Microsoft GH-300 Practice Test 50
Question 490
An assistant generates code that bypasses logging controls. What should the reviewer preserve?
- Minimize sensitive content and use authorized secure sharing only if necessary.
- Keep mandated audit events and add tests ensuring they are emitted.
- Replace infrastructure secrets with generic placeholders and perform a disclosure review.
- Remove the tokens, rotate exposed credentials, and use redacted examples.
Explanation
Correct Answer
B:Privacy and security require controlled, auditable operations.
Incorrect Answers
A:Debugging convenience does not justify excessive personal-data disclosure. privacy and security require controlled, auditable operations.
C:Documentation artifacts can expose internal systems if copied without inspection. Privacy and security require controlled, auditable operations.
D:Sensitive output requires incident handling, not only text cleanup. What should the reviewer preserve. Privacy and security require controlled, auditable operations.
Question 491
A project asks whether an AI-written file can be released under a particular license. What should decide?
- Consult actual service terms and project governance rather than relying on generated assurances.
- Obtain the organization's legal and compliance review of sources and distribution terms.
- Confirm applicable notice and attribution obligations in the intended release.
- Check quotations and redistribution rights against source licenses and policy.
Explanation
Correct Answer
B:Legal permissions depend on facts beyond who typed the prompt.
Incorrect Answers
A:Warranty and responsibility terms cannot be invented by an assistant. legal permissions depend on facts beyond who typed the prompt.
C:Permissive licenses can still have conditions. legal permissions depend on facts beyond who typed the prompt.
D:AI transformation does not waive copyright restrictions. Legal permissions depend on facts beyond who typed the prompt.
Question 492
A code reference has an unknown license label. What is the safer decision?
- Check quotations and redistribution rights against source licenses and policy.
- Research provenance or replace the code rather than assume unrestricted use.
- Consult actual service terms and project governance rather than relying on generated assurances.
- Obtain the organization's legal and compliance review of sources and distribution terms.
Explanation
Correct Answer
B:Missing license metadata is uncertainty, not public-domain status.
Incorrect Answers
A:AI transformation does not waive copyright restrictions. Missing license metadata is uncertainty, not public-domain status.
C:Warranty and responsibility terms cannot be invented by an assistant. missing license metadata is uncertainty, not public-domain status.
D:Legal permissions depend on facts beyond who typed the prompt. What is the safer decision. Missing license metadata is uncertainty, not public-domain status.
Question 493
A generated function resembles an MIT-licensed snippet. What should be checked?
- Obtain the organization's legal and compliance review of sources and distribution terms.
- Research provenance or replace the code rather than assume unrestricted use.
- Confirm applicable notice and attribution obligations in the intended release.
- Consult actual service terms and project governance rather than relying on generated assurances.
Explanation
Correct Answer
C:Permissive licenses can still have conditions.
Incorrect Answers
A:Legal permissions depend on facts beyond who typed the prompt. What should be checked. Permissive licenses can still have conditions.
B:Missing license metadata is uncertainty, not public-domain status. permissive licenses can still have conditions.
D:Warranty and responsibility terms cannot be invented by an assistant. permissive licenses can still have conditions.
Question 494
A team wants to use generated documentation containing quotes from third-party manuals. What should it do?
- Research provenance or replace the code rather than assume unrestricted use.
- Check quotations and redistribution rights against source licenses and policy.
- Obtain the organization's legal and compliance review of sources and distribution terms.
- Confirm applicable notice and attribution obligations in the intended release.
Explanation
Correct Answer
B:AI transformation does not waive copyright restrictions.
Incorrect Answers
A:Missing license metadata is uncertainty, not public-domain status. aI transformation does not waive copyright restrictions.
C:Legal permissions depend on facts beyond who typed the prompt. What should it do. AI transformation does not waive copyright restrictions.
D:Permissive licenses can still have conditions. AI transformation does not waive copyright restrictions.
Question 495
A stakeholder claims AI content carries a blanket no-liability warranty. What should be verified?
- Check quotations and redistribution rights against source licenses and policy.
- Research provenance or replace the code rather than assume unrestricted use.
- Confirm applicable notice and attribution obligations in the intended release.
- Consult actual service terms and project governance rather than relying on generated assurances.
Explanation
Correct Answer
D:Warranty and responsibility terms cannot be invented by an assistant.
