Microsoft

AB-650 Free Practice Questions

This is the free Microsoft AB-650 practice question bank — 30 of 60 total questions, each with a full explanation, free to read with no signup required. Updated 2026-11-12.

Every answer is verified against official Microsoft documentation — see our methodology.

Question 1

HOTSPOT You have a Microsoft 365 E5 subscription. You configure a new data loss prevention (DLP) policy named Policy1 that detects when sensitive content is shared externally. Policy1 has the DLP rule shown in the following exhibit. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

Illustration for AB-650 question 1 Illustration for AB-650 question 1 Illustration for AB-650 question 1
Show Answer
Correct Answer: Available to both internal and external users No
Explanation:
The rule has no action configured to restrict access, so a matching file remains available to users with access. Eighteen credit card numbers exceed the rule’s 1-to-9 instance range, so that condition does not trigger an email notification.

Question 1

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. You have a Microsoft 365 subscription that contains Microsoft 365 Copilot agents deployed to multiple departments at your company. The adoption team reports team reports increasing license assignments, and corporate management wants to identify Copilot engagement gaps by Microsoft 365 apps and features. You need to provide the required adoption insights. The solution must support targeted user education without using audit events or prompt content. Solution: From the Microsoft 365 admin center, you review the Microsoft 365 Copilot usage report. Does this meet the goal?

A. Yes
B. No
Show Answer
Correct Answer: A
Explanation:
Yes. The Microsoft 365 Copilot usage report shows adoption and activity across Microsoft 365 apps and Copilot features, helping identify engagement gaps for targeted education without examining audit events or prompt content.

Question 2

You have a Microsoft 365 subscription. You need to create a data loss prevention (DLP) policy that is configured to use the Set headers action. To which location can the policy be applied?

A. OneDrive accounts
B. Exchange email
C. SharePoint sites
D. Teams chat and channel messages
Show Answer
Correct Answer: B
Explanation:
The Set headers action modifies email headers, so it applies to Exchange email. OneDrive, SharePoint, and Teams locations do not support this email-specific action.

Question 2

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. You have a Microsoft 365 subscription that contains Microsoft 365 Copilot agents deployed to multiple departments at your company. The adoption team reports team reports increasing license assignments, and corporate management wants to identify Copilot engagement gaps by Microsoft 365 apps and features. You need to provide the required adoption insights. The solution must support targeted user education without using audit events or prompt content. Solution: From the Microsoft Copilot Dashboard in Microsoft Viva Insights, you review app and feature usage trends. Does this meet the goal?

A. Yes
B. No
Show Answer
Correct Answer: A
Explanation:
Yes. The Microsoft Copilot Dashboard in Viva Insights provides aggregated adoption and usage trends across Microsoft 365 apps and features, helping identify engagement gaps for targeted education without requiring audit events or access to prompt content.

Question 3

This is a case study. Case studies are not timed separately from other exam sections. You can use as much exam time as you would like to complete each case study. However, there might be additional case studies or other exam sections. Manage your time to ensure that you can complete all the exam sections in the time provided. Pay attention to the Exam Progress at the top of the screen so you have sufficient time to complete any exam sections that follow this case study. To answer the case study questions, you will need to reference information that is provided in the case. Case studies and associated questions might contain exhibits or other resources that provide more information about the scenario described in the case. Information provided in an individual question does not apply to the other questions in the case study. A Review Screen will appear at the end of this case study. From the Review Screen, you can review and change your answers before you move to the next exam section. After you leave this case study, you will NOT be able to return to it. To start the case study To display the first question in this case study, select the “Next” button. To the left of the question, a menu provides links to information such as business requirements, the existing environment, and problem statements. Please read through all this information before answering any questions. When you are ready to answer a question, select the “Question” button to return to the question. Contoso, Ltd. is a consulting company that has a main office in San Francisco and a branch office in Dallas. Existing Environment Microsoft Entra configuration Contoso has an Azure subscription. Contoso has a Microsoft 365 E5 subscription. Contoso has a Microsoft Entra tenant named contoso.com. The tenant has an administrative unit named AU1 that contains the following membership rule. (device.deviceTrustType –eq “Workplace”) and (device.deviceOSType –in [“Windows”, “Android”]) The tenant contains the cloud-only users shown in the following table. The tenant contains the groups shown in the following table. The tenant contains the devices shown in the following table. All the devices are managed by using Microsoft Intune. Microsoft Entra authentication methods Contoso contains an Authentication methods policy for Microsoft Authenticator that has the following settings: Include: Group1 Exclude: Group3 Authentication mode: Passwordless Privileged Identity Management (PIM) configuration Privileged roles are managed by using Privileged Identity Management (PIM). The PIM settings for the AI Administrator role are configured as shown in the following table. Email configuration Each user has a Microsoft Exchange mailbox. Contoso contains an anti-spam outbound policy named Antispam1 that has the following configurations: Included groups: Group4 Excluded users: User2 Set an external message limit: 3 Set an internal message limit: 5 Set a daily message limit: 13 Restriction placed on users who reach the message limit: Restrict the user from sending mail Microsoft SharePoint configuration Contoso has a Microsoft SharePoint site named Site1 that stores the following types of content and various other documents: Project documents: All the documents have a project code that includes the letters PR, followed by a dash and nine digits (for example PR-123456789). Proposal documents: All the documents have a customer ID that includes seven to 10 alphanumerical characters. All the customer IDs are recorded in a Microsoft Excel workbook. Feedback forms: All the documents were created by using the same template. Microsoft AI services Contoso implements the following Microsoft AI services: Microsoft 365 Copilot for selected users Microsoft Foundry agents, including an agent named Agent1 Requirements Planned changes Contoso plans to implement the following changes: Issue new Android devices to the Group1 users. Assign Microsoft 365 Copilot licenses to the users in Group1. Add an additional email address alias for the users in Group4. Create a Conditional Access policy named CAPolicy1 for Group3. Disable web search for Microsoft 365 Copilot and Microsoft 365 Copilot Chat. Create classifiers to identify project documents and proposal documents stored on Site1. Technical requirements Contoso identifies the following technical requirements: The users in Group3 that access Microsoft 365 resources from anonymous IP addresses must complete multifactor authentication (MFA). Microsoft 365 Copilot responses must NOT use content from the project documents stored on Site1. Microsoft 365 Copilot responses must use content from only Microsoft 365 locations. The total costs of Agent1 must be monitored and evaluated monthly. All the Android devices must be registered in Microsoft Entra. Administrative effort must be minimized. Administrative costs must be minimized. You need to meet the technical requirements for the project documents. What should you create in Microsoft Purview?

