AB-900 practice questions

Question 1

Litware assigns Microsoft 365 E3 to the security group All-Staff on the Licenses page of the Microsoft 365 admin center. All-Staff contains 200 users and a nested security group, Contractors, that holds 30 users. The 30 contractors never receive E3. How can a License Administrator license them through group-based licensing?

Accepted Answer

Assign Microsoft 365 E3 to the Contractors group as well The Assign or unassign licenses to a group article states that group-based licensing doesn't support nested groups: when a licensed group contains another group, only users in the first-level group are assigned licenses. The Contractors members are outside the scope of the All-Staff assignment, so the fix is to assign E3 to Contractors itself. Its 30 users then become first-level members of a licensed group and get E3, as will anyone added to Contractors later.

Question 2

A user at Litware signs in to Microsoft 365 by plugging in a FIDO2 security key and touching its fingerprint sensor. She doesn't type a password at any point. Which two authentication factor types does this sign-in combine?

Accepted Answer

Something you have and something you are Learn's How it works: Microsoft Entra multifactor authentication page defines MFA as two or more of something you know, something you have and something you are, naming a hardware key as something you have and a fingerprint as something you are. The security key holds the private key and the fingerprint unlocks it, so this passwordless sign-in still counts as MFA; Learn's passkeys page says passkeys serve as MFA when combined with biometrics or a PIN.

Question 3

Fabrikam's CISO suspects employees keep company files in online storage services that IT never approved. She wants to upload traffic logs from the company's firewalls and proxies, see which SaaS services are in use and by how many users, and review a risk score for each service. Which product should she use?

Accepted Answer

Microsoft Defender for Cloud Apps Cloud Discovery in Defender for Cloud Apps analyzes traffic logs, uploaded manually from firewalls and proxies as a snapshot report or forwarded continuously, against a catalog of over 31,000 cloud apps. Each app is ranked and scored on more than 90 risk factors, giving visibility into shadow IT, the users behind it and its risk, per the Cloud app discovery overview. That covers each part of the CISO's request.

Question 4

In Fabrikam's Identity Secure Score, the recommendation to protect all users with MFA is worth up to 10.71 percent. An administrator enforces MFA for the 50 members of the IT department, out of 500 users in the tenant, and makes no other change. How does Identity Secure Score credit this change?

Accepted Answer

About 1.07 percent at the next daily recalculation, as a share of users protected Some recommendations score all or nothing, but this one is scored as a percentage of the total configuration. The What is Identity Secure Score FAQ uses this case: protecting all users with MFA is worth up to 10.71 percent, so protecting part of the user base earns that part of the maximum. Here 50 of 500 is 10 percent of 10.71, about 1.07 percent. The score is recalculated every 24 hours, so the credit shows after the next daily evaluation.

Question 5

Woodgrove Bank's users have Microsoft 365 E5 and use Microsoft Copilot Chat (formerly Microsoft 365 Copilot Chat) for web-grounded prompts at no additional charge. A director wants Copilot to reason across all the mail, meetings, chats and files she can access, grounded through Microsoft Graph, with priority access. What should the admin do?

Accepted Answer

Assign her a Microsoft Copilot add-on license, formerly Microsoft 365 Copilot The Compare Microsoft Copilot in Microsoft 365 E3, E5, and E7 article lists Microsoft Copilot as an add-on for E3 and E5 and as included only in E7. The Copilot Chat overview shows Copilot Chat without Graph API, Work IQ and semantic indexing grounding and without priority access. Its organizational grounding is limited to content users provide, supported in-app experiences such as Outlook, and agents that have access to organizational content. The licensed Microsoft Copilot experience reasons across the mail, meetings, chats and files a user can access and adds priority access, so the director needs the add-on license.

Question 6

Tailspin Toys licenses its store associates with Microsoft 365 F1. An associate notices that an Exchange mailbox exists for her account and asks to use it for customer email. The admin must stay within the license terms. What should the admin do?

Accepted Answer

Assign her Microsoft 365 F3, since F1 carries no rights to use that mailbox The Changing from a Microsoft 365 E plan to a Microsoft 365 F plan article explains that F1 includes the Exchange Kiosk plan only to enable the Teams calendar: a mailbox is provisioned, but F1 users aren't entitled to use it, and Microsoft recommends disabling Outlook on the web for them. F3 includes a 2 GB mailbox that users open in Outlook on the web, so assigning F3 gives her email within the license terms.

Question 7

Litware wants its Marketing staff to see their own logo and colors in the Microsoft 365 suite header, while everyone else keeps the organization's default theme. Marketing staff belong to a Microsoft 365 group, Marketing-Team, and to a mail-enabled security group, Marketing-Sec. What should a Global Administrator do?

Accepted Answer

In Custom themes, add a group theme and assign it to the Marketing-Team group The Customize the Microsoft 365 theme for your organization article places themes under Settings, then Org settings, then the Organization profile tab, then Custom themes. Besides the default theme that applies to everyone, a Global Administrator can create up to four group themes and assign each to up to five Microsoft 365 groups. Security groups and distribution groups can't be used, so the group theme goes to Marketing-Team and everyone else keeps the default.

Question 8

Tailspin Toys' security architect documents three controls. Conditional Access checks each sign-in's user, device health and location before granting access. Administrators activate their roles just in time, for a few hours at a time. The network is segmented so that a compromised device can't reach every workload. Which mapping of these controls to the Zero Trust principles is correct?

Accepted Answer

Conditional Access: verify explicitly; just-in-time roles: use least privilege access; segmentation: assume breach Learn's Zero Trust identity and device access article says its identity and device access policies, built with Conditional Access, address verify explicitly: authenticate and authorize every request based on all available data points. Use least privilege access limits users with just-in-time and just-enough access, which is what time-boxed role activation does. Assume breach means minimizing blast radius and segmenting access, so network segmentation belongs under it.

Question 9

Twelve days ago, a License Administrator at Adatum removed Microsoft 365 E3 from the wrong user. Her account still exists, but her mailbox no longer opens in Outlook. What should the admin do to bring back the mailbox with its existing mail?

