フリー問題

問題文

A Data Loss Prevention policy generates an alert. What is the appropriate first action for the administrator?

選択肢

1. Disable the policy so that no further alerts are generated, then investigate at a calmer moment once the immediate flow of notifications has stopped in detail.
2. Remove the Microsoft 365 Copilot license from the user.
3. Review the alert details to see which policy matched, what content was involved, and who performed the action, then decide whether it is a true match.
4. Delete the file that triggered the alert.