Illustration for AB-650 question 3 Illustration for AB-650 question 3 Illustration for AB-650 question 3 Illustration for AB-650 question 3
A. a sensitivity label and an auto-labeling policy
B. an Insider Risk Management policy
C. an Information Barriers policy
D. a data loss prevention (DLP) policy
Show Answer
Correct Answer: A
Explanation:
Create a sensitivity label configured to prevent Microsoft 365 Copilot from processing labeled content, then use an auto-labeling policy to apply it to the project documents on Site1. The policy can identify those documents by their project-code pattern (PR- followed by nine digits).

Question 3

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem. After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen. You have a Microsoft 365 subscription that contains Microsoft 365 Copilot agents deployed to multiple departments at your company. The adoption team reports team reports increasing license assignments, and corporate management wants to identify Copilot engagement gaps by Microsoft 365 apps and features. You need to provide the required adoption insights. The solution must support targeted user education without using audit events or prompt content. Solution: From the Microsoft 365 Apps admin center, you review Inventory. Does this meet the goal?

A. Yes
B. No
Show Answer
Correct Answer: B
Explanation:
No. Inventory in the Microsoft 365 Apps admin center reports app and device deployment details, such as installed versions and add-ins. It does not provide Copilot engagement insights by app or feature for targeted user education.

Question 4

HOTSPOT You have a Microsoft 365 E5 tenant. You have a sensitivity label configured as shown in the Sensitivity label exhibit. (Click the Sensitivity label tab.) You have an auto-labeling policy as shown in the Auto-labeling policy exhibit. (Click the Auto-labeling policy tab.) A user sends an email that contains the components shown in the following table. Sensitivity label: Auto-labeling policy: For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Illustration for AB-650 question 4 Illustration for AB-650 question 4 Illustration for AB-650 question 4 Illustration for AB-650 question 4
Show Answer
Correct Answer: Sensitivity1 is applied to the email: Yes A watermark is added to File1.docx: No A header is added to File2.xml: No
Explanation:
The IP address in File1.docx triggers the Exchange email auto-labeling policy, so the email receives Sensitivity1. Labeling the email does not add content markings to its attachments.

Question 4

DRAG DROP You have a Microsoft 365 subscription. The following agent compliance gaps are identified in Microsoft Agent 365: Agents flagged by aggregated security and compliance signals Agents that lack accountable lifecycle management You need to resolve the gaps. Which action card should you use for each gap? To answer, drag the appropriate action cards to the correct gaps. Each action card may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Illustration for AB-650 question 4
Show Answer
Correct Answer: Aggregated security and compliance signals: Agents at risk Lack accountable lifecycle management: Agents without owners
Explanation:
Agents at risk identifies agents flagged by risk signals. Agents without owners identifies agents with no accountable owner to manage their lifecycle.

Question 5

You have a Microsoft 365 subscription that uses Microsoft Defender for Office 365. Standard protection is enabled for all recipients. The subscription contains a mail-enabled security group named Group1. Group1 contains users that require custom inbound anti-spam actions. A custom anti-spam inbound policy named Policy1 is applied to Group1 and has a priority value of 0. You discover that email sent to the users in Group1 is evaluated by using the Standard preset security policy instead of Policy1. You need to ensure that Policy1 is applied to Group1. All other recipients must continue to receive the Standard protection settings. What should you do?

A. Add all other recipients to Policy1 as exceptions
B. Set Policy1 to Priority1
C. Add Group1 as an exception in the Standard protection settings
D. Disable Standard protection
Show Answer
Correct Answer: C
Explanation:
Standard preset security policies take precedence over custom anti-spam policies, regardless of the custom policy’s priority. Exclude Group1 from Standard protection so Policy1 can apply to its members; all other recipients remain covered by Standard protection.

Question 5

DRAG DROP You have a Microsoft 365 subscription. The following agent compliance gaps are identified in Microsoft Agent 365: Users can create, install, and share agents without restrictions. An assessment is required to identify sensitive data oversharing risks. What should you use to resolve each gap? To answer, drag the appropriate options to the correct gaps. Each option may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point.

Illustration for AB-650 question 5
Show Answer
Correct Answer: Users can create, install, and share agents without restrictions: Agent settings Assessment of sensitive data oversharing risks: Data Security Posture Management (DSPM)
Explanation:
Agent settings control agent creation, installation, and sharing. DSPM assesses sensitive-data exposure and oversharing risks.

$19

Get all 60 questions with detailed answers and explanations

  • Instant download HTML + PDF delivered the moment payment clears.
  • Secure Stripe checkout we never see or store your card details.
  • 7-day refund if files are defective see our refund policy.