, and recommendations for identifying data-security risks, including sensitive information involved in AI interactions. Data Lifecycle Management focuses on retention and deletion, while Communication Compliance focuses primarily on inappropriate communications.

Question 2

A user asks Microsoft 365 Copilot to summarize a confidential document. The user can access the document because it is shared with a large Microsoft 365 group. What is the most likely underlying security issue?

A. Copilot has bypassed SharePoint permissions.
B. Copilot has trained its model on the document.
C. Copilot has disabled the document’s sensitivity label.
D. The document may be overshared through existing permissions.

Answer: D

Explanation: Microsoft 365 Copilot generally respects the user’s existing permissions. The likely problem is that the document is accessible to more users than necessary through the group’s permissions.

Question 3

An administrator needs to investigate individual AI activities and, where authorized, view the prompts, responses, and referenced files. Which capability should the administrator use?

A. Activity Explorer in Microsoft Purview
B. Azure Resource Graph
C. Azure Policy compliance results
D. Microsoft Defender for Containers

Answer: A

Explanation: Activity Explorer can provide detailed information about supported AI activities. Viewing prompt, response, and referenced-file content requires the appropriate Microsoft Purview permissions and role-group membership.

Question 4

Which Microsoft Purview capability is primarily responsible for identifying sensitive information in AI prompts and responses?

A. Microsoft Purview eDiscovery
B. Microsoft Purview Data Lifecycle Management
C. Microsoft Purview data classification
D. Microsoft Purview resource locks

Answer: C

Explanation: Data classification uses sensitive information types, trainable classifiers, and other classification mechanisms to identify sensitive information in supported AI interactions.

Question 5

An organization wants to capture supported Copilot prompts and responses so they can be analyzed for security and compliance purposes. What should the organization configure?

A. An Azure subscription lock
B. A Microsoft Entra access package
C. A network security group
D. An appropriate Microsoft Purview AI interaction collection policy

Answer: D

Explanation: Some AI interaction scenarios require collection policies to capture prompts and responses. The collected information can then be used by supported Purview solutions for investigation, compliance, and risk analysis.

Question 6

A security team wants to detect potentially risky behavior such as prompt injection attempts and attempts to access protected material. Which Microsoft Purview capability is most relevant?

A. Data Lifecycle Management
B. Insider Risk Management
C. Records Management
D. Information Barriers only

Answer: B

Explanation: Microsoft Purview Insider Risk Management can use AI-related signals and a risky AI usage policy template to help identify potentially risky or suspicious user behavior.

Question 7

Which statement best describes the relationship between DSPM and Data Loss Prevention?

A. DSPM replaces all DLP policies.
B. DLP identifies all AI applications, while DSPM blocks them.
C. DSPM helps identify risks and recommend actions, while DLP can enforce data-sharing controls.
D. DSPM and DLP are identical capabilities with different names.

Answer: C

Explanation: DSPM provides visibility, assessments, analytics, and recommendations. DLP is used to detect, warn about, or block certain activities involving sensitive information.

Question 8

An organization wants to investigate whether employees are using consumer AI websites and submitting sensitive company information. Which combination may be required for supported third-party AI scenarios?

A. Microsoft Purview capabilities, appropriate collection or network integration, and device onboarding where required
B. Azure Bastion and Azure Firewall only
C. Azure Backup and resource locks
D. Microsoft Defender for Containers and Azure Kubernetes Service

Answer: A

Explanation: Visibility into third-party AI usage depends on supported integrations and configuration. Some scenarios require network-based discovery, the Microsoft Purview browser extension, and onboarded devices.

Question 9

An administrator sees an increase in sensitive AI interactions in a DSPM dashboard. What should the administrator do next?

A. Immediately delete all AI applications.
B. Investigate the detailed activities and determine the appropriate remediation.
C. Disable Microsoft Entra ID for all users.
D. Remove all sensitivity labels.

Answer: B

Explanation: A dashboard finding is an indicator of potential risk, not necessarily proof of malicious activity. The administrator should investigate the affected users, applications, data, and circumstances before selecting a remediation.

