Microsoft GH-300 Practice Test 45
Question 440
An administrator wants to review which tools can read a project's confidential directories. What should be inspected?
- Check the current data-handling contract for the exact plan, product, and feature.
- Review output storage, sharing, and deployment policies separately from repository visibility.
- Audit agent filesystem permissions and connector scopes in addition to Copilot policy.
- Use redacted examples and approved secret-access mechanisms instead of pasting credentials.
Explanation
Correct Answer
C:Runtime access can be broader than conversational content filtering.
Incorrect Answers
A:Different surfaces and plans may have different session and retention rules. runtime access can be broader than conversational content filtering.
B:Private input access does not automatically control later sharing of generated artifacts. What should be inspected. Runtime access can be broader than conversational content filtering.
D:Least disclosure reduces risk without blocking debugging. Runtime access can be broader than conversational content filtering.
Question 441
A developer disables inline completions but leaves Copilot Chat enabled. What should they understand?
- Validate the approved proxy's logging and TLS inspection policy before using confidential code.
- Review effective settings per feature rather than treating one toggle as a global disable.
- Minimize unnecessary sensitive context and verify the feature's context-selection rules.
- Verify the active signed-in identity and the subscription supplying Copilot access.
Explanation
Correct Answer
B:Individual Copilot surfaces can have separate enabled states.
Incorrect Answers
A:Intermediary network infrastructure can introduce additional data handling. individual Copilot surfaces can have separate enabled states.
C:Open or selected files may influence requests where supported. individual Copilot surfaces can have separate enabled states.
D:Policy enforcement depends on the effective account and entitlement. What should they understand. Individual Copilot surfaces can have separate enabled states.
Question 442
An IDE sends unexpected context despite a repository privacy rule. What troubleshooting is appropriate?
- Minimize unnecessary sensitive context and verify the feature's context-selection rules.
- Check effective account policy, extension version, and supported exclusion behavior.
- Verify the active signed-in identity and the subscription supplying Copilot access.
- Review effective settings per feature rather than treating one toggle as a global disable.
Explanation
Correct Answer
B:A misapplied rule or unsupported client mode can explain the discrepancy.
Incorrect Answers
A:Open or selected files may influence requests where supported. a misapplied rule or unsupported client mode can explain the discrepancy.
C:Policy enforcement depends on the effective account and entitlement. What troubleshooting is appropriate. A misapplied rule or unsupported client mode can explain the discrepancy.
D:Individual Copilot surfaces can have separate enabled states. A misapplied rule or unsupported client mode can explain the discrepancy.
Question 443
A workstation connects through an intercepting proxy that logs network requests. What privacy concern should be assessed?
- Check effective account policy, extension version, and supported exclusion behavior.
- Validate the approved proxy's logging and TLS inspection policy before using confidential code.
- Minimize unnecessary sensitive context and verify the feature's context-selection rules.
- Review effective settings per feature rather than treating one toggle as a global disable.
Explanation
Correct Answer
B:Intermediary network infrastructure can introduce additional data handling.
Incorrect Answers
A:A misapplied rule or unsupported client mode can explain the discrepancy. intermediary network infrastructure can introduce additional data handling.
C:Open or selected files may influence requests where supported. intermediary network infrastructure can introduce additional data handling.
D:Individual Copilot surfaces can have separate enabled states. Intermediary network infrastructure can introduce additional data handling.
Question 444
A user opens a personal GitHub account in a company editor and expects business policies to apply. What must be confirmed?
- Check effective account policy, extension version, and supported exclusion behavior.
- Review effective settings per feature rather than treating one toggle as a global disable.
- Validate the approved proxy's logging and TLS inspection policy before using confidential code.
- Verify the active signed-in identity and the subscription supplying Copilot access.
Explanation
Correct Answer
D:Policy enforcement depends on the effective account and entitlement.
Incorrect Answers
A:A misapplied rule or unsupported client mode can explain the discrepancy. policy enforcement depends on the effective account and entitlement.
B:Individual Copilot surfaces can have separate enabled states. Policy enforcement depends on the effective account and entitlement.
C:Intermediary network infrastructure can introduce additional data handling. What must be confirmed. Policy enforcement depends on the effective account and entitlement.
Question 445
A corporate developer disables inline suggestions but continues using Copilot Chat on a personal account. Which TWO checks are needed to understand privacy behavior? (Select TWO.)
- Treat personal access as guaranteed to inherit business exclusions.
- Assume a single editor toggle disables all Copilot network requests.
