Microsoft AB-900 Online Practice Questions and Exam Preparation

Microsoft AB-900 Online Questions & Answers

• Question 101:

  Which statement accurately describes authorization in Microsoft 365?

  A. a process to verify whether an identity is who or what they claim to be
  B. a process to require additional authentication methods before an identity can access resources
  C. a process to verify whether an identity is allowed to access a resource
  D. a process to validate an identity from an external system
  C. a process to verify whether an identity is allowed to access a resource

  ---

  Explanation

  Authorization determines what an authenticated identity is allowed to access or perform. Authentication verifies who or what the identity is, and MFA strengthens authentication rather than authorization. The requirement asks for the meaning of authorization in Microsoft 365, so the permission decision definition is correct.

• Question 102:

  HOTSPOT

  Your organization has a Microsoft 365 subscription.

  You need to use Microsoft Purview to meet the following requirements:

  1. Prevent users from sharing files that contain Personally Identifiable Information (PII).

  2. Use machine learning to train a model that detects sensitive content.

  Which Microsoft Purview solution should you use for each requirement? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  DLP prevents users from sharing files that contain sensitive information such as PII. Communication Compliance can use policies and machine learning classifiers to detect risky or inappropriate communications. Other Purview tools may classify or govern data, but they do not match these two requirements as directly.

• Question 103:

  A user cannot access a Microsoft 365 feature that is licensed through group-based licensing. The license is already assigned to a security group.

  What should the administrator verify first?

  A. Whether the user is a member of the licensed group
  B. Whether a Communication Compliance policy exists
  C. Whether the user has created a Copilot prompt
  D. Whether the user has an app registration
  A. Whether the user is a member of the licensed group

  ---

  Explanation

  With group-based licensing, a user receives the license only if the user is a member of the licensed group and the assignment can process successfully. Communication Compliance, prompt creation, and app registrations are unrelated to license assignment. The first verification step is group membership.

• Question 104:

  HOTSPOT

  Your organization plans to allow users to create and use Microsoft 365 Copilot agents. The IT department needs to understand the licensing and creation requirements for Copilot agents, including whether users can create web-grounded agents, use specialized agents, and build agents by using natural language prompts.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Yes; Yes; Yes

  Users with appropriate Microsoft 365 licensing can create web-grounded Copilot agents, Microsoft 365 Copilot licensing is required for premium agents such as Analyst, and agent creation can use natural language authoring experiences.

  The rule is to match agent capability to the required user license and creation experience.

• Question 105:

  Your organization has a Microsoft 365 subscription.

  You need to assign a license to a user.

  What should you use?

  A. the Microsoft Purview portal
  B. the Microsoft 365 admin center
  C. the Microsoft Teams admin center
  B. the Microsoft 365 admin center

  ---

  Explanation

  The Microsoft 365 admin center is used for assigning Microsoft 365 licenses to users. Microsoft Purview handles compliance, Defender handles security, and Teams admin center manages Teams settings. The requirement is a basic Microsoft 365 user licensing task, so the Microsoft 365 admin center is the appropriate tool.

• Question 106:

  HOTSPOT

  Your organization uses Microsoft Teams, Microsoft 365 Copilot, and Exchange Online. The compliance team is evaluating Microsoft Purview Communication Compliance to detect inappropriate or risky communications and wants to understand which scenarios are supported by this solution.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Yes; Yes; No

  Communication Compliance can detect inappropriate text in Teams messages and risky or offensive language in Microsoft 365 Copilot prompts. It is not the tool for retaining email for ten years; retention requirements belong to Microsoft Purview Data Lifecycle Management and retention policies.

• Question 107:

  A compliance team wants to prevent users from sharing credit card numbers in Microsoft Teams chats with external users.

  Which Microsoft Purview capability should the team configure?

  A. Data Loss Prevention policies
  B. Retention labels
  C. Copilot Analytics
  D. Identity Secure Score
  A. Data Loss Prevention policies

  ---

  Explanation

  Microsoft Purview Data Loss Prevention policies can detect sensitive information such as credit card numbers and help prevent improper sharing in Teams chats. Retention labels control content lifecycle, Copilot Analytics reports usage, and Identity Secure Score evaluates identity posture. The requirement is sensitive data sharing prevention.