Accepted Answer

Reassign Microsoft 365 E3 to her with the Exchange Online service plan on The Delete or restore user mailboxes in Exchange Online article says that when an Exchange Online license is removed, the mailbox data is held for 30 days, and adding the license back during that grace period restores access and makes the mailbox fully active again. At day 12, reassigning E3 with Exchange Online turned on brings back the mailbox and its mail. After 30 days, the data is deleted and can't be recovered unless retention holds it.

Question 10

A network engineer at Litware proposes skipping MFA and device checks for every sign-in that comes from the head office network, because that network sits behind the corporate firewall. The CISO rejects the proposal as contrary to Zero Trust. Which approach matches Zero Trust guidance for sign-ins from the head office?

Accepted Answer

Treat head office sign-ins as untrusted and check identity and device signals on each request Learn's Zero Trust overview says the model replaces trust in network boundaries by treating every access request as untrusted regardless of origin and deciding on real-time context. A request from the head office is still checked on identity and device signals; location can be one signal, but it never earns trust by itself. The other approaches all grant trust because of where a request comes from, which is the perimeter thinking Zero Trust replaces.

Question 11

Tailspin Toys' warehouse staff are standard users whose only MFA method is a text message code delivered by Microsoft. In September 2026, an admin set the temporary opt-out from automatic passkey enablement, and Tailspin changes nothing else. What happens the first time one of these users has to complete MFA after February 1, 2027?

Accepted Answer

The user must register a passkey during that sign-in before continuing Learn's article on passkeys by default and the retirement of Microsoft-provided SMS and voice authentication says Microsoft-provided SMS and voice delivery retires on February 1, 2027 for all users except Global Administrators and external users. After that date, an in-scope user whose only MFA method is SMS or voice gets a blocking prompt to register a passkey during sign-in. The temporary opt-out covered only the September 1, 2026 to February 1, 2027 changes, and there's no opt-out from enforcement.

Question 12

Tailspin Toys has Microsoft 365 Business Premium. Before turning on a Conditional Access policy that requires MFA for all users, the identity administrator wants a per-user list showing who is already capable of MFA, so the help desk can contact everyone who isn't before enforcement begins. Which tool in the Microsoft Entra admin center provides this list?

Accepted Answer

Authentication methods activity, on its Registration tab Authentication methods activity (Entra ID, then Authentication methods, then Activity) has a Registration tab that counts users capable of MFA, passwordless sign-in and self-service password reset, and its user registration details list marks each user MFA Capable or Not Capable. The report needs Microsoft Entra ID P1 or P2, and Business Premium includes P1. The data can lag by up to 36 hours, so pull the list a day or two before the policy is turned on.

Question 13

In the Microsoft Defender portal, a Contoso analyst opens one item that brings together related alerts from Defender for Endpoint, Defender for Office 365 and Defender for Identity, with a timeline of those alerts, the impacted users, devices and mailboxes, and a summary of the whole attack. What kind of object is she viewing?

Accepted Answer

An incident The Defender portal's two main signal types are alerts and incidents. An alert flags one malicious or suspicious event. An incident is a container that the correlation engine builds from related alerts, even across products, to tell the full attack story: timelines of alerts, involved users, devices and other resources, evidence, logs of automated investigation and response, and a textual summary. The Incidents and alerts page in Defender XDR draws this line.

Question 14

Contoso's on-premises Active Directory domain synchronizes to Microsoft Entra ID. The security team wants alerts for reconnaissance against Active Directory, Golden Ticket activity and attempts to move laterally toward domain administrator accounts. Which Defender product provides these detections?

Accepted Answer

Microsoft Defender for Identity Defender for Identity monitors identity signals from on-premises Active Directory, through sensors on identity infrastructure such as domain controllers, and from Microsoft Entra ID and other identity providers. Its detections follow the attack stages of reconnaissance, compromised credentials, lateral movement and domain dominance, which includes Golden Ticket activity, per the Defender for Identity overview. Its alerts then join correlated incidents in Defender XDR.

Question 15

Woodgrove Bank hires an external auditor to review configuration settings in the Microsoft 365 admin center, the Exchange admin center and the SharePoint admin center for two weeks. The auditor must be able to see the settings but must not be able to change any of them. Which Microsoft Entra role should the auditor be assigned?

Accepted Answer

Global Reader Learn's Microsoft Entra built-in roles reference describes Global Reader as the read-only counterpart to Global Administrator: it reads settings and administrative information across Microsoft 365 services but can't take management actions, and Learn recommends it for planning, audits and investigations. It works in the Microsoft 365, Exchange and SharePoint admin centers, so it covers every place the auditor needs to look.

Question 16

Tailspin Toys' service desk resets forgotten passwords for employees who hold no admin roles, and it does nothing else in Microsoft Entra ID. The security team wants the agents to have the least privileged built-in role for that task. Which Microsoft Entra role should the agents be assigned?

Accepted Answer

Password Administrator Learn's Least privileged roles by task page names Password Administrator as the least privileged role to reset the password of non-admins and lists User Administrator only as an additional role. Helpdesk Administrator and User Administrator can also reset these passwords but carry more, such as invalidating refresh tokens or creating and deleting users, so assigning either one grants more than the task needs.

Question 17

Adatum's endpoint admin needs one group that holds 300 company-owned Windows laptops, so that an Intune device configuration profile and an app can be assigned to the devices themselves rather than to the people who use them. Which type of group should the admin create?

Accepted Answer

A security group Security groups grant access to resources and can contain users or devices, and the Compare types of groups in Microsoft 365 article notes that a security group of devices can be used with mobile device management services such as Microsoft Intune. Its membership can be assigned, or dynamic from device attributes such as the operating system version, and devices in a dynamic device group need no Microsoft Entra ID P1 license.

Question 18

Fabrikam's Europe service desk must reset passwords for Europe employees only, none of whom hold admin roles. An admin created an administrative unit named Europe, added the security group Europe-Staff, which contains every Europe employee, and assigned the desk the Helpdesk Administrator role scoped to the unit. The desk staff have Microsoft Entra ID P1 licenses, yet they can't reset any Europe employee's password. What should the admin do?

Accepted Answer

Add the Europe employees' user accounts directly to the administrative unit Learn's Administrative units article explains that adding a group to an administrative unit brings the group into the unit's management scope but not the group's members. An admin scoped to the unit whose role covers groups can rename the group or change its membership, yet no scoped admin can reset the members' passwords until those users are added directly as members of the unit. Once they are, the scoped Helpdesk Administrator assignment covers their passwords and still reaches no one outside Europe.