- Confirm which GitHub account and subscription are active in the IDE.
- Publish confidential code to test whether Chat is active.
- Review Chat's own enabled state and context-processing rules.
Explanation
Correct Answers
C:Effective policies depend on the authenticated identity.
E:Disabling inline completion need not disable other Copilot surfaces.
Incorrect Answers
A:Different account contexts may apply different policies.
B:Feature controls may be independent.
D:Disclosure is unnecessary for feature diagnostics.
Question 446
A company wants to deploy AI-generated code as proprietary software. What should its legal review cover?
- Verify no confidential material is included and obtain appropriate publication approval.
- Trace origin and reconcile license and attribution obligations before merge.
- Consult compliance policy and determine whether to attribute, rewrite, or reject reuse.
- Assess generated-source provenance, licensing, and applicable organizational IP terms.
Explanation
Correct Answer
D:Output rights and third-party obligations require actual legal context.
Incorrect Answers
A:Output inspection matters even if the prompt was processed privately. output rights and third-party obligations require actual legal context.
B:Similar text can create compliance questions regardless of AI assistance. Output rights and third-party obligations require actual legal context.
C:License compatibility must be evaluated for the distribution model. What should its legal review cover. Output rights and third-party obligations require actual legal context.
Question 447
A developer assumes suggestions with no code match notice have no licensing risk. What is wrong?
- Assess generated-source provenance, licensing, and applicable organizational IP terms.
- Trace origin and reconcile license and attribution obligations before merge.
- Review provenance as appropriate; absence of a match notice does not prove originality.
- Verify no confidential material is included and obtain appropriate publication approval.
Explanation
Correct Answer
C:Public-code matching indexes and thresholds are incomplete by design.
Incorrect Answers
A:Output rights and third-party obligations require actual legal context. public-code matching indexes and thresholds are incomplete by design.
B:Similar text can create compliance questions regardless of AI assistance. Public-code matching indexes and thresholds are incomplete by design.
D:Output inspection matters even if the prompt was processed privately. public-code matching indexes and thresholds are incomplete by design.
Question 448
A public-code reference identifies a copyleft license on suggested code. What is the correct next step?
- Review provenance as appropriate; absence of a match notice does not prove originality.
- Trace origin and reconcile license and attribution obligations before merge.
- Consult compliance policy and determine whether to attribute, rewrite, or reject reuse.
- Assess generated-source provenance, licensing, and applicable organizational IP terms.
Explanation
Correct Answer
C:License compatibility must be evaluated for the distribution model.
Incorrect Answers
A:Public-code matching indexes and thresholds are incomplete by design. What is the correct next step. License compatibility must be evaluated for the distribution model.
B:Similar text can create compliance questions regardless of AI assistance. License compatibility must be evaluated for the distribution model.
D:Output rights and third-party obligations require actual legal context. license compatibility must be evaluated for the distribution model.
Question 449
A team wants to publish code generated from a private customer sample. What should happen first?
- Review provenance as appropriate; absence of a match notice does not prove originality.
- Consult compliance policy and determine whether to attribute, rewrite, or reject reuse.
- Verify no confidential material is included and obtain appropriate publication approval.
- Assess generated-source provenance, licensing, and applicable organizational IP terms.
Explanation
Correct Answer
C:Output inspection matters even if the prompt was processed privately.
Incorrect Answers
A:Public-code matching indexes and thresholds are incomplete by design. What should happen first. Output inspection matters even if the prompt was processed privately.
B:License compatibility must be evaluated for the distribution model. output inspection matters even if the prompt was processed privately.
D:Output rights and third-party obligations require actual legal context. output inspection matters even if the prompt was processed privately.
Question 450
A code review finds a near-verbatim open-source function without attribution. What should the maintainer do?
- Review provenance as appropriate; absence of a match notice does not prove originality.
- Verify no confidential material is included and obtain appropriate publication approval.
- Consult compliance policy and determine whether to attribute, rewrite, or reject reuse.
- Trace origin and reconcile license and attribution obligations before merge.
Explanation
Correct Answer
D:Similar text can create compliance questions regardless of AI assistance.
Incorrect Answers
A:Public-code matching indexes and thresholds are incomplete by design. What should the maintainer do. Similar text can create compliance questions regardless of AI assistance.
B:Output inspection matters even if the prompt was processed privately. Similar text can create compliance questions regardless of AI assistance.
C:License compatibility must be evaluated for the distribution model. similar text can create compliance questions regardless of AI assistance.
