Microsoft AB-900 Online Practice Questions and Exam Preparation

Microsoft AB-900 Online Questions & Answers

• Question 11:

  Your organization needs a third-party SaaS application to authenticate by using Microsoft Entra ID.

  The application must have an identity object and permissions that administrators can manage.

  What should you configure?

  A. An app registration
  B. A sensitivity label policy
  C. A SharePoint site collection
  D. A Microsoft Purview retention label
  A. An app registration

  ---

  Explanation

  An app registration creates the Microsoft Entra application identity and configuration that a third-party SaaS application uses to authenticate and request permissions. Sensitivity labels, retention labels, and SharePoint site collections govern content or collaboration, not cloud application authentication.

• Question 12:

  HOTSPOT

  Your organization uses Microsoft Entra ID to protect access to Microsoft 365 and other cloud applications. The security team wants to enforce access rules based on conditions such as user identity, device state, location, risk level, and application being accessed.

  Select the answer that correctly completes the sentence.

  

  

  ---

  Conditional Access policies evaluate conditions such as user, device, location, risk, and application to decide whether access to cloud apps is allowed, blocked, or requires extra controls. They are configured in Microsoft Entra and are not limited to on-premises resources or Exchange mailboxes.

• Question 13:

  Your organization has a Microsoft 365 E5 subscription.

  You need to prevent users from sharing corporate financial data to external users.

  What should you use?

  A. role groups
  B. data loss prevention (DLP) policies
  C. insider risk management policies
  D. retention labels
  B. data loss prevention (DLP) policies

  ---

  Explanation

  Microsoft Purview Data Loss Prevention policies can detect sensitive information and prevent users from sharing corporate financial data externally. Role groups assign administrative permissions, insider risk policies detect risky behavior, and retention labels manage content lifecycle. The requirement is preventing sensitive data sharing.

• Question 14:

  HOTSPOT

  Your organization is reviewing Microsoft Purview capabilities for managing AI-related risks. The compliance team wants to understand whether Microsoft Purview DSPM for AI can provide visibility into AI usage, including ChatGPT activity and Microsoft 365 Copilot usage, and whether it can detect or control Copilot-related activity.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Yes; Yes; No

  Microsoft Purview DSPM for AI provides visibility into AI usage, including Microsoft 365 Copilot and certain third-party AI activity signals. It does not directly block users from using Microsoft Copilot. Blocking and access control require separate administrative or policy controls.

• Question 15:

  Your company uses Microsoft Purview data loss prevention (DLP) policies.

  A user named User1 shares sensitive information to an external user by using Microsoft Teams. You need to identify the sensitive content that was shared.

  What should you use in the Microsoft Purview portal?

  A. Diagnostics
  B. Data explorer
  C. Content explorer
  D. Activity explorer
  D. Activity explorer

  ---

  Explanation

  Activity explorer in Microsoft Purview reports user activities related to DLP and sensitive content handling, including sharing events in Microsoft Teams. Data explorer focuses on where sensitive data exists, while Content explorer inspects sensitive content. The requirement is identifying the sensitive content sharing activity by a user.

• Question 16:

  HOTSPOT

  Your organization uses Microsoft Entra ID to manage identity and access for Microsoft 365.

  You open the Microsoft Entra admin center and review the Identity Secure Score recommendations shown in the exhibit. The security team wants to prioritize the recommendation that will have the greatest impact on improving the organization's identity security posture.

  

  Use the drop-down menus to select the answer choice that completes the statement based on the information presented in the graphic.

  

  

  ---

  Requiring MFA for administrative roles is an identity security best practice that improves Identity Secure Score and reduces privileged access risk. Password expiration policies are less aligned with current identity security recommendations, while unrelated recommendations do not address privileged administrator authentication.

• Question 17:

  Your organization uses Microsoft 365. A compliance administrator needs to identify whether users are oversharing files from SharePoint sites and review access risks across the tenant.

  Which capability should the administrator use?

  A. A SharePoint data access governance report
  B. A Microsoft Entra app registration
  C. A Microsoft Defender XDR incident queue
  D. A Copilot pay-as-you-go billing policy
  A. A SharePoint data access governance report

  ---

  Explanation

  A SharePoint data access governance report is used to review oversharing and access risks for SharePoint content across the tenant. App registrations, Defender incident queues, and Copilot billing policies address identity, threat, or cost requirements. The requirement is SharePoint sharing risk visibility.

• Question 18:

  HOTSPOT

  Your organization wants a unified security solution that helps security teams correlate alerts, investigate incidents, respond to threats, and protect identities, endpoints, email, collaboration workloads, and cloud apps from modern attacks.

  Select the answer that correctly completes the sentence.

  

  

  ---

  Microsoft Defender XDR is a unified security operations platform that correlates alerts and supports detection, investigation, and response across identities, endpoints, email, and applications. Conditional Access controls access decisions, but it is not the cross-workload incident correlation and response suite.

• Question 19:

  Your organization has a Microsoft 365 subscription that contains Microsoft SharePoint sites and Microsoft Teams teams.

  You discover that the sites and the teams are shared to users outside your organization.

  You need to identify which sites and teams were shared to the external users.

  What should you use?

  A. the SharePoint admin center
  B. the Microsoft Teams admin center
  C. the Microsoft 365 admin center
  D. the Microsoft Defender portal
  A. the SharePoint admin center

  ---

  Explanation

  Data access governance reporting helps identify oversharing for SharePoint sites and Teams-connected content. It is designed to show access risks and sharing exposure. Other tools may investigate threats or classify content, but the requirement is to identify external sharing across collaboration resources.

• Question 20:

  HOTSPOT

  Your organization uses Microsoft Purview Communication Compliance to help detect policy violations and risky communications. The compliance team wants to understand which types of content can be inspected, how user identities are handled during investigations, and whether the solution automatically modifies monitored messages by adding disclaimers.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  No; Yes; Yes

  Communication Compliance focuses on communications such as messages and prompts, not offensive text inside SharePoint images. It can anonymize user identities during review and can detect policy violations in Microsoft 365 Copilot prompts. The requirement is understanding what content and investigation behaviors Communication Compliance supports.