CertBlaze

Microsoft Exam Syllabus

AB-900 syllabus, skills measured, and exam topics

The AB-900 exam measures Identify the core features and objects of Microsoft 365 services, Understand data protection and governance tasks for Microsoft 365 and Copilot, and Perform basic administrative tasks for Copilot and agents. Use this page to review the current official syllabus, major domains, and source links before exam day.

Open the practice page

Skills measured by domain

Use the weighting table to decide where to spend the most study time.

Domain Weight
Identify the core features and objects of Microsoft 365 services 30–35%
Understand data protection and governance tasks for Microsoft 365 and Copilot 35–40%
Perform basic administrative tasks for Copilot and agents 25–30%

Detailed outline

Scan each section as a working study checklist instead of one long wall of text.

Identify the core features and objects of Microsoft 365 services (30–35%)

  • Explain how license types assigned to users and groups affect access to Microsoft 365 features
  • Explore the organization configurations by using the Microsoft 365 admin center (domain names and org settings)
  • Identify the appropriate objects to configure by using the Exchange admin center (mailboxes and distribution groups)
  • Identify the appropriate objects to configure by using the SharePoint admin center (sites, libraries, and folders)
  • Identify the appropriate roles and permissions for sites in SharePoint in Microsoft 365
  • Identify the appropriate objects to configure by using the Teams admin center (teams, channels, and policies)
  • Explain the core Zero Trust principles
  • Understand authorization
  • Understand authentication methods
  • Understand threat protection and intelligence
  • Understand features and capabilities of Microsoft Defender XDR
  • Understand features and capabilities of Microsoft Entra ID

Understand data protection and governance tasks for Microsoft 365 and Copilot (35–40%)

  • Understand features and capabilities of Microsoft Purview Information Protection, Microsoft Purview Data Loss Prevention (DLP), Microsoft Purview Insider Risk Management, Microsoft Purview Communication Compliance, Microsoft Purview Data Security Posture Management (DSPM) for AI, and Microsoft Purview Data Lifecycle Management
  • Identify the use cases for sensitivity labels in Microsoft Purview
  • Understand data classification in Microsoft Purview
  • Understand retention
  • Understand how Copilot accesses data
  • Understand how Microsoft Graph influences Copilot responses
  • Understand how Copilot uses permissions and other controls in Microsoft 365, Microsoft Purview, and Microsoft Defender to protect against risks
  • Understand responsible AI principles
  • Identify compliance risks and recommendations by using Microsoft Purview Compliance Manager
  • Identify sensitive information by using Microsoft Purview Data Explorer
  • Identify risks by using Insider Risk Management
  • Identify and respond to alerts generated by Microsoft Purview DLP

Perform basic administrative tasks for Copilot and agents (25–30%)

  • Compare the built-in capabilities of Copilot and agents
  • Compare Copilot monthly license model to pay-as-you-go, including SharePoint
  • Identify which Copilot features can be enabled or disabled
  • Identify use cases for Researcher
  • Identify use cases for Analyst
  • Identify use cases for custom agents
  • Assign Copilot licenses
  • Monitor and manage Copilot pay-as-you-go billing policies
  • Monitor Copilot usage and adoption, including Copilot Analytics and the Microsoft 365 admin center
  • Manage prompts, including saving, sharing, scheduling, and deleting
  • Identify how to configure user access to agents
  • Create an agent

Purpose of this document

  • This study guide should help you understand what to expect on the exam and includes a summary of the topics the exam might cover and links to additional resources. The information and materials in this document should help you focus your studies as you prepare for the exam.
  • Useful links: Description
  • Certification renewal: Microsoft associate, expert, and specialty certifications expire annually. You can renew by passing a free online assessment on Microsoft Learn.
  • Your Microsoft Learn profile: Connecting your certification profile to Microsoft Learn allows you to schedule and renew exams and share and print certificates.
  • Exam scoring and score reports: A score of 700 or greater is required to pass.
  • Exam sandbox: You can explore the exam environment by visiting our exam sandbox.
  • Request accommodations: If you use assistive devices, require extra time, or need modification to any part of the exam experience, you can request an accommodation.

Updates to the exam

  • Some exams are localized into other languages, and those are updated approximately eight weeks after the English version is updated. If the exam isn't available in your preferred language, you can request an additional 30 minutes to complete the exam.
  • The bullets that follow each of the skills measured are intended to illustrate how we are assessing that skill. Related topics may be covered in the exam.
  • Most questions cover features that are general availability (GA). The exam may contain questions on Preview features if those features are commonly used.

Audience profile

  • As a candidate for this Microsoft Certification, you should be familiar with Microsoft 365, including core services, security, identity and access, data protection, and governance, along with Microsoft 365 Copilot and agents.
  • Additionally, you should be familiar with the admin centers used to access Microsoft 365 workloads, such as Exchange Online, SharePoint in Microsoft 365, Microsoft Teams, Microsoft Entra, and Microsoft Purview. You need to have experience with AI-driven productivity tools and modern IT management practices.
  • You must be able to identify the roles of the core features and objects available in Microsoft 365, such as users, groups, teams, sites, and libraries. Plus, you should understand the core security features of Microsoft 365, such as authentication methods, conditional access policies, and single sign-on (SSO).