Question 10

Which statement about viewing AI prompts and responses in Microsoft Purview is correct?

A. Every Microsoft 365 administrator can automatically view all prompt and response content.
B. Prompt and response content is always publicly visible to all security analysts.
C. Prompt and response content can be viewed only by the AI application owner.
D. Access to detailed content is controlled by Microsoft Purview permissions and applicable role groups.

Answer: D

Explanation: Detailed AI interaction content is protected by role-based access controls. Administrators need the appropriate permissions and role-group membership to view prompts, responses, and referenced files where supported.

Go to the SC-500 Exam Prep Hub main page

AB-900, AI, AI Governance, AI Security, Microsoft Certification, security

Discover and manage AI activity by using DSPM for AI (Part 2) (AB-900 Exam Prep)

 
This post is a part of the AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals Exam Prep Hub.
This topic falls under these sections:
Understand data protection and governance tasks for Microsoft 365 and Copilot (35–40%)
   --> Identify data protection and governance risks for Microsoft 365 and Copilot
      --> Discover and manage AI activity by using DSPM for AI

Note that there are 10 practice questions (with answers) at the end of each section to help you solidify your knowledge of the material. Also, there are 4 practice tests with 30 questions each available from the hub's main page below the exam topics section.

Introduction

In Part 1, you learned how Microsoft Purview Data Security Posture Management (DSPM) for AI helps organizations discover AI activity, identify sensitive data exposure, detect oversharing, and provide visibility into how AI interacts with Microsoft 365 data.

This section (Part 2) focuses on how DSPM for AI helps administrators manage AI-related risks, integrates with other Microsoft security and compliance services, and supports secure AI adoption.

Security Recommendations Generated by DSPM for AI

One of DSPM for AI’s most valuable capabilities is providing actionable security recommendations rather than simply identifying problems.

After analyzing an organization’s AI environment, DSPM highlights areas that should be improved to reduce the likelihood of accidental data exposure or compliance violations.

Examples of recommendations include:

  • Reduce excessive SharePoint permissions.
  • Apply sensitivity labels to unclassified confidential files.
  • Configure Data Loss Prevention (DLP) policies.
  • Limit external sharing.
  • Protect highly confidential document libraries.
  • Enable auditing for AI-related activities.
  • Improve data governance before expanding AI deployments.

These recommendations help administrators prioritize improvements based on potential business impact and security risk.

Risk Prioritization

Not every security finding represents the same level of risk.

DSPM helps prioritize remediation efforts by evaluating factors such as:

  • Amount of sensitive data exposed
  • Number of users with access
  • Business importance of the data
  • Existing protection mechanisms
  • AI usage patterns
  • Permission inheritance
  • Regulatory implications

This enables administrators to address the highest-risk issues first.

For example:

RiskPriority
Public access to executive financial reportsHigh
Sensitive HR documents lacking labelsHigh
Marketing presentations shared internallyMedium
Public training documentsLow

Discovering AI-Related Data Exposure

Organizations often ask:

“If we enable Microsoft 365 Copilot today, what sensitive information could users potentially discover?”

DSPM helps answer this question.

It analyzes:

  • Existing permissions
  • Data classifications
  • Sharing configurations
  • Microsoft Graph relationships
  • Collaboration patterns

This provides insight into which sensitive data could become more discoverable through AI-assisted searches and summaries.

Remember:

Copilot does not bypass security permissions. It only accesses information that the signed-in user is already authorized to access. DSPM helps identify situations where those permissions may already be too broad.

Remediation Recommendations

After identifying risks, DSPM recommends remediation steps.

Common recommendations include:

Reduce Oversharing

Examples include:

  • Remove unnecessary SharePoint permissions.
  • Restrict Microsoft Teams membership.
  • Remove Everyone access.
  • Limit guest sharing.

Improve Data Classification

Examples include:

  • Apply sensitivity labels.
  • Enable automatic labeling.
  • Use trainable classifiers.
  • Configure sensitive information types.

Better classification improves downstream protections across Microsoft Purview.

