AB-900 sample exam questions

15 exam-style questions for Microsoft AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals, with answers and explanations. Take them as a timed practice exam first if you want a score out of 1000.

Take the free practice exam AB-900 exam guide

Question 1HotspotTopic 1

HOTSPOT
Select the answer that correctly completes the sentence.

The Microsoft responsible AI principle that requires oversight of AI systems so humans remain in control: accountability / inclusiveness / privacy and security / reliability and safety / transparency
Show answer
- The Microsoft responsible AI principle that requires oversight of AI systems so humans remain in control: accountability
Why
Accountability means people stay responsible for AI systems and keep oversight and control over them.
Question 2HotspotTopic 1

HOTSPOT
Your organization has a Microsoft 365 subscription that contains a Microsoft SharePoint site named Site1. The permissions for Site1 are configured as shown in the following exhibit.

You create a new user named User1 in the subscription.
Use the drop-down menus to select the answer choice that completes the statement based on the information presented in the graphic.

User1 is ... Site1. a site visitor of / a site owner of / a site member of / prevented from accessing
Show answer
- User1 is ... Site1. a site member of
Why
A new internal user is automatically part of 'Everyone except external users', which in the exhibit has Edit permission, the level of site members.
Question 3Multiple responseTopic 1

Your organization has a Microsoft 365 subscription.
You create a security group named Group1 and assign a Microsoft 365 E3 license to the group.
You discover that a user named User1 does NOT have access to the Microsoft 365 E3 features.
You need to ensure that User1 can access all the Microsoft 365 E3 features.
Which two actions can you perform? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.
1. A
  Add User1 to Group1.
2. B
  Assign a Conditional Access policy to Group1.
3. C
  Assign a Conditional Access policy to User1.
4. D
  Assign a license to User1.
Show answer

Correct answer: A, D

Why
Group-based licensing only applies to members, so adding User1 to Group1 grants the E3 license; alternatively you can assign an E3 license directly to User1. Conditional Access policies control sign-in conditions and never grant licensed features.
Question 4Single choiceTopic 1

Your organization has a Microsoft 365 subscription that contains a Microsoft SharePoint site named Site1.

You need to prevent users from sharing the content of Site1 to external users.

What should you use?
1. A
  the Site1 content
2. B
  the SharePoint admin center
3. C
  the Microsoft 365 admin center
4. D
  the Microsoft Entra admin center
Show answer

Correct answer: B

Why
In the SharePoint admin center you can set the external sharing level for an individual site such as Site1 to Only people in your organization. Site content settings, the Microsoft 365 admin center and the Entra admin center are not where per-site sharing limits are configured.
Question 5Single choiceTopic 1

You are reviewing your company’s security policies as part of a Zero Trust strategy.

Which statement accurately describes the Zero Trust principles?
1. A
  Zero Trust enhances the user experience by minimizing authentication prompts.
2. B
  Zero Trust assumes breach and verifies each request.
3. C
  Zero Trust treats all requests from your corporate network as trustworthy.
4. D
  Zero Trust removes the need to regularly review and adjust access permissions.
Show answer

Correct answer: B

Why
Zero Trust is built on verify explicitly, use least-privilege access and assume breach, so every request is verified regardless of origin. It does not trust the corporate network, does not aim to reduce authentication, and requires continuous review of permissions.
Question 6Single choiceTopic 1

Your organization has a Microsoft 365 subscription.

You need to generate a report that shows the permissions and active sharing links of content stored in Microsoft OneDrive accounts.

What should you use?
1. A
  Audit in the Microsoft Defender portal
2. B
  Reports in the Microsoft 365 admin center
3. C
  Data access governance in the SharePoint admin center
4. D
  eDiscovery in the Microsoft Purview portal
Show answer

Correct answer: C

Why
Data access governance reports in the SharePoint admin center (SharePoint Advanced Management) include sharing links and permission reports for SharePoint and OneDrive content. Audit, Microsoft 365 admin center usage reports and eDiscovery do not produce permission and sharing-link inventories.
Question 7Single choiceTopic 2

Your organization has a Microsoft 365 subscription.
You need to investigate security incidents and alerts raised from the Windows 11 devices in your organization.
What should you use?
1. A
  Microsoft Entra ID Protection
2. B
  Microsoft Defender for Identity
3. C
  Microsoft Purview Insider Risk Management
4. D
  Microsoft Defender for Endpoint
Show answer

Correct answer: D

Why
Microsoft Defender for Endpoint protects Windows 11 devices and raises device alerts and incidents that you investigate in the Defender portal. Entra ID Protection handles identity risk, Defender for Identity monitors on-premises Active Directory, and Insider Risk Management targets user behavior rather than device threats.
Question 8Single choiceTopic 2

You have a Microsoft SharePoint site as shown in the following exhibit.

