Microsoft AB-900 Online Practice Questions and Exam Preparation

Microsoft AB-900 Online Questions & Answers

• Question 71:

  Your company is evaluating Microsoft 365 Copilot licensing.

  In which scenario should you use pay-as-you-go billing?

  A. to provide users with access to the AI assistant in Copilot in Word
  B. to summarize the actions in Microsoft Teams meetings
  C. to generate images in premium chats
  D. to make a custom agent available to unlicensed users
  D. to make a custom agent available to unlicensed users

  ---

  Explanation

  Pay-as-you-go billing is appropriate for metered Copilot experiences that do not require assigning a full Microsoft 365 Copilot user license for the scenario. Full Copilot in Word or other licensed productivity experiences require proper licensing. The requirement asks where consumption billing fits rather than standard user licensing.

• Question 72:

  HOTSPOT

  Your organization uses Microsoft 365 Copilot. The business team wants to understand which Microsoft 365 service provides signals such as collaboration history, document relevance, and communication frequency that can influence Microsoft 365 Copilot responses.

  Select the answer that correctly completes the sentence.

  

  

  ---

  Microsoft Graph provides the signals and data access layer that Microsoft 365 Copilot uses for grounding responses, including collaboration history, document relevance, and communication frequency. Copilot Studio, Purview, and Viva Insights serve different purposes and do not provide the core Graph grounding service.

• Question 73:

  Your company has a Microsoft SharePoint site named Site1. Site1 contains all the policies of the company's HR department. The policies are saved as Microsoft Word documents.

  All users have read access to Site1.

  The HR department manager reports that user requests about the policies are NOT being addressed in a timely manner, especially around major holidays.

  You need to recommend a solution to enable the users to find the HR department policies.

  The solution must provide the users with a list of common queries and ensure that responses are grounded only in Site1.

  What should you include in the recommendation?

  A. the personal assistant in Copilot in Word
  B. a custom Microsoft 365 Copilot agent
  C. the Researcher agent in Microsoft 365 Copilot
  D. a Microsoft 365 Copilot notebook
  B. a custom Microsoft 365 Copilot agent

  ---

  Explanation

  Restricted SharePoint Search can limit which SharePoint sites are available for Microsoft 365 Copilot grounding while users retain direct access to files they are permitted to open. Other controls such as retention or DLP do not specifically narrow Copilot search scope for approved policy content.

• Question 74:

  HOTSPOT

  Your organization uses Microsoft Purview Information Protection to classify and protect sensitive content. Administrators want to know which Microsoft 365 resources can have sensitivity labels applied to them for governance, protection, and access control purposes.

  Select the answer that correctly completes the sentence.

  

  

  ---

  Sensitivity labels can be applied to Microsoft 365 containers such as SharePoint sites and to supported content such as files and email. Azure Blob Storage and Copilot conversations are not the container choice in this question. The requirement asks which listed resource supports sensitivity labels.

• Question 75:

  What can you use to block a user account automatically when a risky sigh-in is detected?

  A. Microsoft Defender for Identity
  B. Microsoft Entra ID Protection
  C. Microsoft Defender for Office 365
  D. Microsoft Entra Privileged Identity Management (PIM)
  B. Microsoft Entra ID Protection

  ---

  Explanation

  Microsoft Entra ID Protection can detect risky sign-ins and apply automated controls such as blocking access or requiring remediation. Defender for Identity monitors identity threats in Active Directory, but risky cloud sign-in response belongs to Entra ID Protection. The requirement specifically describes automatic response to risky sign-in activity.

• Question 76:

  HOTSPOT

  Your organization is evaluating Microsoft 365 Copilot Chat, Microsoft 365 Copilot licenses, and Copilot agents. Administrators need to understand which Copilot experiences require a Microsoft 365 Copilot license and which experiences can be used without one, especially for web-based reasoning, specialized agents, and adding agents to the Copilot app.

  For each of the following statements, select Yes if the statement is true. Otherwise, select No.

  NOTE: Each correct selection is worth one point.

  

  

  ---

  No; Yes; No

  Microsoft 365 Copilot Chat over web data can be available without the full Microsoft 365 Copilot license in certain scenarios, while premium agents such as Researcher require Microsoft 365 Copilot licensing. Adding an agent to Microsoft 365 does not automatically require every user to have that license.

• Question 77:

  Your organization has a Microsoft 365 subscription.

  You need to evaluate your organization's Identity Secure Score.

  Which two factors affect the score? (Choose two.)

  A. the SharePoint site permissions
  B. the number of global administrators
  C. passwords that are never expired
  D. the location of the users
  B. the number of global administrators
  C. passwords that are never expired

  ---

  Explanation

  Identity Secure Score is affected by identity security posture, including excessive privileged roles and weak password practices. The number of global administrators and never-expiring passwords are identity risks that reduce posture.

  SharePoint permissions and user locations may matter elsewhere, but they are not the direct Identity Secure Score factors in this question.

• Question 78:

  HOTSPOT

  Your organization has a Microsoft 365 subscription.

  You discover that Microsoft SharePoint files are being shared to users outside your organization.

  You need to identify which files are being shared to the external users.

  Which report should you use in the SharePoint admin center? To answer, select the appropriate report in the answer area.

  

  

  ---

  To identify SharePoint content that is being shared externally, select:

  SharePoint admin center Reports Data access governance

  Microsoft documentation states that Data access governance reports are accessed from the SharePoint admin center by expanding Reports and selecting Data access governance. The available activity reports include Sharing links, which are used to monitor sharing activity and potential oversharing.

  Within Data access governance, the relevant report is the Sharing links activity report. In particular, the "Specific people" links shared externally report shows sites where links were created for people outside the organization.

• Question 79:

  A compliance officer needs to review user activities related to sensitive content and investigate which users interacted with protected information.

  Which Microsoft Purview tool should the officer use?

  A. Activity explorer
  B. Microsoft 365 Copilot chat
  C. Teams policies
  D. Privileged Identity Management
  A. Activity explorer

  ---

  Explanation

  Activity explorer in Microsoft Purview helps compliance officers review user activity related to sensitive content and policies. Copilot chat is not an audit tool, Teams policies manage Teams behavior, and PIM manages privileged role activation. The requirement is Purview activity investigation.

• Question 80:

  HOTSPOT

  Your organization has a Microsoft 365 subscription that contains a Microsoft SharePoint site named Site1. The permissions for Site1 are configured as shown in the following exhibit.

  

  You create a new user named User1 in the subscription.

  Use the drop-down menus to select the answer choice that completes the statement based on the information presented in the graphic.

  

  

  ---

  The permissions configuration grants Everyone except external users Edit access through the Site members group, so User1 is treated as a site member for Site1. Site owners have full control, site visitors have read-only access, and prevented access would mean no effective permission.