Strengthen Data Protection Policies

DSPM may recommend:

  • Creating DLP policies
  • Encrypting confidential documents
  • Restricting downloads
  • Blocking external sharing
  • Applying retention labels

Review AI Access

Administrators may decide to:

  • Limit AI rollout to selected departments
  • Review permissions before enabling Copilot broadly
  • Reduce access to legacy repositories
  • Remove stale user accounts

Integration with Microsoft Purview

DSPM for AI does not operate as an isolated product.

Instead, it complements several Microsoft Purview solutions.

Understanding these relationships is important for the AB-900 exam.

Microsoft Purview Information Protection

Information Protection classifies and protects data.

DSPM benefits from these classifications.

For example:

A document labeled:

  • Highly Confidential
  • Internal Only
  • Financial
  • Legal

helps DSPM understand the sensitivity of AI-accessible content.

Without labels, DSPM has less context when evaluating risk.

Microsoft Purview Data Loss Prevention (DLP)

DLP prevents sensitive information from being shared inappropriately.

DSPM identifies potential risks.

DLP helps enforce policies to prevent those risks from becoming incidents.

Example workflow:

  1. DSPM discovers sensitive payroll files.
  2. DLP prevents external sharing.
  3. Organization reduces AI-related exposure.

Microsoft Purview Insider Risk Management

DSPM identifies risky data exposure.

Insider Risk Management identifies risky user behavior.

Together they help answer two different questions:

DSPM asks:

“What sensitive data could AI access?”

Insider Risk asks:

“Is someone attempting to misuse sensitive data?”

These products complement one another.

Microsoft Purview Activity Explorer

Activity Explorer provides visibility into user interactions with sensitive information.

DSPM can use Activity Explorer insights to better understand:

  • Sensitive file access
  • Label usage
  • DLP events
  • Data movement

Administrators gain a clearer understanding of how protected information is being used across Microsoft 365.

Microsoft Purview Compliance Manager

Compliance Manager focuses on regulatory compliance.

DSPM focuses on AI data governance.

Together they help organizations:

  • Reduce compliance risk
  • Improve governance
  • Meet regulatory requirements
  • Protect sensitive information used by AI

Microsoft Defender

Microsoft Defender protects identities, endpoints, applications, and cloud resources.

DSPM complements Defender by focusing specifically on AI-related data risks.

Examples:

Microsoft Defender detects:

  • Malware
  • Credential theft
  • Phishing
  • Device compromise

DSPM identifies:

  • Overshared files
  • AI exposure
  • Sensitive data visibility
  • Permission risks

AI Governance Dashboard

DSPM provides dashboards that help administrators understand their organization’s AI posture.

Typical dashboard information includes:

  • AI adoption trends
  • Sensitive data exposure
  • High-risk repositories
  • Oversharing statistics
  • AI application inventory
  • Policy recommendations
  • Governance posture

Rather than investigating individual files, administrators receive a broad organizational view.

Discovering AI Applications

DSPM helps organizations understand:

  • Which AI tools are in use
  • Which departments use them
  • Adoption trends
  • AI usage over time

Examples include:

  • Microsoft 365 Copilot
  • Microsoft Copilot Chat
  • Supported third-party AI services

This visibility helps organizations establish AI governance policies.

Investigating AI Risks

Administrators typically investigate findings by asking questions such as:

  • Which sensitive files are accessible?
  • Who has access?
  • Why do they have access?
  • Is the data properly labeled?
  • Are permissions appropriate?
  • Is the data externally shared?
  • Should additional protection be applied?

DSPM helps surface this information so administrators can make informed decisions.

Typical Investigation Workflow

A simplified investigation might follow these steps:

Step 1

DSPM identifies an overshared SharePoint site.

↓

Step 2

Administrator reviews permissions.

↓

Step 3

Sensitive files are discovered.

↓

Step 4

Sensitivity labels are applied.

↓

Step 5

Permissions are reduced.

↓

Step 6

DLP policies are enabled.

↓

Step 7

Risk is reduced before broader Copilot deployment.

Best Practices

Organizations implementing Microsoft 365 Copilot should follow several best practices.

Review Permissions Before AI Rollout

Avoid enabling Copilot before understanding existing permissions.

