Microsoft 365 Certified: Copilot and Agent Administration Fundamentals (AB-900) - Full Practice Exam 1

1. A business needs a collaborative site with document libraries and controlled content permissions. Which Microsoft 365 service should it configure?
2. A company needs policy-based investigation of potentially risky insider behavior with appropriate privacy and reviewer controls. Which capability fits?
3. A company wants warnings or restrictions when supported sensitive data is shared through risky channels. Which capability should it evaluate?
4. A data protection team wants to inspect where supported sensitive information has been discovered, subject to appropriate permissions. Which tool should it evaluate?
5. A department needs a mail distribution address that sends messages to its configured recipients. Which Exchange object should be evaluated?
6. A department needs a tailored agent with defined instructions, approved knowledge, and permitted actions for its workflow. Which approach fits?
7. A department wants supported license assignments to follow eligible group membership. Which capability should it evaluate?
8. A document needs a persistent sensitivity classification with configured protection such as encryption. Which capability fits?
9. A governance team wants visibility into supported AI activity and related data-security risks. Which Purview capability should it evaluate?
10. A help desk needs to manage an employee's Exchange Online mailbox. Which administrative surface is most directly relevant?
11. A licensed user asks Copilot about a protected document they cannot access. What permission principle should the administrator expect?
12. A policy must recognize supported identifiers such as financial or personal data patterns. Which Purview building block is relevant?
13. A published agent should be available only to an approved employee group. What should its administration configure?
14. A rollout review finds sensitive documents shared too broadly. Which two actions address the underlying risk? Select TWO.
15. A saved scheduled prompt is no longer needed after a project ends. What should its owner do?
16. A sensitive Microsoft 365 application should require a compliant device under defined conditions. Which capability should be configured?
17. A site needs an additional supported restriction limiting access to a designated group, alongside normal site permissions. Which SharePoint capability should be evaluated?
18. A team compares a monthly user license model with a supported pay-as-you-go model. Which distinction is most relevant?
19. A team needs organized collaboration conversations with appropriate channel-level behavior and policies. Which service's objects should the administrator manage?
20. A team shares a reusable prompt template. What should be reviewed before making it available widely?
21. A team wants to assess improvement actions against relevant standards and track its progress. Which Purview capability fits?
22. A user asks Copilot to summarize organizational information. Why do Microsoft Graph context and existing permissions matter?
23. A user is blocked during Microsoft 365 sign-in after a policy change. Which evidence should the administrator inspect first?
24. A user needs a multi-step investigation that gathers and synthesizes relevant source information into a research result. Which built-in agent should be evaluated where available?
25. A user needs to use a licensed Microsoft 365 feature and open a protected project site. Which two requirements must be checked separately? Select TWO.
26. A user wants help exploring a supplied dataset and deriving calculations and patterns. Which built-in agent should be evaluated where available?
27. A visitor should read a SharePoint site's documents but not edit them. Which permission approach best fits?
28. Administrators need evidence of potentially overshared SharePoint sites and sharing patterns before broader Copilot adoption. Which capability should they evaluate?
29. Administrators should activate privileged roles only when needed rather than hold them continuously. Which capability should the organization evaluate?
30. An administrator compares app registrations with enterprise applications. Which distinction is correct?
31. An administrator enables a supported consumption-based Copilot or agent capability. What should be managed alongside feature access?
32. An administrator must manage an organization's Microsoft 365 domains and general organization settings. Which management surface is the appropriate starting point?
33. An agent has increasing failed tool calls and unexpected usage. Which administration response is appropriate?
34. An agent's owner leaves the company. What should the lifecycle process ensure?
35. An AI-generated briefing may influence a consequential business decision. What responsible use practice is appropriate?
36. An analyst needs visibility into supported activities involving protected information, such as label and DLP-related events. Which capability is relevant?
37. An employee accesses company data from an internal network. The organization still verifies identity and device signals and grants only necessary access. Which principle is being applied?
38. An employee lacks a required Copilot entitlement. The administrator grants the employee access to a SharePoint site. Does that alone supply the missing product entitlement?
39. An organization must control supported Teams features for different user populations. Which configuration should be evaluated?
40. Authorized investigators need to search relevant files and emails for a formal case. Which Purview capability should be used?
41. Before approving an agent for broad organizational use, which two areas should administrators review? Select TWO.
42. Compliance Manager reports a stronger score. Which interpretation is appropriate?
43. Copilot surfaces a document that was accidentally shared broadly before the rollout. What should the organization investigate?
44. Copilot usage rises substantially. What else is needed before claiming the rollout improved business outcomes?
45. Management wants to understand Copilot adoption across eligible employees. Which information should the administrator review?
46. Reviewers need to assess communications that may violate defined conduct policies in supported workloads. Which capability is the closest fit?
47. Security needs to connect related alerts from supported identity, endpoint, email, and application protections. Which product capability is designed for this?
48. Specified business content must be preserved for a defined period and then handled according to its lifecycle policy. Which capability fits?
49. The tenant's Identity Secure Score improves after recommended actions. How should the administrator interpret this?
50. Users authenticate once and then access several integrated applications without entering credentials repeatedly. Which capability is this?

Comments — 0