Microsoft AB-900 Online Practice Questions and Exam Preparation

Microsoft AB-900 Online Questions & Answers

• Question 1:

  HOTSPOT

  Your organization plans to deploy Microsoft 365 Copilot across departments. The security team wants to confirm that Copilot respects existing Microsoft 365 access controls and that users only receive responses based on data they are already permitted to access. The organization also wants to extend Copilot by connecting approved third-party data sources.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Yes; Yes; No

  Microsoft 365 Copilot only returns organizational data that the individual user is permitted to access and relies on Microsoft 365 access controls. It does not bypass those controls because of prompt wording. The requirement is data protection through existing permissions and Graph-based grounding.

• Question 2:

  HOTSPOT

  Your organization has deployed Microsoft 365 Copilot to licensed users. Administrators need to monitor Copilot adoption and usage from the Microsoft 365 admin center. They want to understand what the Copilot usage report can show, including user counts, app-level usage, and whether submitted prompts are visible.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  No; Yes; Yes

  The Microsoft 365 Copilot usage report provides adoption and usage metrics such as assigned users and active users, but it does not expose the actual prompts submitted by users. Prompt content review belongs to compliance and investigation workflows, not standard usage reporting.

• Question 3:

  Your organization has a Microsoft 365 subscription.

  Which two tasks can you perform by using the Exchange admin center? (Choose two.)

  A. Assign a Microsoft Exchange license.
  B. Create a mail flow rule.
  C. Create a shared mailbox.
  D. Add a custom domain.
  B. Create a mail flow rule.
  C. Create a shared mailbox.

  ---

  Explanation

  The Exchange admin center is used for Exchange Online objects and mail flow administration, including mailboxes, distribution lists, and related Exchange settings. SharePoint sites, Teams policies, and Purview governance tasks belong to other admin experiences. The requirement is Exchange-specific administration, so the Exchange object tasks are the correct selections.

• Question 4:

  HOTSPOT

  Your organization uses Microsoft 365 Copilot Chat and work-grounded agents. You are reviewing the Copilot credits report in the Microsoft 365 admin center to understand how pay-as-you-go Copilot usage is calculated. You need to identify which users are included in the Credits used metric when they interact with work-grounded agents in Microsoft 365 Copilot Chat.

  Select the answer that correctly completes the sentence.

  

  

  ---

  The Credits used metric applies to pay-as-you-go metered usage. Microsoft states that this metric shows credits used from interactions by users in the organization who do not have a Microsoft 365 Copilot license and who interact with agents in Copilot Chat that trigger the Copilot Studio meter.

  Therefore, the report is focused on unlicensed Microsoft 365 Copilot users whose agent interactions are billed through Copilot credits. It is not based on whether users use Teams, whether they are external users, or whether they already have a Microsoft 365 Copilot license. Microsoft also confirms that if pay-as-you-go is configured and users without a Microsoft 365 Copilot license use metered agents in Copilot Chat, that data appears in the Copilot Credits report.

• Question 5:

  Your company plans to use Microsoft 365 Copilot.

  You need to provide a user with the ability to use Microsoft 365 Copilot, including the Researcher and Analyst agent.

  What should you use?

  A. the Microsoft 365 admin center
  B. the Microsoft Purview portal
  C. the Microsoft Entra admin center
  D. the Microsoft Defender portal
  A. the Microsoft 365 admin center

  ---

  Explanation

  A Microsoft 365 Copilot license provides access to Microsoft 365 Copilot capabilities, including experiences such as Researcher and Analyst when available. Basic Microsoft 365 licensing alone does not grant those Copilot experiences. The requirement is enabling a user to use Copilot and its agents.

• Question 6:

  HOTSPOT

  Your organization uses Microsoft 365 Copilot. The compliance team is concerned that users might include sensitive information in Copilot prompts. You need to identify a Microsoft Purview solution that can help detect Copilot prompts containing sensitive information and provide visibility into AI data security risks.

  Select the answer that correctly completes the sentence.

  

  

  ---

  Microsoft Purview DSPM for AI helps detect and assess AI-related data security risks, including sensitive information used in Microsoft 365 Copilot prompts. Data Lifecycle Management, Information Barriers, and Information Protection solve retention, separation, or labeling requirements, not AI prompt risk discovery.

• Question 7:

  An administrator must reduce standing privileged access for Microsoft 365 administrator roles and require eligible administrators to activate roles only when needed.

  What should the administrator use?

  A. Privileged Identity Management
  B. Communication Compliance
  C. Microsoft Defender XDR incidents
  D. SharePoint Advanced Management
  A. Privileged Identity Management

  ---

  Explanation

  Privileged Identity Management reduces standing administrative access by requiring eligible administrators to activate roles when needed. Communication Compliance detects risky messages, Defender XDR investigates threats, and SharePoint Advanced Management governs SharePoint. The requirement is just-in-time privileged role activation.

• Question 8:

  HOTSPOT

  Your legal department is conducting an internal investigation. They need to find all content related to a confidential project named Project Falcon in email messages exchanged between two specific users. The solution must support searching, preserving, and reviewing relevant Microsoft 365 content for investigation purposes.

  Select the answer that correctly completes the sentence.

  

  

  ---

  Microsoft Purview eDiscovery is used to search and collect content such as emails and files for investigations or legal matters. Audit reviews activity records, Data Catalog is not the search tool here, and Insider Risk Management detects risky behavior. The requirement is content search for a legal investigation.

• Question 9:

  A user named User1 creates a Microsoft 365 Copilot agent named Agent1 and shares the agent to a user named User2.

  What occurs if an admin blocks Agent1?

  A. Agent1 is accessible to User1 and User2 until the users manually uninstall Agent. No other users can install Agent1.
  B. Agent1 is accessible to User1 and User2, and no other users can install Agent1.
  C. Agent1 is removed from User2, and User1 can continue to use Agent1.
  D. Agent1is removed from User1 and User2, and no users can install Agent1.
  D. Agent1is removed from User1 and User2, and no users can install Agent1.

  ---

  Explanation

  When an administrator blocks a shared Copilot agent, users are prevented from using that agent even if it was previously shared. Blocking controls availability at the organization level. Other outcomes, such as deleting user data or disabling all Copilot features, would be broader than the stated agent-specific action.

• Question 10:

  HOTSPOT

  Your organization uses Microsoft 365 Copilot together with Microsoft Purview and existing Microsoft 365 permission controls. The compliance team needs to understand how Copilot handles sensitivity labels, data loss prevention policies, and user permissions when generating responses from organizational content.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Yes; No; Yes

  Microsoft 365 Copilot honors Microsoft Purview sensitivity labels and existing Microsoft 365 permissions. It does not ignore DLP and protection controls that apply to the content and user context. The requirement is understanding that Copilot works within Microsoft 365 governance boundaries.