Classify Sensitive Data

Use Microsoft Purview Information Protection to classify important documents.

Apply Least Privilege

Users should only have access to information required for their job.

Reduce Oversharing

Review:

  • SharePoint permissions
  • Teams memberships
  • OneDrive sharing
  • External sharing

Enable DLP

Prevent accidental sharing of confidential information.

Monitor AI Adoption

Understand:

  • Who uses AI
  • Which departments use AI
  • What information AI accesses

Regularly Review Recommendations

DSPM continuously evaluates the environment.

Administrators should regularly review new recommendations as data, permissions, and AI usage evolve.

Licensing Considerations

For the AB-900 exam, you are not expected to memorize licensing details, as licensing can change over time.

However, you should understand these general principles:

  • DSPM for AI is part of the Microsoft Purview family.
  • Advanced governance and AI security capabilities may require appropriate Microsoft licensing.
  • Organizations should verify current licensing requirements before deployment.

Common Exam Scenarios

You may encounter questions like:

Scenario 1

An organization wants to know whether Microsoft 365 Copilot could expose confidential HR documents because of existing permissions.

Relevant technology:

Microsoft Purview DSPM for AI

Scenario 2

Administrators want recommendations to reduce AI-related data exposure before deploying Copilot.

Relevant technology:

Microsoft Purview DSPM for AI

Scenario 3

Security administrators want visibility into AI adoption across Microsoft 365.

Relevant technology:

Microsoft Purview DSPM for AI

Scenario 4

Administrators want to identify overshared SharePoint sites that AI could access.

Relevant technology:

Microsoft Purview DSPM for AI

Scenario 5

An organization wants to understand where sensitive information may be exposed through AI.

Relevant technology:

Microsoft Purview DSPM for AI

Common Misconceptions

Misconception 1

DSPM blocks AI prompts.

Incorrect.

DSPM primarily discovers, assesses, and helps reduce AI-related data risks. It is not a prompt-filtering or AI-blocking solution.

Misconception 2

Copilot ignores permissions.

Incorrect.

Copilot always respects the signed-in user’s existing Microsoft 365 permissions.

Misconception 3

DSPM replaces Microsoft Purview DLP.

Incorrect.

DSPM identifies risks, while DLP enforces policies that help prevent inappropriate sharing of sensitive data.

Misconception 4

DSPM replaces Microsoft Defender.

Incorrect.

Defender focuses on threats and attacks, whereas DSPM focuses on AI-related data exposure and governance.

Misconception 5

DSPM automatically fixes security issues.

Incorrect.

DSPM provides visibility, recommendations, and guidance. Administrators remain responsible for implementing changes such as adjusting permissions, applying labels, or configuring policies.

AB-900 Exam Tips

Focus on these key concepts:

  • Microsoft Purview DSPM for AI is an AI governance and visibility solution.
  • It helps organizations discover AI usage, identify sensitive data exposure, and reduce AI-related risks.
  • DSPM does not bypass or modify Microsoft 365 permissions.
  • It works alongside Information Protection, DLP, Insider Risk Management, Activity Explorer, Compliance Manager, and Microsoft Defender.
  • One of its primary goals is to identify oversharing before it becomes a business risk.
  • DSPM provides recommendations, not automatic remediation.
  • It supports organizations throughout the AI adoption lifecycle by helping them continuously improve their security posture.

Chapter Summary

Microsoft Purview DSPM for AI enables organizations to adopt AI confidently by providing visibility into how AI interacts with organizational data. It discovers AI usage, inventories AI applications, identifies oversharing, evaluates sensitive data exposure, and recommends actions to strengthen governance.

Rather than replacing existing Microsoft Purview or Microsoft Defender capabilities, DSPM for AI enhances them by adding AI-specific insights. It integrates with Information Protection, Data Loss Prevention, Insider Risk Management, Activity Explorer, Compliance Manager, and Microsoft Defender to create a comprehensive approach to AI governance.

For the AB-900 exam, remember that DSPM for AI is fundamentally about discovering, assessing, and managing AI-related data risks. It helps administrators understand where AI could expose sensitive information due to existing permissions and governance gaps, enabling organizations to improve their security posture before and during Microsoft 365 Copilot deployment.

