Microsoft AB-900 Online Practice Questions and Exam Preparation

Microsoft AB-900 Online Questions & Answers

• Question 61:

  Your company is piloting the use of Microsoft 365 Copilot and has purchased 100 Microsoft 365 Copilot licenses.

  You need to view detailed reports about Copilot usage in Microsoft Teams, such as meeting hours summarized by Copilot and meeting actions taken by using Copilot.

  What should you use?

  A. the Microsoft 365 Copilot readiness report in the Microsoft 365 admin center
  B. the Microsoft 365 Copilot usage report in the Microsoft 365 admin center
  C. the Microsoft 365 Copilot dashboard in Microsoft Viva Insights
  D. the Microsoft 365 Apps usage report in the Microsoft 365 admin center
  C. the Microsoft 365 Copilot dashboard in Microsoft Viva Insights

  ---

  Explanation

  Copilot Analytics and the Microsoft 365 admin center provide reporting about Copilot usage and adoption, including workload-specific usage such as Teams activity. Purview and Entra focus on compliance and identity, while Defender focuses on threats. The requirement is detailed Copilot usage reporting.

• Question 62:

  HOTSPOT

  Your organization has a Microsoft 365 subscription that contains a Microsoft SharePoint site named Site1.

  You need to identify any changes made by a site administrator to the site settings of Site1.

  Which report should you use in the SharePoint admin center? To answer, select the appropriate report in the answer area.

  

  

  ---

  SharePoint change history helps identify changes made to site settings by site administrators. Agent insights, app insights, migration, and site policy comparison serve other administrative purposes. The requirement is to review changes made to the settings of a specific SharePoint site.

• Question 63:

  Your organization has a Microsoft 365 subscription.

  You create a security group named Group1 and assign a Microsoft 365 E3 license to the group.

  You discover that a user named User1 does NOT have access to the Microsoft 365 E3 features.

  You need to ensure that User1 can access all the Microsoft 365 E3 features.

  Which two actions can you perform? (Choose two.)

  A. Add User1 to Group1.
  B. Assign a Conditional Access policy to Group1.
  C. Assign a Conditional Access policy to User1.
  D. Assign a license to User1.
  A. Add User1 to Group1.
  D. Assign a license to User1.

  ---

  Explanation

  A user can receive Microsoft 365 features either by being added to the licensed group or by receiving the license directly. Conditional Access policies control access conditions but do not assign product licenses. The requirement is feature entitlement, so group membership or direct license assignment are the relevant actions.

• Question 64:

  HOTSPOT

  Your organization uses Microsoft Entra Privileged Identity Management to manage privileged access. An administrator needs access to a user account, but the administrator does not currently have any eligible or active role assignments.

  You need to identify the first action the administrator must take before accessing the user account through a privileged role.

  Select the answer that correctly completes the sentence.

  

  

  ---

  In Microsoft Entra Privileged Identity Management, eligible administrators must activate the role before they can perform privileged actions such as creating a user account. Installing the Authenticator app or requesting a password reset is not the same as activating an eligible role assignment.

• Question 65:

  A Microsoft 365 administrator assigns a Microsoft 365 license to a security group. A new user does not have access to the licensed features.

  What should the administrator do to grant the user access through the existing group-based assignment?

  A. Add the user to the licensed group
  B. Create a Microsoft Purview DLP policy
  C. Create an app registration for the user
  D. Enable Privileged Identity Management for the user
  A. Add the user to the licensed group

  ---

  Explanation

  When a license is assigned to a group, the user must be a member of that group to receive the service entitlement. DLP policies, app registrations, and PIM activation do not apply the existing license assignment. The requirement is to grant access through group-based licensing.

• Question 66:

  HOTSPOT

  Your organization has a Microsoft 365 subscription.

  You need to use Microsoft Purview to meet the following requirements:

  1. Discover and classify sensitive data across multiple platforms.

  2. Block users from sharing intellectual property with external users.

  Which Microsoft Purview solution should you use for each requirement? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  Information Protection discovers, classifies, and labels sensitive data across Microsoft 365. Data Loss Prevention blocks or warns about sharing sensitive information externally. Communication Compliance and Insider Risk Management address communications and user behavior rather than broad classification and sharing prevention.

• Question 67:

  Your organization has a Microsoft 365 E5 subscription. You create a Microsoft Purview sensitivity label named Label1.

  You need to ensure that users can apply Label1 to files in Microsoft 365.

  What should you use?

  A. a sensitivity label policy
  B. a trainable classifier
  C. a retention label policy
  D. an auto-labeling policy
  A. a sensitivity label policy

  ---

  Explanation

  A sensitivity label policy publishes sensitivity labels to users and groups so the labels are available in Microsoft 365 apps. Creating the label alone is not enough for user application. Retention labels, trainable classifiers, and auto-labeling policies solve related but different governance requirements.

• Question 68:

  HOTSPOT

  Your company is adopting AI-based solutions in Microsoft cloud services. The governance team wants to ensure that AI systems remain subject to human oversight and that people remain responsible for decisions, controls, and outcomes when AI is used.

  Select the answer that correctly completes the sentence.

  

  

  ---

  The responsible AI principle of accountability requires people and organizations to remain responsible for AI systems and decisions. Privacy and security, reliability and safety, transparency, and inclusiveness are also important principles, but the scenario specifically asks about human oversight and responsibility.

• Question 69:

  An organization wants to let users access an approved custom agent while preventing unapproved agents from being broadly available.

  Which administrative task is most relevant?

  A. Configure user access and approval for agents
  B. Create a retention label for every prompt
  C. Disable Microsoft Entra single sign-on
  D. Create an Exchange mailbox for the agent
  A. Configure user access and approval for agents

  ---

  Explanation

  Agent administration includes configuring who can access agents and using the approval process so only approved agents become broadly available. Retention labels, disabling SSO, or creating Exchange mailboxes do not control custom agent availability. The requirement is approved agent access management.

• Question 70:

  HOTSPOT

  Your company wants to reduce the risk of standing administrative privileges in Microsoft Entra ID. Administrators should not have permanent elevated access. Instead, they should request or activate privileged roles only when needed and only for a limited period of time.

  Select the answer that correctly completes the sentence.

  

  

  ---

  Microsoft Entra Privileged Identity Management provides just-in-time, time-bound activation for privileged roles so administrators do not keep permanent elevated access. The other choices describe identity lifecycle or application management areas, but they do not address the requirement to reduce standing administrative privilege.