Exam SC-401 topic 3 question 11 discussion

the Microsoft Purview extension: This is the correct answer. The Microsoft Purview browser extension (for Edge, Chrome, and Firefox on Windows) is specifically designed to provide visibility into user activities on third-party generative AI sites. It's required for Purview's Insider Risk Management and Endpoint DLP to detect visits to these sites and to enforce policies when sensitive information is shared. It enables the auditing of prompts and responses to these AI services. the Microsoft Defender Browser Protection extension: This extension primarily focuses on protecting users from phishing, malware, and malicious websites by checking URLs against known bad lists. While it's a security tool, its core function is not to track specific user interactions with generative AI sites for Purview auditing purposes.

The definitive answer is A. the Microsoft Purview extension. This is specifically designed and required for tracking interactions between users and generative AI websites within the Microsoft Purview compliance framework. The Microsoft Defender Browser Protection extension serves a different security purpose and is not the correct tool for this specific requirement.

Copilot: To track interactions between users and generative AI websites, the best option is Microsoft Purview Data Security Posture Management for AI (DSPM for AI). This solution provides visibility into AI-related risks, including data oversharing, policy violations, and sensitive information exposure. However, if you need to deploy a specific tool to devices, Microsoft Defender Browser Protection extension (Option C) is a strong choice for monitoring web activity and enforcing security policies. It helps track user interactions with AI applications and ensures compliance. https://www.microsoft.com/en-us/security/blog/2025/01/27/fast-track-generative-ai-security-with-microsoft-purview/