Practice Exam Questions

Question 1

A company plans to deploy Microsoft 365 Copilot across all departments. Before deployment, administrators want to determine whether confidential documents are overly accessible due to existing SharePoint permissions.

Which Microsoft solution should they use?

A. Microsoft Entra Domain Services

B. Microsoft Defender for Endpoint

C. Microsoft Intune

D. Microsoft Purview Data Security Posture Management (DSPM) for AI

Correct Answer: D

Explanation

Microsoft Purview DSPM for AI helps organizations discover overshared content, evaluate AI-related data exposure, and identify permission risks before deploying AI solutions such as Microsoft 365 Copilot.

  • A is correct because DSPM for AI analyzes permissions and identifies AI-related security risks.
  • B is incorrect because Defender for Endpoint protects devices.
  • C is incorrect because Intune manages devices and applications.
  • D is incorrect because Entra Domain Services provides managed domain services rather than AI governance.

Question 2

An administrator wants to understand which departments are actively using Microsoft 365 Copilot and other approved AI applications.

Which capability best addresses this requirement?

A. Microsoft Purview Information Protection

B. Microsoft Purview DSPM for AI

C. Microsoft Defender for Cloud Apps

D. Microsoft Entra Conditional Access

Correct Answer: B

Explanation

DSPM for AI provides visibility into AI adoption, AI application inventory, and usage trends across the organization.

  • B is correct because DSPM for AI discovers AI activity and AI adoption.
  • A classifies and protects data.
  • C monitors cloud applications but is not specifically designed for AI governance.
  • D controls authentication conditions.

Question 3

Which statement best describes how Microsoft 365 Copilot accesses organizational data?

A. It bypasses Microsoft 365 permissions when generating responses.

B. It can access all documents stored in Microsoft 365 regardless of permissions.

C. It only accesses content the signed-in user is already authorized to access.

D. It only accesses files created after Copilot was enabled.

Correct Answer: C

Explanation

Copilot respects existing Microsoft 365 permissions. It never bypasses authorization.

  • C is correct because Copilot only retrieves content the current user can already access.
  • A and B incorrectly imply that Copilot ignores permissions.
  • D is incorrect because file creation date is irrelevant.

Question 4

What is the primary purpose of Microsoft Purview DSPM for AI?

A. Prevent all AI-generated responses

B. Replace Microsoft Defender

C. Automatically encrypt all Microsoft 365 data

D. Discover AI activity and identify AI-related data risks

Correct Answer: D

Explanation

DSPM for AI provides visibility into AI usage and helps identify governance and security risks.

  • D is correct because discovering AI activity and assessing AI-related risks are its primary objectives.
  • A, B, and C describe capabilities DSPM does not provide.

Question 5

An organization discovers that hundreds of employees can access executive financial reports because of inherited SharePoint permissions.

What type of risk has DSPM for AI identified?

A. Malware infection

B. Oversharing

C. Identity synchronization failure

D. Device compliance failure

Correct Answer: B

Explanation

Oversharing occurs when users have broader access to information than intended.

  • B is correct because excessive permissions increase AI-related exposure.
  • A, C, and D are unrelated to data governance.

Question 6

Which Microsoft technology provides much of the contextual relationship information that helps DSPM for AI understand user access to Microsoft 365 content?

A. Microsoft SQL Server

B. Microsoft Defender XDR

C. Microsoft Graph

D. Azure Kubernetes Service

Correct Answer: C

Explanation

Microsoft Graph provides relationships between users, files, emails, Teams, SharePoint, and other Microsoft 365 resources.

  • C is correct because DSPM uses Microsoft Graph signals to understand data access.
  • The remaining options do not provide organizational relationship data.

Question 7

Which Microsoft Purview solution works alongside DSPM for AI by preventing inappropriate sharing of sensitive information?

A. Microsoft Purview Data Loss Prevention (DLP)

B. Microsoft Entra ID Protection

C. Microsoft Intune

D. Windows Autopilot

Correct Answer: A

Explanation

DLP enforces policies that prevent sensitive information from being shared improperly.