Incorrect Answers
A:AI transformation does not waive copyright restrictions. warranty and responsibility terms cannot be invented by an assistant.
B:Missing license metadata is uncertainty, not public-domain status. warranty and responsibility terms cannot be invented by an assistant.
C:Permissive licenses can still have conditions. Warranty and responsibility terms cannot be invented by an assistant.
Question 496
A developer requests bypassing a blocked Copilot feature for a deadline. What should the manager do?
- Document the effective scope and limitations for each supported client.
- Follow the formal policy exception process with an accountable approver.
- Treat the value as potentially exposed, revoke it, and inspect usage and disclosure paths.
- Amend the report to reflect documented feature-specific exclusions and external-tool limits.
Explanation
Correct Answer
B:Feature restrictions represent governance decisions, not optional prompts.
Incorrect Answers
A:A policy toggle has different consequences across surfaces. Feature restrictions represent governance decisions, not optional prompts.
C:Exposure risk requires security remediation even when the source was generated. feature restrictions represent governance decisions, not optional prompts.
D:Overstated guardrail coverage can create false confidence. What should the manager do. Feature restrictions represent governance decisions, not optional prompts.
Question 497
An organization discovers content exclusions were removed without authorization. What investigation should start?
- Treat the value as potentially exposed, revoke it, and inspect usage and disclosure paths.
- Amend the report to reflect documented feature-specific exclusions and external-tool limits.
- Follow the formal policy exception process with an accountable approver.
- Review audit events and restore the approved policy after evidence capture.
Explanation
Correct Answer
D:Administrative changes should be attributable before remediation.
Incorrect Answers
A:Exposure risk requires security remediation even when the source was generated. administrative changes should be attributable before remediation.
B:Overstated guardrail coverage can create false confidence. What investigation should start. Administrative changes should be attributable before remediation.
C:Feature restrictions represent governance decisions, not optional prompts. administrative changes should be attributable before remediation.
Question 498
A security team updates public-code matching controls. What should be communicated?
- Follow the formal policy exception process with an accountable approver.
- Review audit events and restore the approved policy after evidence capture.
- Document the effective scope and limitations for each supported client.
- Amend the report to reflect documented feature-specific exclusions and external-tool limits.
Explanation
Correct Answer
C:A policy toggle has different consequences across surfaces.
Incorrect Answers
A:Feature restrictions represent governance decisions, not optional prompts. a policy toggle has different consequences across surfaces.
B:Administrative changes should be attributable before remediation. A policy toggle has different consequences across surfaces.
D:Overstated guardrail coverage can create false confidence. What should be communicated. A policy toggle has different consequences across surfaces.
Question 499
A user sees Copilot output that may contain a private credential. What incident response is appropriate?
- Review audit events and restore the approved policy after evidence capture.
- Treat the value as potentially exposed, revoke it, and inspect usage and disclosure paths.
- Follow the formal policy exception process with an accountable approver.
- Document the effective scope and limitations for each supported client.
Explanation
Correct Answer
B:Exposure risk requires security remediation even when the source was generated.
Incorrect Answers
A:Administrative changes should be attributable before remediation. Exposure risk requires security remediation even when the source was generated.
C:Feature restrictions represent governance decisions, not optional prompts. exposure risk requires security remediation even when the source was generated.
D:A policy toggle has different consequences across surfaces. exposure risk requires security remediation even when the source was generated.
Question 500
A compliance audit finds that exclusion settings were removed, an AI-generated file contains a secret, and the rollout report overstates agent-mode protection. Which THREE corrections are justified? (Select THREE.)
- Update the rollout report with documented agent and MCP exclusion limitations.
- Claim the secret was safe because it appeared in AI output.
- Delete relevant audit logs to conceal the policy change.
- Rotate the secret and inspect how generated artifacts were shared.
- Preserve audit evidence and restore authorized exclusion policy.
- Treat a repository exclusion as universal enforcement over every external tool.
Explanation
Correct Answers
A:Accurate scope disclosures prevent false confidence in controls.
D:Credential incident response addresses remaining exposure.
E:Administrative changes must be traceable before repair.
Incorrect Answers
B:Generated text can still expose reusable credentials.
C:Evidence destruction undermines compliance and investigation.
F:Third-party and agent support differ from inline suggestions.