A company deploys a chatbot that is embedded in a Power Pages website. The company has the following requirements for the chatbot: • Microsoft Entra ID users only must be able to use the chatbot when accessing sensitive data. • The chatbot must be accessible only from the Power Pages website. You need to recommend a solution that meets the requirements. Which two options should you recommend? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Enable Only for Teams authentication.
Configure a data loss prevention policy.
Set up a new channel for the chatbot. Source Reference Answer
Enable Manual authentication.
Enable web channel security. Source Reference Answer
Community Votes
CE
57%
DE
43%
57% of anonymous learners picked answer CE.
Votes are pick records left by other test-takers — they are not the verified answer.
Community Insight
The question tests knowledge of channel-specific security settings in Copilot Studio, specifically distinguishing between general authentication methods and web-channel embedding controls.
This page explains how to secure a chatbot embedded in Power Pages using Microsoft Copilot Studio. It identifies the correct configuration steps to restrict access to specific websites and enforce Entra ID authentication.
Many candidates select 'Manual authentication' (D) thinking it enables custom login flows, but this does not inherently enforce Microsoft Entra ID integration or website scoping as required by the prompt.
Community Discussion (7 comments)
Hamed64👍 3Selected: DE
Copilot To meet the company's requirements, you should recommend the following options: Enable web channel security (E): This ensures that the chatbot is accessible only from the Power Pages website, meeting the requirement of restricting access to the specific website. Enable Manual authentication (D): This allows you to configure the chatbot to authenticate users with Microsoft Entra ID, ensuring that only authorized users can access sensitive data.
33a7f9e👍 1
C & E are correct
5f14337👍 1Selected: CE
C & E are correct
jkaur👍 1
answers C and E.
Agnes202307👍 1Selected: CE
Set up a new channel for the chatbot (Option C): By setting up a new channel, you can control where the chatbot is accessible. This helps ensure that the chatbot is only accessible from the desired Power Pages website. Enable web channel security (Option E): Enabling web channel security allows you to secure the access to the chatbot, ensuring that only authorized users, such as Microsoft Entra ID users, can use the chatbot when accessing sensitive data. Incorrect: A. Enable Only for Teams authentication: This option is specific to Microsoft Teams. B. Configure a data loss prevention policy: This is typically focused on preventing the sharing of sensitive information, it may not directly address the access control for the chatbot. D. Enable Manual authentication: It is not specific enough for controlling access based on Microsoft Entra ID users and ensuring access only from the Power Pages website.
MrEz👍 2
a) is certainly wrong. c: assuming the web channel is not (yet) existing, the scenario outlined is not very precise.. E: Users can find the bot ID directly from within Microsoft Copilot Studio or by receiving it from someone. But, depending on the bot's capability and sensitivity that might not be desirable. With Direct Line-based security, you can enable access only to locations that you control by enabling secured access with Direct Line secrets or tokens. source: https://learn.microsoft.com/en-gb/microsoft-copilot-studio/configure-web-security
DaanEp👍 2Selected: CE
Options A, B, and D do not directly address the specified requirements: A. Enable Only for Teams authentication: This is more relevant for Microsoft Teams integration and doesn't ensure access only for Microsoft Entra ID users. B. Configure a data loss prevention policy: Data loss prevention policies are more related to preventing sensitive data leaks, but they don't directly address the requirement of restricting access based on user identity. D. Enable Manual authentication: Manual authentication does not guarantee that only Microsoft Entra ID users can access the chatbot, and it doesn't address the requirement of limiting access to the Power Pages website. Therefore, the correct answers are C and E.
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Log in to comment, report an error, or add a note about this question.
Expert Analysis
Why the Answer Is Correct
The requirements mandate two things: restricting usage to Microsoft Entra ID users and ensuring the bot is only accessible from the Power Pages website. Setting up a new channel for the chatbot (C) is the foundational step to isolate this specific deployment context from other channels (like Teams or Web Chat). Enabling web channel security (E) on that specific channel allows you to configure the 'Allowed domains' list, ensuring the bot can only be loaded from your Power Pages site. This combination directly addresses both constraints.
Why the Other Options Are Wrong
Option A (Enable Only for Teams authentication) restricts the bot to Teams, violating the requirement to use it on a website. Option B (Configure a DLP policy) protects data at rest/in transit but does not control who can access the bot interface or where it is embedded. Option D (Enable Manual authentication) refers to a legacy or generic authentication mode that does not automatically integrate with Microsoft Entra ID for seamless SSO or enforce domain restrictions without additional complex setup not implied here.
Community Comment Notes
The community split between C/E and D/E. As noted by user MrEz, manual authentication doesn't provide the necessary domain restriction capabilities inherent in web channel security. User Hamed64 correctly identified that web channel security ensures the bot is accessible only from the controlled website, while setting up the channel provides the isolation needed.