Free Sample — 15 Practice Questions
Preview 15 of 87 real practice questions from the Microsoft AB-900 study guide — no signup, no email, no card required.
Question 22
Which statement accurately describes authorization in Microsoft 365?
A. a process to verify whether an identity is who or what they claim to be
B. a process to require additional authentication methods before an identity can access resources
C. a process to verify whether an identity is allowed to access a resource
D. a process to validate an identity from an external system
Show Answer
Correct Answer: C
Explanation:
Authorization determines whether an authenticated identity has permission to access a specific resource or perform an action. Authentication verifies identity, MFA requires additional verification, and federation validates identities across trusted external systems.
Question 16
HOTSPOT
-
Your organization has a Microsoft 365 subscription.
You need to use Microsoft Purview to meet the following requirements:
• Discover and classify sensitive data across multiple platforms.
• Block users from sharing intellectual property with external users.
Which Microsoft Purview solution should you use for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Discover and classify sensitive data across multiple platforms: Information Protection
Block users from sharing intellectual property with external users: Data Loss Prevention
Explanation:
Microsoft Purview Information Protection provides discovery, classification, and sensitivity labeling of data across supported locations. Microsoft Purview Data Loss Prevention enforces policies to prevent sensitive or intellectual property data from being shared externally.
Question 42
HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: activate the role.
Explanation:
In Microsoft Entra Privileged Identity Management (PIM), users who are eligible for a role must activate the eligible role assignment before performing privileged administrative tasks such as creating user accounts.
Question 30
HOTSPOT
-
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: No
Yes
No
Explanation:
Microsoft 365 Copilot requires authenticated, licensed users. Admins can enable or block self-service purchase where supported. Copilot licenses are assigned to users in the tenant, not external Entra ID guest users.
Question 50
You need to create a Microsoft 365 Copilot agent that can create charts and visualizations based on a Microsoft Excel workbook.
What should you configure for the agent?
A. the image generator capability
B. the Scrum Assistant template
C. the Customer Insights Assistant template
D. the code interpreter capability
Show Answer
Correct Answer: D
Explanation:
The code interpreter capability enables a Microsoft 365 Copilot agent to analyze Excel workbook data, execute code (such as Python), and generate charts and visualizations. The other options are unrelated to data analysis and visualization.
Question 2
Your company has a Microsoft SharePoint site named Site1. Site1 contains all the policies of the company’s HR department. The policies are saved as Microsoft Word documents.
All users have read access to Site1.
The HR department manager reports that user requests about the policies are NOT being addressed in a timely manner, especially around major holidays.
You need to recommend a solution to enable the users to find the HR department policies. The solution must provide the users with a list of common queries and ensure that responses are grounded only in Site1.
What should you include in the recommendation?
A. the personal assistant in Copilot in Word
B. a custom Microsoft 365 Copilot agent
C. the Researcher agent in Microsoft 365 Copilot
D. a Microsoft 365 Copilot notebook
Show Answer
Correct Answer: B
Explanation:
A custom Microsoft 365 Copilot agent can be grounded to a specific SharePoint site (Site1), provide curated starter prompts/common queries, and answer users based only on the configured knowledge source. The personal assistant in Word is user-specific, Researcher is intended for broader research across sources rather than a scoped HR knowledge bot, and a Copilot notebook is for organizing and working with content rather than serving organization-wide grounded Q&A.
Question 4
HOTSPOT
-
You need to ensure that users can use an external system as a knowledge source for custom Microsoft 365 Copilot agents.
What should you configure in the Microsoft 365 admin center? To answer, select the appropriate settings in the answer area.
Show Answer
Correct Answer: Connectors
Explanation:
Configure Copilot > Connectors in the Microsoft 365 admin center to set up Microsoft Graph connectors so external systems can be used as knowledge sources for custom Microsoft 365 Copilot agents.
Question 18
You are reviewing your company’s security policies as part of a Zero Trust strategy.
Which statement accurately describes the Zero Trust principles?
A. Zero Trust enhances the user experience by minimizing authentication prompts.
B. Zero Trust assumes breach and verifies each request.
C. Zero Trust treats all requests from your corporate network as trustworthy.
D. Zero Trust removes the need to regularly review and adjust access permissions.
Show Answer
Correct Answer: B
Explanation:
Zero Trust is built on principles such as verifying every access request explicitly, enforcing least-privilege access, and assuming breach. It does not inherently reduce authentication prompts, does not trust requests simply because they originate from the corporate network, and requires ongoing review and adjustment of access permissions.
Question 11
Your organization has a Microsoft 365 subscription.
Your company recently purchased Microsoft 365 Copilot licenses for some users.
You need to identify how many unlicensed users have used Copilot in Microsoft Teams.
Which usage report should you use in the Microsoft 365 admin center?
A. Microsoft 365 Copilot Chat
B. Microsoft 365 Copilot Search
C. Microsoft 365 Apps
D. Microsoft 365 Copilot
Show Answer
Correct Answer: A
Explanation:
The Microsoft 365 Copilot Chat usage report is specifically for users who do not have a Microsoft 365 Copilot license and shows Copilot Chat usage across supported apps, including Microsoft Teams. It is the appropriate report to identify how many unlicensed users have used Copilot in Teams.
Question 34
You need to identify files and emails that contain social security numbers (SSNs) and credit card numbers.
What should you use in the Microsoft Purview portal?
A. Data explorer
B. Information Protection reports
C. Information Protection policies
D. Activity explorer
Show Answer
Correct Answer: A
Explanation:
Data explorer in Microsoft Purview is used to discover and inspect files and emails that contain sensitive information types such as Social Security numbers and credit card numbers across Microsoft 365 locations. Information Protection policies enforce protection, Information Protection reports provide reporting, and Activity explorer shows user/activity events rather than content discovery.
Question 20
HOTSPOT
-
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: No
Yes
No
Explanation:
Zero Trust is a security strategy/framework rather than a product. It does not require an Azure subscription and cannot simply be enabled from the Microsoft 365 admin center.
Question 23
HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: Microsoft Graph
Explanation:
Microsoft Graph provides organizational signals such as collaboration history, document relevance, and communication frequency that Microsoft 365 Copilot uses to ground responses.
Question 32
A user named User1 is responsible for quarterly sales reporting.
User1 needs to identify performance trends, generate visual insights, and create a summary of anomalies across multiple files that contain various datasets.
What should you use?
A. the Analyst agent in Microsoft 365 Copilot
B. the Researcher agent in Microsoft 365 Copilot
C. Microsoft 365 Copilot Search
D. Copilot in Excel
Show Answer
Correct Answer: A
Explanation:
The Analyst agent in Microsoft 365 Copilot is designed for advanced data analysis across multiple files. It can identify trends, detect anomalies, generate visualizations, and produce summarized insights from datasets. Researcher focuses on synthesizing information from sources, Copilot Search is for finding information, and Copilot in Excel primarily analyzes data within Excel rather than acting across multiple files as an agent.
Question 14
HOTSPOT
-
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Show Answer
Correct Answer: Yes
No
Yes
Explanation:
Microsoft 365 Copilot respects Microsoft Purview sensitivity labels, enforces DLP policies rather than ignoring them, and only accesses content the user already has permission to access.
Question 8
HOTSPOT
-
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: 1. No
2. No
3. Yes
Explanation:
Microsoft states that Microsoft 365 Copilot prompts, responses, and Microsoft Graph organizational data are not used to train foundation models, and Copilot respects existing Microsoft 365 permissions.