Question 19

Fabrikam's legal director must fully manage the Legal communication site, including its site collection features, and must be able to open every item, even items whose permission inheritance was broken. She must not get access to the SharePoint admin center or to any other site. What should a SharePoint Administrator do?

Accepted Answer

Add her as a site admin of the Legal site on its Membership tab in Active sites Site admins, formerly site collection administrators, have the same Full Control as a site owner plus rights such as managing search, the recycle bin and site collection features, and they can reach any item in the site even where inheritance is broken, per the Admin center site permissions reference. The role covers only that site and doesn't give access to the SharePoint admin center, which matches the director's scope.

Question 20

On Contoso's Policies communication site, a person in the site's Members group deleted an entire document library by mistake. The site owner wants members to keep adding, editing and deleting documents and list items but no longer create or delete lists and libraries, with no other rights added. Which permission level should the owner give the Members group in place of Edit?

Accepted Answer

Contribute Learn's Permission levels in SharePoint article lists Edit, the Members group's default, as adding, editing and deleting lists as well as items, through the Manage Lists permission. Contribute keeps view, add, update and delete for list items and documents but leaves out Manage Lists, so members keep working on content but can no longer create or delete lists and libraries.

Question 21

In Tailspin Toys' 40-member Product team, five people need a channel for pricing discussions that the rest of the team can't see. Dana, a team member who isn't an owner, will create it, and one of the five is a guest who already belongs to the team. They don't want another team to manage. What should Dana create?

Accepted Answer

A private channel in the Product team Private channels are focused spaces for a subset of a team, visible only to their owners and members, as the Private channels in Microsoft Teams article describes. By default any team owner or team member can create one, and anyone who already belongs to the team, guests included, can be added. That fits Dana's role, the guest on the list and the wish to avoid managing another team.

Question 22

Contoso engineers must work in one Teams channel with eight engineers from Fabrikam, a partner that also uses Microsoft 365. Contoso doesn't want guest accounts created for them, and the Fabrikam engineers must not see the rest of Contoso's Engineering team. Both organizations have configured cross-tenant access settings in Microsoft Entra ID. What should an Engineering team owner create?

Accepted Answer

A shared channel, with the Fabrikam engineers added as external participants Learn's Shared channels in Microsoft Teams article explains that people outside the organization take part in a shared channel through Microsoft Entra B2B direct connect, without guest accounts, once both organizations configure cross-tenant access. People can be added to a shared channel without being added to the team, so the Fabrikam engineers reach that channel only and never join Contoso's Engineering team.

Question 23

Adatum's Global (Org-wide default) Teams policy allows private channel creation. An admin assigns the Contractors security group a custom Teams policy that blocks it, at rank 1, and later assigns the Project Leads security group a custom Teams policy that allows it, at rank 2. Ravi is a direct member of both groups and has no Teams policy assigned to him directly. Which policy decides whether Ravi can create private channels?

Accepted Answer

The Contractors policy, because rank 1 is the highest group assignment ranking For each policy type, a direct assignment wins; without one, a member of several groups inherits the policy from the group assignment with the highest ranking, where a smaller number ranks higher and 1 is highest; only with no direct or group assignment does the Global (Org-wide default) policy apply. That is the precedence in the Assign policies to users and groups article, so Ravi's effective policy is the rank 1 Contractors policy, which blocks private channels.

Question 24

Woodgrove Bank has 600 branch tellers, frontline workers who need one consistent set of Teams policies across several policy types. The admin wants to assign the whole set at once and later change a setting once so that every teller gets the update. Woodgrove has no Teams Premium licenses. What should the admin use in the Teams admin center?

Accepted Answer

The Frontline worker policy package, assigned to the tellers Learn's Managing policy packages in Teams article describes a policy package as a collection of predefined policies and settings for users with similar roles, and Teams includes a Frontline worker package. Packages cover policy types such as messaging, meeting, app setup and calling, and when a policy in a package changes, everyone assigned the package gets the update. Learn ties the Teams Premium requirement to custom packages, one license per targeted user, so the built-in package fits Woodgrove.

Question 25

Tailspin Toys has an internally built web app that already uses the company's on-premises AD FS for single sign-on. The team will move the app's federation to Microsoft Entra ID next year, but for now it wants the app to appear as a tile in users' My Apps portal without changing how the app authenticates. Which single sign-on option should the admin configure?

Accepted Answer

Linked SSO, pointing the My Apps tile at the app's current sign-in URL Linked SSO is the choice when an app is configured for SSO in another identity provider service: it sets the target location users reach from their portal, and the single sign-on deployment plan gives a custom web app that uses AD FS federation as its example. It doesn't sign users in with Microsoft Entra credentials, so the app keeps authenticating through AD FS, which suits a phased migration until full SSO moves to Entra ID.

Question 26

Fabrikam has Microsoft 365 E5 and assigned Microsoft 365 Copilot licenses to 200 employees a month ago. They use Copilot in Word, Outlook and Teams on Windows 11 devices. In Microsoft Purview Data Security Posture Management (DSPM), the reports and activity explorer show no Copilot interactions. In the Audit solution, a banner offers to start recording user and admin activity. What should the compliance admin do?

Accepted Answer

Turn on auditing in the Microsoft Purview portal The banner means auditing is off for the tenant. Learn's activity explorer events table for DSPM says the AI interaction event for Microsoft 365 Copilot and Copilot Chat requires auditing to be turned on, and turning on auditing is DSPM's initial setup task, required to see meaningful data. Auditing is on by default for enterprise tenants but can be turned off; turning it on can take up to 60 minutes, and DSPM needs about a day before data appears.

Question 27

Contoso has Microsoft Defender for Office 365 Plan 2. The security team worries that attackers will send email containing hidden instructions meant to hijack Copilot when users ask it to summarize their inbox. They want a protection that checks inbound messages for those instructions during mail flow, before delivery, with no extra configuration. Which protection fits?

Accepted Answer

Prompt injection protection, which marks detections as High confidence phishing Defender for Office 365 Plan 2 detects prompt injection content in inbound email as part of the same mail flow inspection that handles phishing and malware, so no extra configuration is needed. The Prompt injection protection page says detections get the High confidence phishing verdict with the detection technology value Prompt injection protection, which Threat Explorer and Advanced Hunting can filter on. This layer acts before delivery, ahead of Copilot's own runtime safeguards.