  • A is correct because DLP complements DSPM by enforcing protection policies.
  • B, C, and D serve different purposes.

Question 8

An administrator wants recommendations for reducing AI-related security risks before expanding Microsoft 365 Copilot deployment.

What should they use?

A. Microsoft Defender Antivirus

B. Microsoft Purview DSPM for AI

C. Exchange Online Protection

D. Microsoft Entra Connect

Correct Answer: B

Explanation

DSPM for AI evaluates AI-related risks and recommends improvements such as reducing oversharing, improving data classification, and strengthening governance.

  • B is correct because providing security recommendations is one of its core capabilities.
  • The other products address different areas of Microsoft security.

Question 9

Which action would most effectively reduce AI-related data exposure identified by DSPM for AI?

A. Disable Microsoft Teams

B. Increase mailbox quotas

C. Review permissions and apply sensitivity labels to confidential data

D. Upgrade Windows devices

Correct Answer: C

Explanation

Reducing excessive permissions and properly classifying sensitive information significantly reduces AI-related exposure.

  • C is correct because both permission management and data classification are recommended remediation actions.
  • A, B, and D do not directly address AI governance.

Question 10

Which statement best summarizes Microsoft’s approach to AI governance with DSPM for AI?

A. DSPM automatically blocks all AI interactions involving confidential information.

B. DSPM replaces Microsoft Purview Information Protection.

C. DSPM eliminates the need for Microsoft Defender.

D. DSPM provides visibility, identifies risks, and recommends actions that help organizations securely adopt AI.

Correct Answer: D

Explanation

Microsoft Purview DSPM for AI is designed to improve organizational AI security posture by discovering AI usage, identifying risks, and recommending governance improvements.

  • D is correct because it accurately reflects the purpose of DSPM for AI.
  • A is incorrect because DSPM is primarily a discovery and governance solution rather than an AI-blocking mechanism.
  • B is incorrect because Information Protection remains responsible for classifying and protecting data.
  • C is incorrect because Microsoft Defender continues to provide threat protection and complements, rather than is replaced by, DSPM for AI.

Key Takeaways for the AB-900 Exam

After studying this topic, you should be able to:

  • Explain the purpose of Microsoft Purview DSPM for AI.
  • Describe how DSPM for AI helps organizations discover and govern AI activity.
  • Understand that Microsoft 365 Copilot always respects existing user permissions.
  • Explain the concept of oversharing and why it is a significant AI-related risk.
  • Describe how Microsoft Graph provides context that enables DSPM for AI to evaluate data access.
  • Identify how DSPM for AI integrates with Microsoft Purview Information Protection, Data Loss Prevention (DLP), Insider Risk Management, Activity Explorer, Compliance Manager, and Microsoft Defender.
  • Recognize that DSPM for AI provides visibility, risk assessment, and recommendations, but administrators remain responsible for implementing remediation actions.
  • Apply DSPM for AI concepts to common AB-900 scenario-based questions involving Microsoft 365 Copilot deployments and AI governance.

These concepts form an important part of the “Identify data protection and governance risks for Microsoft 365 and Copilot” objective and are frequently tested through scenario-based questions that assess your understanding of secure AI adoption and governance.

Go to the AB-900 Exam Prep Hub main page

AB-900, AI, AI Governance, AI Security, Data Security, Microsoft Certification

Discover and Manage AI activity by using DSPM for AI (Part 1) (AB-900 Exam Prep)

 
This post is a part of the AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals Exam Prep Hub.
This topic falls under these sections:
Understand data protection and governance tasks for Microsoft 365 and Copilot (35–40%)
   --> Identify data protection and governance risks for Microsoft 365 and Copilot
      --> Discover and Manage AI activity by using DSPM for AI

Note that there are 10 practice questions (with answers) at the end of each section to help you solidify your knowledge of the material. Also, there are 4 practice tests with 30 questions each available from the hub's main page below the exam topics section.

