You plan to enable data loss prevention for your Cognitive Services in Azure. This control will prevent customer’s data loss and will meet your organizational objective. Assuming that you already have an Azure subscription and provisioned the Cognitive Services resources, which actions would you perform to configure data loss prevention. (select two answer choices)

Answer options:

A.Enforce TLS 1.2 for the Cognitive Services endpoints
B.Enable Customer Lockbox for Microsoft Azure
C.Set property restrictOutboundNetworkAccess value to true
D.Maintain list of approved urls to the allowedFqdnList property

Correct Answers: C and D
Option A is incorrect because enforcing TLS 1.2 will enhance the transport layer security. However, it does not restrict the access to outbound traffic for the unapproved urls.
Option B is incorrect because Customer lockbox is used by costumes to allow or reject access to their resources especially by the technical consultants from Microsoft.
Option C is correct because the first step in enabling the data loss prevention for your Cognitive Services is to set the value of property restrictOutboundNetworkAccessto true.
Option D is correct because the second step in enabling the data loss prevention for your Cognitive Services is to maintain the approved urls to the allowedFqdnList property. These two steps will ensure that customer data loss is prevented.
Reference:
To learn more about setting data loss prevention while creating cognitive services resources , use the link given below: 

https://docs.microsoft.com/en-us/azure/cognitive-services/cognitive-services-data-loss-prevention?tabs=azure-cli