Protecting files shared in Teams depends on including SharePoint and OneDrive in the DLP scope is correct.

This is correct because files that are shared in Teams channels are stored in SharePoint and files that are shared in private or one to one chats are stored in OneDrive, so a DLP policy must include those locations to detect and protect files that are shared through Teams.

DLP can block sensitive data sent to guest accounts but cannot stop sharing with users in federated external tenants is incorrect because Teams DLP can be configured to detect and restrict sharing to external recipients and guests when the policy conditions are met, and Microsoft continuously expands controls for external and federated scenarios.

Teams DLP only governs messages in public channels and does not cover private one to one chats is incorrect because Teams DLP can cover channel messages and private chats when the appropriate Microsoft 365 locations and chat monitoring options are enabled, so private one to one chats are not categorically excluded.

DLP rules can only be targeted at individual user accounts and not at Microsoft 365 groups or security groups is incorrect because DLP policies can be scoped using various targeting options including groups and site locations, and they are not limited to individual user accounts.

Full AWS Practitioner Certification Question