Question 28

Tailspin Toys just assigned its first Microsoft Copilot licenses, and its new SharePoint Administrator doesn't know where to start on governance. She wants one action that checks every site for inactivity, missing owners, broken permission inheritance, sharing with Everyone except external users and risky sharing links, then recommends fixes. What should she use?

Accepted Answer

The content management assessment under Advanced Management Learn's content management assessment article calls it the SAM hub for assessing content management: in the SharePoint admin center, the admin selects Advanced Management, then Start assessment. It runs the inactive sites (180 days), site ownership, broken inheritance, EEEU and sharing links reports across all sites, takes 2 to 72 hours depending on tenant size, recommends remediation, takes no action without the admin's consent, and can be rerun every 30 days.

Question 29

Woodgrove Bank's legal team is responding to a lawsuit. It must find a loan officer's Microsoft 365 Copilot prompts and responses from the past three months, make sure they can't be lost while the matter is open, and give copies to outside counsel. Which Microsoft Purview solution meets all three needs?

Accepted Answer

eDiscovery, with a case that covers the officer's mailbox Copilot prompts and responses are stored in the user's mailbox, so an eDiscovery case can find them (for example, with a condition that selects Copilot activity), preserve them with a hold, and export them for counsel. Learn's Microsoft 365 Copilot guidance says to create an eDiscovery case when you need to preserve, collect, review or export these interactions.

Question 30

Ravi holds the Microsoft Entra Compliance Administrator role at Fabrikam. He can open the Data explorer tab in the Microsoft Purview portal but sees no list of items. He needs to see each matching item and its location, but he must not be able to view the contents of the files. What should be added to his account?

Accepted Answer

Membership in the Data Explorer List viewer role group Data explorer keeps three grants apart. Entra roles such as Compliance Administrator and Global Administrator open the tab only. The Data Explorer List viewer role group (data classification list viewer role) shows each item and its location, while the Data Explorer Content viewer role group shows file contents and item names. The two groups aren't cumulative, so List viewer alone meets Ravi's need. Older Learn pages call these groups Content Explorer List Viewer and Content Explorer Content Viewer.

Question 31

Contoso uses Microsoft Purview Data Security Posture Management (DSPM). Pay-as-you-go billing is set up, and the one-click policies that extend insights for data discovery are created. Reports show Microsoft 365 Copilot interactions, but nothing for employees who paste customer data into Google Gemini in Chrome on their Windows 11 devices. What must the admin do to get that visibility?

Accepted Answer

Onboard the Windows 11 devices to Microsoft Purview and deploy the Microsoft Purview browser extension The DSPM setup tasks spell out the signal for third-party generative AI sites: devices must be onboarded to Microsoft Purview to show sensitive information shared with those sites, and the Microsoft Purview browser extension must be deployed to Windows users, which endpoint DLP also needs on Windows when people use Chrome. Copilot data already appears, so auditing and Copilot licensing are in place; the missing piece is the device and browser signal for Gemini in Chrome.

Question 32

Adatum has Microsoft 365 E3 and Microsoft 365 Copilot licenses but doesn't use Microsoft Purview Data Loss Prevention. The payroll team wants the files on its SharePoint site kept out of the tenant-level semantic index that Copilot uses. What should the admin do?

Accepted Answer

In the site settings, set Allow this site to appear in search results to No The semantic indexing page says organizations without a DLP solution can exclude a SharePoint site from the tenant-level index by setting Allow this site to appear in search results to No, under Search and offline availability in the site settings. The exclusion covers Microsoft Search and the semantic index together; there's no option to drop the site from only one, so payroll content also disappears from organization-wide search results.

Question 33

Adatum has Microsoft Copilot licenses assigned, and salary files from its HR site have started appearing in Copilot answers for employees outside HR. While HR owners review permissions this month, the SharePoint Administrator must keep the site out of organization-wide search and Copilot without changing anyone's access, and HR staff must still search within the site. Adatum never enabled Restricted SharePoint Search. What should the admin do?

Accepted Answer

Turn on Restricted Content Discovery on the HR site's Settings tab Learn's Restricted Content Discovery article describes a site-level setting that keeps a site's content out of organization-wide search results and Copilot responses while permissions stay the same: users still open content they can reach, and searches that start inside the site are unaffected. It is a temporary control for reviews, turned on with Restrict content from Microsoft Copilot on the site's Settings tab. Learn points to it in place of Restricted SharePoint Search, whose new enablement is blocked starting July 31, 2026.

Question 34

Contoso publishes a Copilot agent for its sales staff. The agent labels its answers with "AI-generated content may be incorrect" and opens each conversation with a short note on what it can and can't do. Which responsible AI principle do these design choices most directly support?

Accepted Answer

Transparency Microsoft's Responsible AI for agent design page defines transparency as making an AI system's capabilities and limitations clear, so users understand what the agent can do, how information is used and how outputs are generated. It names in-product disclosures, such as a label saying AI-generated content may be incorrect, as practical ways to implement transparency. Telling users up front what the agent can and can't do serves the same principle.

Question 35

Fabrikam has Microsoft Copilot licenses assigned. Its chief legal officer, a member of the Legal-Team security group, keeps case files in her OneDrive. The SharePoint Administrator must ensure that only Legal-Team members can open content in that one OneDrive, even people who already hold a sharing link, while every other employee keeps full use of their own OneDrive. What should the admin use?

Accepted Answer

Restricted access control on her OneDrive with the Legal-Team group Learn's article on restricting a user's OneDrive content says a site access restriction policy can limit one OneDrive to up to 10 Microsoft Entra security groups or Microsoft 365 groups; people outside those groups can't access the content even with earlier permissions or a sharing link. Site access restriction must be enabled for the organization first, and the owner must belong to one of the groups or loses access; the chief legal officer is in Legal-Team, so she keeps hers.

Question 36

Elena is a member of the Data Explorer List viewer role group at Litware. In Data explorer she sees items that match the U.S. Bank Account Number sensitive information type and their locations, but the item names are hidden and she can't open the files. An investigation now requires her to open those unencrypted documents from within Data explorer. What should she be granted?

