Question 100
Two independently scoped GitHub Copilot requirements are being reviewed. Requirement A: A privacy team wants to compare Copilot feature data handling with a developer's assumptions. Requirement B: A team assumes an accepted suggestion remains linked to its provenance automatically. Choose TWO distinct actions to resolve both situations.
Explanation
Correct Answers
This action addresses requirement A: A privacy team wants to compare Copilot feature data handling with a developer's assumptions. GitHub Copilot plan, enterprise settings and the particular feature determine data-handling guarantees; do not infer universal retention or model-training rules from branding. Verify by observing: The data-flow record distinguishes inputs, usage policies, retention and external tools for the actual account plan and explicitly marks undocumented behaviors as unknown.
This action addresses requirement B: A team assumes an accepted suggestion remains linked to its provenance automatically. Public-code references support provenance review but do not replace it. Verify by observing: The code review contains sufficient provenance and licensing decision evidence.
Incorrect Answers
Copilot session, prompt and tool data can follow different documented retention rules; "all chats forever" is not a justified general architecture claim. The two requirements instead call for these controls: (A) Record the exact Copilot plan, product surface and governing enterprise data settings, then cite current official plan-specific data usage and retention documentation instead of a blanket training claim; (B) Review matching-code references and record necessary source and license information explicitly.
Effective prompt evaluation needs controlled conditions. The two requirements instead call for these controls: (A) Record the exact Copilot plan, product surface and governing enterprise data settings, then cite current official plan-specific data usage and retention documentation instead of a blanket training claim; (B) Review matching-code references and record necessary source and license information explicitly.
Model knowledge may be stale or confabulated. The two requirements instead call for these controls: (A) Record the exact Copilot plan, product surface and governing enterprise data settings, then cite current official plan-specific data usage and retention documentation instead of a blanket training claim; (B) Review matching-code references and record necessary source and license information explicitly.