Contoso is using Microsoft 365 Copilot pay-as-you-go for Copilot Chat and custom agents. They want to route Copilot consumption to different cost centers (Sales, HR, R&D) and make sure each department’s usage is billed to the correct Azure subscription and resource group. The cloud team also wants to be able to pause or delete a department’s pay-as-you-go setup without affecting other departments. Which configuration should the admin use to meet these requirements?

An admin wants to help a sales operations team reuse the same multi-step workflow in Copilot: pull data from specific internal systems, apply business rules, and generate a consistent summary for each new account review. They want something reusable and tailored, without rewriting prompts every time.Which built-in capability should they use?

Contoso’s security operations center has deployed Microsoft Defender for Endpoint, Microsoft Defender for Office 365, and Microsoft Defender for Identity. Analysts are overwhelmed by separate alerts from each product and want a single place where related alerts (for example, a phishing email, a compromised device, and risky sign-ins) are automatically grouped into one incident with a unified timeline and response actions.Which capability should the SOC rely on to automatically correlate these alerts into a single incident for investigation and response?

Fabrikam’s legal department maintains a “Legal-Matters” SharePoint site containing case files and regulatory opinions that Copilot can use as grounding content. To reduce oversharing, the SharePoint admin configures Restricted Site Access so that a single “Legal-Core” Microsoft 365 group is specified in the site’s access restriction policy. After enforcement, users who are not in Legal-Core can no longer open the site or see its documents surface in Copilot responses, while Legal-Core members continue to work normally.In SharePoint Advanced Management, this outcome is:

You’re the Microsoft 365 administrator for Contoso. The CIO has purchased a small batch of Microsoft 365 Copilot seats to pilot with the legal team. Legal users already have eligible Microsoft 365 E5 licenses and active Microsoft Entra ID accounts.You need to ensure that only named pilot users can start using Copilot in Word, Outlook, and Teams.Which action best reflects the correct way to enable Copilot for these users?