Accepted Answer

Membership in the Data Explorer Content viewer role group The Data Explorer Content viewer role group (data classification content viewer role) lets members view the contents of each item, and the Data explorer page notes it's also required to see item names in list view, because names can contain sensitive data. Data explorer's role groups supersede permissions assigned locally on the items, so site permissions don't change what she can open there. Even with this role, preview and download are disabled for encrypted documents; these files open because they're unencrypted.

Question 37

Tailspin Toys has Microsoft 365 E5. It onboarded its Windows devices to Microsoft Purview, deployed the Microsoft Purview browser extension and, two weeks ago, created the one-click policy DSPM for AI - Detect when users visit AI sites. Employees visit AI sites daily. Lena, in the Microsoft Purview Compliance Administrator role group, sees AI interaction events but no AI website visit events in Data Security Posture Management (DSPM) activity explorer. What should the admin do?

Accepted Answer

Add Lena to the Insider Risk Management Analysts role group AI site visits are detected by an insider risk management policy, and DSPM's permissions page shows that every admin and view-only role, the Compliance Administrator role group and Global Administrator included, sees activity explorer events except the browse to URL (AI Visit) events from insider risk management. Those events need the Insider Risk Management Analysts or Investigators role group, so adding Lena to Analysts shows them.

Question 38

Litware's legal department must not receive Copilot or Copilot Chat responses grounded in web content, and legal users must not be able to turn web search back on. Every other department keeps web search. What should the Microsoft 365 admin configure?

Accepted Answer

The Allow web search in Copilot policy in Cloud Policy, scoped to legal users The Allow web search in Copilot policy, available only in Cloud Policy service for Microsoft 365, turns web search on or off for users or groups across both Copilot and Copilot Chat. When the policy disables web search, the Web content toggle is turned off and dimmed, so legal users can't turn it back on, while users outside the policy's scope keep web search. The web search privacy page documents this policy and its three settings.

Question 39

Fabrikam has Microsoft 365 E5 and Endpoint DLP on onboarded Windows 11 devices. A user prints a file that matches two DLP rules: one audits printing, and a stricter one blocks it. In activity explorer, filtering on the blocking rule shows the print event, but filtering on the audit rule shows nothing for that user. What explains this?

Accepted Answer

Endpoint events show only the most restrictive DLP rule they matched Learn's activity explorer article notes that for endpoint events only the most restrictive DLP rule appears, and that the filters you apply also work from that rule. The print matched both rules, so the event carries the blocking rule, and a filter on the audit rule finds nothing even though that rule matched too. Filter on the blocking rule, or on the user and activity, to see the event.

Question 40

Litware has Microsoft 365 E5. Legal asks who removed the Confidential sensitivity label from a contract in a SharePoint library about six weeks ago. In activity explorer, the compliance admin can't find any activity that old. What should the admin use to answer Legal?

Accepted Answer

A search of the audit log in Microsoft Purview Audit for the label removal Activity explorer reports on up to 30 days of data, so a six-week-old event is outside its window. Its records come from the unified audit log, which keeps them far longer: 180 days under Audit (Standard), and one year by default for SharePoint, Exchange and Entra ID activity by E5 users. An Audit search for the Removed sensitivity label from file activity shows who removed the label and when.

Question 41

The HR team at Litware wants harassing or threatening language in Teams chats and Exchange email detected after messages are sent, so that designated reviewers can examine each match and send a notice to the sender. Messages must not be blocked. Which Microsoft Purview solution should the compliance admin configure?

Accepted Answer

Communication Compliance Communication Compliance detects, captures and lets designated reviewers act on potentially inappropriate messages in Exchange email, Teams, Viva Engage, Copilot and third-party sources. Built-in classifiers for threats, harassment and profanity flag matches after a message is sent, and reviewers can resolve, tag, escalate or notify the user. It reviews conduct rather than blocking it, which fits a requirement that messages are never blocked, as the Learn about Communication Compliance page explains.

Question 42

Fabrikam has Microsoft 365 E5 and Microsoft 365 Copilot licenses, and it runs a Communication Compliance policy built from the Detect Microsoft Copilot interactions template. A user enters a prompt in Microsoft 365 Copilot, and both the prompt and Copilot's response match the policy's conditions. What will the policy's reviewer find?

Accepted Answer

Two items on the policy's Pending tab, one for the prompt and one for the response Learn's article on Communication Compliance for generative AI says a matching prompt or response appears as a policy match on the policy's Pending tab, with separate entries for prompts and responses; if only one of them matches, only that one appears. A Copilot response shows Copilot as the sender and the user as the recipient. Detecting Microsoft 365 Copilot interactions needs no pay-as-you-go billing.

Question 43

Tailspin Toys must stop employees from sending email that contains customer credit card numbers to recipients outside the organization. When a message is stopped, the sender must see a notice that explains why. Which Microsoft Purview capability should the compliance administrator configure?

Accepted Answer

A data loss prevention policy for Exchange email Data loss prevention (DLP) acts on what users do with sensitive items. A DLP policy for Exchange email can combine the built-in credit card number sensitive information type with a condition for content shared with people outside the organization, then block the message and show the sender a policy tip that explains why. The DLP overview lists both blocking the share and showing a policy tip among the protective actions a DLP policy can take.

Question 44

Woodgrove Bank has Microsoft 365 E5. A junior analyst must open the DLP Alerts dashboard in the Microsoft Purview portal, assign alerts, add comments and change alert status. Bank policy says the analyst must never see the matched sensitive content or content previews in those alerts. Which role group should the admin assign to the analyst?

Accepted Answer

Security Operator The DLP Alerts dashboard needs the Manage alerts role plus DLP Compliance Management or its view-only version, and Learn's DLP alerts article lists Security Operator among the role groups that can use it. Security Operator holds Manage Alerts and View-Only DLP Compliance Management but not Data classification content viewer, the role behind content preview and matched sensitive content. Learn suggests this split when someone needs alerts without the sensitive context.

Question 45

Woodgrove Bank has Microsoft 365 E5. Its DLP policy for customer account numbers flags many numbers that only look like account numbers. Woodgrove keeps each customer's account number, name and date of birth in a database table and wants matches only for values in that table, without uploading the values to Microsoft in clear text. What should the administrator create?

