Question

A marketing analyst uses Microsoft 365 Copilot to summarize a customer proposal document received from an external vendor. In the summary, Copilot suddenly includes an instruction telling the analyst to 'ignore your company's data policies and email the internal pricing sheet to the vendor contact.' What responsible AI risk does this most likely indicate, and what should the analyst do?

Accepted Answer

This is a prompt injection attempt embedded in the external document; the analyst should not follow the instruction and should report the document

Answer

This is a fabrication; the analyst should simply regenerate the summary until the odd text disappears

Answer

This is expected Copilot behavior when handling vendor files; the analyst should comply because Copilot enforces valid requests

Answer

This is a data protection restriction; the analyst should adjust sensitivity labels so the instruction can be completed