Question
You have a Microsoft 365 E5 subscription that contains a Microsoft Teams channel named Channel1. Channel1 contains research and development documents.
You plan to implement Microsoft 365 Copilot for the subscription.
You need to prevent the contents of files stored in Channel1 from being included in answers generated by Copilot and shown to unauthorized users.
What should you use?
- A. data loss prevention (DLP)
- B. Microsoft Purview insider risk management
- C. Microsoft Purview Information Barriers (IBs)
- D. sensitivity labels Correct
Explanation
Sensitivity labels that apply encryption control who can open the files and which usage rights they have, and Copilot honors those rights: a user who is not authorized cannot get the content, and Copilot returns text only to users who have the EXTRACT usage right. Labeling the Channel1 files therefore keeps their content out of Copilot answers for unauthorized users. A DLP policy for the Copilot location works by identifying files that already carry sensitivity labels, so labels are still the underlying control. Insider risk management detects risky user behavior, and information barriers restrict communication between segments rather than protecting specific files.