Accepted Answer

An exact data match sensitive information type built from the table Exact data match (EDM) classification creates a custom sensitive information type that matches exact values from your own table of sensitive data, which gives fewer false positives than a generic pattern. You hash the schema and the values with a salt before upload, so only hashed values reach the service. The EDM overview adds that the table can hold up to 100 million rows and can be refreshed daily.

Question 46

Adatum has Microsoft 365 E5, and its Windows 11 devices are onboarded to Microsoft Defender for Endpoint. Adatum wants to stop users from copying files that contain Social Security numbers to USB drives, while still letting users copy other files to USB drives. What should the administrator do?

Accepted Answer

Turn on device monitoring and create a DLP policy for Devices that blocks copy to USB Endpoint DLP extends DLP to onboarded Windows and macOS devices. The endpoint DLP article states that devices already onboarded to Defender for Endpoint appear in Purview automatically, so you only turn on device monitoring. A DLP policy for the Devices location with a Social Security number condition can then block the copy to USB removable device activity for matching files, while other files can still be copied. Endpoint DLP is included in Microsoft 365 E5.

Question 47

Contoso has Microsoft 365 E5. Its security operations team wants to investigate DLP alerts where Microsoft recommends doing that work: grouped into incidents with Microsoft Defender for Endpoint alerts and open to advanced hunting across both. Where should the team investigate and manage the DLP alerts?

Accepted Answer

The incident queue in the Microsoft Defender portal The DLP alerts article on Learn names the Microsoft Defender portal as the recommended place to investigate and manage DLP alerts, and the Microsoft Purview portal as the place to create and edit DLP policies. Under Incidents & alerts, then Incidents, Defender groups DLP alerts into incidents, correlates them with alerts from Defender for Endpoint and other solutions, and adds advanced hunting. Since early October 2026, DLP signals show there as alerts only after a built-in alert tuning rule is disabled.

Question 48

A paralegal at Fabrikam, a member of the eDiscovery Manager role group, built a search in an eDiscovery case. Before anything is exported, she wants to look at a representative handful of the actual items from each mailbox, see each item's subject, date and sender, and open a few to confirm they're relevant. What should she generate when she runs the query?

Accepted Answer

A sample of items from each location Run query offers two views. Statistics estimates hits, locations and trends; Sample returns a representative set of items, 1, 10 or 100 per location from up to 10,000 locations, listed by subject or title, date and sender or author, and selecting an item opens its source view. Sample results stay valid for 24 hours, while statistics expire after 14 days, so regenerate whichever view has aged out.

Question 49

A records manager at Contoso, a member of the eDiscovery Manager role group, must quickly find every email and document that mentions Project Atlas across all mailboxes and SharePoint sites, and preview a few of them. Legal hasn't opened an investigation, so she doesn't want to create a new case. Where in the Microsoft Purview portal should she create the search?

Accepted Answer

In eDiscovery, in the Content Search case Content search is no longer a separate tool. Learn's eDiscovery overview says all Content Search functionality now lives in a system-generated eDiscovery case, open by default to members of the eDiscovery Manager and Administrator role groups. She selects Content Search in eDiscovery, creates a search with a name that's unique in the organization, adds the mailboxes and sites as data sources and runs a keyword query, with no new case needed.

Question 50

Fabrikam has Microsoft 365 E3, with no E5 licenses or E5 add-ons. An eDiscovery manager's search in a case returns the emails that legal asked for, and legal wants the items in hand for its review. Which next step is available to Fabrikam with its current licenses?

Accepted Answer

Export the search results and download the packages Learn's eDiscovery feature table puts search, statistics and samples, holds and exporting search results in the standard eDiscovery column, while review sets, tagging, analytics and optical character recognition are premium features that need Office 365 E5, Microsoft 365 E5 or a related E5 add-on. Exporting needs a Microsoft 365 E3 or E5 license, so the manager exports and downloads the packages from the Process manager within 14 days.

Question 51

Legal at Adatum reports that an engineer may be leaking design files. The engineer is in scope of a Data leaks policy that uses a DLP policy as its triggering event, but there has been no trigger, so none of the engineer's activity has been scored. The insider risk team wants that recent activity scored now and shown on the User activity timeline. What should they do?

Accepted Answer

Use Start scoring activity for users to add the engineer to the policy temporarily Policies wait for a triggering event before they score a user. Start scoring activity for users, on the Policies page, adds users to policies for a set period and bypasses the triggering requirement. The solution then scores the user's activities for the previous 90 days and adds them to the User activity timeline; the user can take several hours to appear on the Users dashboard, and those 90 days of activity can take up to 24 hours to display.

Question 52

Adatum applies a retention policy to its Finance SharePoint site that retains items for seven years and then deletes them. Two months later, a user deletes a budget workbook from the site's document library. Where is a copy of the workbook kept so that compliance tools such as eDiscovery can still find it for the rest of the seven years?

Accepted Answer

In the site's Preservation Hold library, a hidden location for retained files When a user deletes an item that a retention policy covers in SharePoint or OneDrive, the original is copied to the site's Preservation Hold library, a hidden system location that compliance tools such as eDiscovery use to reach the content. The delete removes the workbook from the document library, but the copy stays in the Preservation Hold library until the retention period ends, as the SharePoint and OneDrive retention page explains. By contrast, Exchange keeps retained copies in Recoverable Items, and Teams and Copilot use the hidden SubstrateHolds folder.

Question 53

Adatum, which has Microsoft 365 E5, creates a team for each acquisition project. Every project team must be private, its owners must not be able to add guests, and its SharePoint site must not allow sharing with people outside Adatum. Adatum doesn't need the files inside these teams to carry a label. What should the administrator use?

Accepted Answer

A sensitivity label scoped to Groups & sites, applied to each team A sensitivity label with the Groups & sites scope protects the container itself. Its settings include privacy (public or private), external user access, which controls whether owners can add guests, and external sharing from the labeled SharePoint site, so applying it to each team enforces all three requirements. Learn notes that a container label doesn't label the items inside the container, which fits Adatum's plan. The scope becomes available after you enable sensitivity labels for containers.

Question 54

Fabrikam's finance team emails quarterly forecast files to outside partners. Each file must stay readable only by approved people and must carry visible Confidential text, even after a partner downloads it or forwards it to someone else. What should the administrator use?