Introduction

As organizations increasingly adopt AI-powered tools such as Microsoft 365 Copilot, administrators face a new challenge: understanding how AI accesses, processes, and exposes organizational data. Traditional security tools focus on protecting users, devices, and data, but AI introduces new considerations. AI assistants can summarize documents, answer questions, generate reports, and analyze data from across an organization’s Microsoft 365 environment. If permissions are overly broad or sensitive information is poorly governed, AI can unintentionally surface information to users who already have access but should not necessarily see it in a summarized or easily discoverable form.

To address these challenges, Microsoft introduced Microsoft Purview Data Security Posture Management (DSPM) for AI, a solution designed to help organizations discover AI usage, identify potential security risks, understand data exposure, and strengthen governance before and during AI adoption.

For the AB-900 exam, you are not expected to configure DSPM for AI. Instead, you should understand:

  • What DSPM for AI is
  • Why organizations use it
  • How it discovers AI activity
  • How it helps identify risks
  • How it integrates with Microsoft Purview
  • The types of recommendations it provides

What Is Microsoft Purview DSPM for AI?

Microsoft Purview DSPM for AI is a governance and security solution that provides visibility into how artificial intelligence applications interact with organizational data.

Rather than preventing AI usage, DSPM for AI helps administrators answer important questions such as:

  • Which AI applications are employees using?
  • What sensitive information is being accessed?
  • Are AI tools exposing confidential content?
  • Are permissions overly broad?
  • Are Microsoft 365 Copilot users accessing highly sensitive data?
  • Where should security controls be strengthened?

Think of DSPM for AI as a risk discovery and governance solution specifically designed for AI workloads.

What Does “Data Security Posture Management” Mean?

The term Data Security Posture Management (DSPM) refers to continuously evaluating an organization’s data environment to identify security weaknesses before they become incidents.

DSPM focuses on questions such as:

  • Where is sensitive data stored?
  • Who has access?
  • Is the data properly classified?
  • Are security policies protecting it?
  • Could AI expose it more easily?

When AI is introduced, DSPM expands these questions to include:

  • Which AI tools are interacting with company data?
  • Which users are using AI?
  • What content is AI accessing?
  • Could AI reveal confidential information?
  • Are there oversharing risks?

Rather than reacting after a breach occurs, DSPM promotes proactive risk management.

Why Organizations Need DSPM for AI

Many organizations begin using AI before fully understanding their existing data environment.

Common issues include:

  • Excessive file permissions
  • Sensitive documents shared too broadly
  • Unlabeled confidential data
  • Legacy SharePoint permissions
  • Public Teams channels
  • Old collaboration sites
  • Inactive security policies

Without visibility into these issues, AI may legally retrieve information based on existing permissions—even though administrators were unaware those permissions existed.

DSPM for AI helps organizations discover these weaknesses before they become security problems.

Core Capabilities of DSPM for AI

Microsoft Purview DSPM for AI provides several major capabilities.

1. Discover AI Usage

DSPM identifies where AI is being used throughout the organization.

Examples include:

  • Microsoft 365 Copilot
  • Microsoft Copilot Chat
  • AI-enabled Microsoft services
  • Supported third-party AI applications

Administrators gain visibility into:

  • AI adoption
  • AI usage trends
  • Departments using AI
  • Types of AI interactions

This helps organizations understand how quickly AI is being adopted.

2. Discover Sensitive Data Exposure

DSPM evaluates whether AI has access to sensitive organizational data.

Examples include:

  • Financial reports
  • HR records
  • Customer information
  • Legal documents
  • Intellectual property
  • Healthcare information
  • Personally identifiable information (PII)

The solution identifies locations where sensitive information may be accessible through AI.

3. Identify Oversharing Risks

One of the most important concepts for the AB-900 exam is oversharing.

Oversharing occurs when users have legitimate permissions to data that administrators did not intend them to have.

For example:

  • A confidential SharePoint library inherits incorrect permissions.
  • Hundreds of employees can read executive documents.
  • Microsoft 365 Copilot can summarize those documents for anyone with existing access.

The problem is not Copilot.

The problem is the underlying permissions.

DSPM helps identify these situations.

