Exam AB-100 Topic 1 Question 60 Discussion

In this scenario, Microsoft Foundry agents and Azure OpenAI resources generate responses by using the Responses API. To ensure these agents adhere to data residency and movement regulations across the United States and Europe, Microsoft Purview should be included to provide the following governance and security controls:
Unified Data Discovery & Classification: Purview's discovery REST API allows orchestrator agents to identify relevant data assets (e.g., in Fabric or Databricks) across the organization's entire data landscape.
Sensitivity Label Enforcement: It ensures that AI-generated responses respect existing access controls by checking document label metadata at query time. This prevents oversharing of sensitive data and restricts users to authorized content.
Data Loss Prevention (DLP): By integrating Purview DLP policies, organizations can monitor, block, or warn when sensitive data is used in AI prompts or responses in real-time.
Data Residency Compliance: For strict European residency (e.g., GDPR), Azure OpenAI resources should be deployed using Data Zone (DZ) SKUs (such as in Sweden Central or Germany West Central), which contractually guarantee that both data storage and processing remain within the specified geography.
Embedded Governance: Admins can enable a native integration within Microsoft AI Foundry at the subscription level. This automatically sends prompt and response data to Purview for auditing and compliance without requiring additional developer code.
Reference:
https://www.georgeollis.com/consuming-a-microsoft-foundry-agent-programmatically