Accepted Answer

A sensitivity label that applies encryption and a footer A sensitivity label from Microsoft Purview Information Protection is stored in the file's metadata, so it stays with the content wherever the file is saved or sent. The label can apply encryption that controls who can open the file and what they can do with it, plus content markings such as a footer. Because the protection travels with the file, it still applies after a partner downloads or forwards it, as the sensitivity labels overview describes.

Question 55

Contoso has 2,500 users, and 300 of them hold Microsoft 365 Copilot licenses. Pay-as-you-go billing isn't set up. Every user can add files to the marketing team's SharePoint site. The site owner asks who can create and use agents in SharePoint on that site. What should the admin tell her?

Accepted Answer

Only the 300 licensed users can create and use agents; the others can't use them Learn's Get started with agents in SharePoint page says agents in SharePoint need no activation. Creating one takes a Copilot license plus the ability to add files to the site, and using one takes a Copilot license or pay-as-you-go billing set up for the user. Its comparison table covers this tenant: licensed with no pay-as-you-go means licensed users can create and use agents, while unlicensed users can't create or use them.

Question 56

Adatum wants one administrator to approve, block and reassign agents in the Microsoft 365 admin center and to review Copilot Studio agents, agent flows and environments in the Power Platform admin center inventory. Under least privilege, that administrator must not see canvas apps or cloud flows in the inventory. Which Microsoft Entra role fits?

Accepted Answer

AI Administrator AI Administrator and Global Administrator are the roles that can install, approve and manage agents in the Microsoft 365 admin center, including assigning owners. Power Platform inventory access follows Microsoft Entra roles, and AI Administrator, like AI Reader, is scoped there to agents, agentic apps, agent flows, environments and environment groups. Canvas apps, model-driven apps and cloud flows sit outside that scope, which is what Adatum asks for.

Question 57

Contoso's security team wants users to stop installing agents and plugins from external publishers, including any that publishers release in the future. Agents built by Microsoft and agents built by Contoso must stay available to everyone. What should the AI Administrator do in the Microsoft 365 admin center?

Accepted Answer

Under Agents, then Settings, then Agent and plugin access, clear the external publishers option Agent and plugin access controls which types of agents and plugins users can view and install, with separate options for those built by Microsoft, by your organization and by external publishers. Learn notes that when you disable an option, agents and plugins of that type don't appear for users in the Agent Store. Because the control works by publisher type rather than agent by agent, clearing only the external publishers option also covers external agents released later, while the Microsoft and organization options stay on.

Question 58

Fabrikam's users have Microsoft 365 E3 and Copilot Chat but no Microsoft 365 Copilot licenses, and no pay-as-you-go billing is set up. Four agents are proposed for company-wide use. Which agent can these users use without the organization adding licenses or setting up metered billing?

Accepted Answer

An agent grounded only in its instructions and two public government websites Learn's Purchase and manage agents in Copilot Chat page says declarative agents grounded in instructions and public websites are included with Copilot Chat and available by default. For users without the license, agents that access shared tenant data, such as SharePoint or Copilot connector content, are billed by metered consumption, and those pay-as-you-go agents are turned off by default until billing is set up. Only the instructions and public web agent works as the tenant stands.

Question 59

The IT help desk at Contoso holds Microsoft 365 Copilot licenses and already uses Copilot in Teams and Outlook. The team wants an assistant that always follows its triage instructions, answers only from the IT knowledge base site in SharePoint, and can open a ticket in the ticketing system through that system's API. What should the team use?

Accepted Answer

An agent with the triage instructions, the knowledge base as knowledge, and a ticket action Learn's page comparing declarative and custom engine agents says Copilot's built-in capabilities often need added knowledge, data sources or applications for a specific use case, and agents fill that gap. A declarative agent configures Copilot with custom instructions, custom knowledge such as a SharePoint site, and custom actions that call an external system's API. Agents can retrieve and summarize information or take actions such as updating records, which the ticket step requires.

Question 60

Adatum selected Do not pin Copilot Chat in Microsoft 365 apps in the Microsoft 365 admin center to keep Copilot Chat away from users without Microsoft 365 Copilot licenses. Two weeks later, an audit shows unlicensed users still open Copilot Chat in Teams, in Outlook and on the web. What should the admin do?

Accepted Answer

Restrict the Copilot app to licensed users in Integrated apps and Teams app policies Learn's Manage Copilot Chat page says users can still reach Copilot Chat on the web when Do not pin is selected, and the pinning article adds that users can add it from their app store. Removing access means managing the Copilot app in Integrated apps, such as letting only a group of licensed users install it, and allowing Copilot Chat in Teams only for licensed users through app permission policies.

Question 61

An admin at Litware created a pay-as-you-go billing policy in the Microsoft 365 admin center, linked to an Azure subscription and resource group in the tenant and applied to all users. A week later, users without Microsoft 365 Copilot licenses still can't use a Copilot Chat agent that answers from ServiceNow content indexed by a Copilot connector. What must the admin do next?

Accepted Answer

Connect the billing policy to the Microsoft Copilot Chat service The Microsoft Copilot pay-as-you-go service overview describes billing in two steps: add a billing policy, then connect it to a Copilot service such as Microsoft Copilot Chat or SharePoint agents. Creating a policy only defines the Azure subscription and the users; it doesn't complete setup. Connecting the policy is what grants the covered users access to the metered agents, and pay-as-you-go stays disabled by default until then.

Question 62

An HR specialist at Contoso built a benefits agent in Agent Builder and shared it with the 15-person HR team. An admin also approved her org catalog submission, so other employees add the agent from the Agent Store under Built by your org. Today she edits the agent's instructions and selects Update, but she doesn't resubmit it. Who gets the new instructions?

Accepted Answer

The HR team she shared it with, while Agent Store users keep the last approved version for now Learn's page on submitting Agent Builder agents to the org catalog says the shared version and the Agent Store version are tracked as separate entries. Selecting Update changes the shared version that the HR team uses, while the Agent Store version doesn't change until the owner resubmits the agent and an admin approves the update. Until then, users who add the agent from the Agent Store continue to see the last approved version.

Question 63

An AI Administrator at Contoso is reviewing a pending request for a contract-review agent. The agent should appear in the Agent Store under Built by your org and be installable only by the Legal group, while every other agent stays available to all users as it is today. What should the administrator do?