4. Inventory AI Applications

Organizations often have many AI applications in use.

DSPM helps administrators discover:

  • Approved AI tools
  • Newly adopted AI tools
  • Shadow AI applications
  • AI usage across departments

This visibility supports governance decisions.

5. Monitor AI Interactions

DSPM can provide insights into how AI interacts with organizational content.

Examples include:

  • Documents accessed
  • Sensitive data locations
  • AI usage frequency
  • Common AI workflows
  • Business units using AI

Administrators gain a better understanding of AI usage patterns without reading users’ private prompts or monitoring employee productivity.

How DSPM for AI Discovers AI Activity

DSPM analyzes signals across Microsoft 365 services to understand AI usage.

These signals may include:

  • User activity
  • Data access
  • File classifications
  • Permissions
  • Labels
  • Microsoft Graph relationships
  • Microsoft Purview metadata

Rather than simply counting AI prompts, DSPM builds a broader picture of how AI interacts with organizational data.

Microsoft Graph’s Role

One important concept for the AB-900 exam is understanding the relationship between Microsoft Graph and DSPM.

Microsoft Graph acts as the intelligence layer connecting Microsoft 365 services.

DSPM uses Microsoft Graph signals to understand:

  • Which files users can access
  • Collaboration relationships
  • SharePoint permissions
  • Teams memberships
  • OneDrive access
  • Email relationships
  • Microsoft 365 activity

This allows DSPM to identify situations where AI could expose sensitive information because users already possess excessive permissions.

Data Sources Evaluated by DSPM

DSPM evaluates multiple Microsoft 365 services.

Examples include:

SharePoint Online

  • Sensitive document libraries
  • Overshared sites
  • Confidential folders
  • File permissions

OneDrive

  • Shared personal files
  • External sharing
  • Sensitive documents
  • Personal work data

Microsoft Teams

  • Shared files
  • Team memberships
  • Collaboration spaces
  • Shared conversations

Exchange Online

  • Email data
  • Mailbox access
  • Shared mailboxes
  • Sensitive communications

Microsoft 365 Copilot

DSPM evaluates how Copilot interacts with organizational data by examining:

  • Available permissions
  • Data sources
  • Sensitive information exposure
  • Governance controls

Types of Risks DSPM Can Identify

DSPM helps identify a variety of AI-related risks.

Overshared Content

Examples include:

  • Everyone can access HR documents.
  • Finance reports are visible to the entire company.
  • Sensitive SharePoint sites inherit incorrect permissions.

Sensitive Information Exposure

Examples include:

  • Credit card numbers
  • Passport numbers
  • Social Security numbers
  • Customer records
  • Healthcare data
  • Intellectual property

Excessive Permissions

Users frequently accumulate permissions over time.

DSPM identifies situations where users have access to more information than necessary.

This supports the principle of least privilege.

Unclassified Sensitive Data

Organizations often possess sensitive information that has never been classified.

DSPM can identify repositories containing:

  • Unlabeled confidential documents
  • Sensitive spreadsheets
  • Legal contracts
  • Financial reports

This allows administrators to apply Microsoft Purview Information Protection labels.

Shadow AI

Shadow AI refers to employees using AI tools that have not been approved by the organization.

Examples might include:

  • Public AI chat services
  • AI writing assistants
  • AI coding assistants
  • AI document summarizers

DSPM helps organizations understand where unmanaged AI usage exists so appropriate governance decisions can be made.

Key Exam Tips

For the AB-900 exam, remember these important points:

  • DSPM for AI is primarily a visibility and governance solution, not an AI blocking solution.
  • It helps organizations discover, understand, and reduce AI-related risks.
  • It identifies oversharing, sensitive data exposure, and permission issues.
  • DSPM works closely with other Microsoft Purview solutions to improve an organization’s overall AI security posture.
  • Microsoft Graph provides much of the contextual information that enables DSPM to evaluate AI data access and potential risks.
  • The goal is not to restrict productive AI use, but to ensure that AI operates within an organization’s existing security, compliance, and governance framework.

Go to Part 2 of this topic.

Go to the AB-900 Exam Prep Hub main page