Accepted Answer

Select Publish to store and choose the Legal group as the users who can install the agent Learn's agent requests page says Publish to store opens a publishing wizard: the admin selects the users or groups that can install the agent, optionally selects who gets it preinstalled, applies a policy template, reviews the requested permissions and grants admin consent if appropriate, and then selects Publish. Publishing makes the agent available for installation to the selected audience, so choosing the Legal group meets the goal without touching any tenant-wide setting.

Question 64

At Fabrikam, tenant-wide User access is at its default. An HR benefits agent in the agent registry is available only to the HR security group. An AI Administrator opens the agent's Users tab, sets the agent to be preinstalled for the entire organization, leaves the availability scope unchanged, and saves. What is the result?

Accepted Answer

The agent is installed for every user in the organization, including users outside the HR group Learn's agent details page treats availability (who can discover and install an agent) and installation (who has it preinstalled) as independent settings on the agent's Users tab. It states that if you install an agent to your entire organization, it installs automatically regardless of its availability scope, and that this behavior is by design: the agent is installed for the targeted users even if they weren't in the original availability audience. Everyone at Fabrikam gets the agent.

AB-900 practice questions, with full explanations

The AB-900 bookshelf

Work the 75 questions, one topic at a time

Identify the core features and objects of Microsoft 365 services (25 questions)

A user at Litware signs in to Microsoft 365 by plugging in a FIDO2 security key and touching its fingerprint sensor. She doesn't type a password at any point. Which two authentication factor types does this sign-in combine?

In Fabrikam's Identity Secure Score, the recommendation to protect all users with MFA is worth up to 10.71 percent. An administrator enforces MFA for the 50 members of the IT department, out of 500 users in the tenant, and makes no other change. How does Identity Secure Score credit this change?

Tailspin Toys licenses its store associates with Microsoft 365 F1. An associate notices that an Exchange mailbox exists for her account and asks to use it for customer email. The admin must stay within the license terms. What should the admin do?

Twelve days ago, a License Administrator at Adatum removed Microsoft 365 E3 from the wrong user. Her account still exists, but her mailbox no longer opens in Outlook. What should the admin do to bring back the mailbox with its existing mail?

Contoso's on-premises Active Directory domain synchronizes to Microsoft Entra ID. The security team wants alerts for reconnaissance against Active Directory, Golden Ticket activity and attempts to move laterally toward domain administrator accounts. Which Defender product provides these detections?

Tailspin Toys' service desk resets forgotten passwords for employees who hold no admin roles, and it does nothing else in Microsoft Entra ID. The security team wants the agents to have the least privileged built-in role for that task. Which Microsoft Entra role should the agents be assigned?

Adatum's endpoint admin needs one group that holds 300 company-owned Windows laptops, so that an Intune device configuration profile and an app can be assigned to the devices themselves rather than to the people who use them. Which type of group should the admin create?

Understand data protection and governance tasks for Microsoft 365 and Copilot (29 questions)

Adatum has Microsoft 365 E3 and Microsoft 365 Copilot licenses but doesn't use Microsoft Purview Data Loss Prevention. The payroll team wants the files on its SharePoint site kept out of the tenant-level semantic index that Copilot uses. What should the admin do?

Contoso publishes a Copilot agent for its sales staff. The agent labels its answers with "AI-generated content may be incorrect" and opens each conversation with a short note on what it can and can't do. Which responsible AI principle do these design choices most directly support?

Litware's legal department must not receive Copilot or Copilot Chat responses grounded in web content, and legal users must not be able to turn web search back on. Every other department keeps web search. What should the Microsoft 365 admin configure?

Litware has Microsoft 365 E5. Legal asks who removed the Confidential sensitivity label from a contract in a SharePoint library about six weeks ago. In activity explorer, the compliance admin can't find any activity that old. What should the admin use to answer Legal?

Tailspin Toys must stop employees from sending email that contains customer credit card numbers to recipients outside the organization. When a message is stopped, the sender must see a notice that explains why. Which Microsoft Purview capability should the compliance administrator configure?

Adatum has Microsoft 365 E5, and its Windows 11 devices are onboarded to Microsoft Defender for Endpoint. Adatum wants to stop users from copying files that contain Social Security numbers to USB drives, while still letting users copy other files to USB drives. What should the administrator do?

Fabrikam has Microsoft 365 E3, with no E5 licenses or E5 add-ons. An eDiscovery manager's search in a case returns the emails that legal asked for, and legal wants the items in hand for its review. Which next step is available to Fabrikam with its current licenses?

Fabrikam's finance team emails quarterly forecast files to outside partners. Each file must stay readable only by approved people and must carry visible Confidential text, even after a partner downloads it or forwards it to someone else. What should the administrator use?

Perform basic administrative tasks for Copilot and agents (21 questions)

Contoso has 2,500 users, and 300 of them hold Microsoft 365 Copilot licenses. Pay-as-you-go billing isn't set up. Every user can add files to the marketing team's SharePoint site. The site owner asks who can create and use agents in SharePoint on that site. What should the admin tell her?

Fabrikam's users have Microsoft 365 E3 and Copilot Chat but no Microsoft 365 Copilot licenses, and no pay-as-you-go billing is set up. Four agents are proposed for company-wide use. Which agent can these users use without the organization adding licenses or setting up metered billing?

Developers at Woodgrove Bank need an agent that runs on a language model and orchestration they choose. The agent must also start a review workflow on its own whenever a loan record changes, without waiting for a user to prompt it. Which kind of agent should they build?

Fabrikam's admin must find which Power Platform environments hold the most Copilot Studio agents and agent flows, filter those resources by owner to spot items owned by employees who are leaving, and download the entire list to a CSV file. Which tool fits?

Litware's security team flags a published Copilot Studio agent for a compliance issue. It wants the agent stopped in every channel while its maker keeps testing a fix in Copilot Studio, and it wants to restore access later with one action. What should an administrator do?

Last quarter, Woodgrove Bank's AI Administrator blocked a Microsoft-built agent for the whole organization. A loan officer now opens the agent in the Agent Store and selects Request. The administrator decides to let her install it. What must the administrator do in the Microsoft 365 admin center?

A maker at Tailspin Toys selects Submit for admin approval for a Copilot Studio agent so that it can be shown to everyone in the organization. Where does the AI Administrator review the agent's capabilities and data sources, and then publish it?

Other certification question sets