You need to view the settings of SLabel1.
What should you use?
1. A
  the Microsoft Defender portal
2. B
  the SharePoint admin center
3. C
  the Microsoft 365 admin center
4. D
  the Microsoft Purview portal
Show answer

Correct answer: D

Why
SLabel1 is a sensitivity label shown in the Sensitivity column; sensitivity labels and their settings (encryption, marking, scope) are created and managed in the Microsoft Purview portal under Information Protection. The SharePoint, Microsoft 365 and Defender portals do not hold label configuration.
Question 9Single choiceTopic 2

Your organization has a Microsoft 365 subscription.
All users are assigned Microsoft 365 Copilot licenses.
Some users report receiving Copilot responses that contain information from a Microsoft SharePoint site named Finance. The users report that the information is commercially sensitive.
You need to prevent Copilot from providing responses that contain information from the Finance site.
What should you do?
1. A
  From Microsoft Purview, create an Information Barrier (IB) policy.
2. B
  From Microsoft Defender, create a data connector.
3. C
  From Microsoft Entra, create a Conditional Access policy.
4. D
  From the Finance site, configure permissions.
Show answer

Correct answer: D

Why
Copilot only returns content that the user already has permission to access, so fixing permissions on the Finance site (removing overly broad access) stops it appearing in responses. Information barriers restrict communication between segments, Defender data connectors and Conditional Access do not control Copilot grounding.

The Microsoft responsible AI principle that requires oversight of AI systems so humans remain in control:	accountability / inclusiveness / privacy and security / reliability and safety / transparency

User1 is ... Site1.	a site visitor of / a site owner of / a site member of / prevented from accessing

Question 10HotspotTopic 2

HOTSPOT

Select the answer that correctly completes the sentence.

Restricted SharePoint Search enables you to restrict ... access to Microsoft SharePoint sites without preventing users from accessing the files and content to which they have permission.	administrator / guest user / Microsoft 365 Copilot / Microsoft Purview eDiscovery

Show answer

Restricted SharePoint Search enables you to restrict ... access to Microsoft SharePoint sites without preventing users from accessing the files and content to which they have permission. Microsoft 365 Copilot

Why

Restricted SharePoint Search limits organization-wide search and Copilot to an allowed list of sites, while users keep their normal access to their own and shared content.

Question 11Single choiceTopic 3

You need to create a Microsoft 365 Copilot agent that can create charts and visualizations based on a Microsoft Excel workbook.
What should you configure for the agent?
1. A
  the image generator capability
2. B
  the Scrum Assistant template
3. C
  the Customer Insights Assistant template
4. D
  the code interpreter capability
Show answer

Correct answer: D

Why
The code interpreter capability lets a Copilot agent run Python to analyze Excel data and produce charts and visualizations. The image generator creates pictures from text, not data charts, and the Scrum Assistant and Customer Insights Assistant templates target other scenarios.

Question 12HotspotTopic 3

HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

From the Copilot Prompt Gallery, you can modify a saved prompt.	Yes / No
From the Copilot Prompt Gallery, you can share a saved prompt to a Microsoft Teams team.	Yes / No
You can create a shared link for a prompt that was NOT saved to the Copilot Prompt Gallery.	Yes / No

Show answer

From the Copilot Prompt Gallery, you can modify a saved prompt. Yes
From the Copilot Prompt Gallery, you can share a saved prompt to a Microsoft Teams team. Yes
You can create a shared link for a prompt that was NOT saved to the Copilot Prompt Gallery. No

Why

Prompts you save appear under Your prompts in the Prompt Gallery, where you can manage them and share them with a team or by link. Sharing works only from saved prompts. Voters were split on editing; the most-voted answer is kept for the first row.

Question 13HotspotTopic 3

HOTSPOT
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

To use Microsoft 365 Copilot Chat to reason over web data, you need a Microsoft 365 Copilot license.	Yes / No
To use the Researcher agent in Microsoft 365 Copilot, you need a Microsoft 365 Copilot license.	Yes / No
To add an agent in the Microsoft 365 Copilot app, you need a Microsoft 365 Copilot license.	Yes / No

Show answer

To use Microsoft 365 Copilot Chat to reason over web data, you need a Microsoft 365 Copilot license. No
To use the Researcher agent in Microsoft 365 Copilot, you need a Microsoft 365 Copilot license. Yes
To add an agent in the Microsoft 365 Copilot app, you need a Microsoft 365 Copilot license. No

Why

Web-grounded Copilot Chat is included with eligible Microsoft 365 licenses. Researcher and Analyst need a Copilot license. Unlicensed users can still add agents in Copilot Chat; agents using work data are billed pay-as-you-go.

Question 14Single choiceTopic 3

Your organization has a Microsoft 365 subscription.
You need to assign a license to a user.
What should you use?
1. A
  the Microsoft Purview portal
2. B
  the Microsoft 365 admin center
3. C
  the Microsoft Teams admin center
Show answer

Correct answer: B

Why
Licenses are assigned to users in the Microsoft 365 admin center under Users or Billing, Licenses (or via Microsoft Entra). The Purview portal handles compliance and the Teams admin center manages Teams policies, neither assigns licenses.
Question 15Single choiceTopic 3

Your company has a Microsoft SharePoint site named Site1. Site1 contains all the policies of the company’s HR department. The policies are saved as Microsoft Word documents.

All users have read access to Site1.

The HR department manager reports that user requests about the policies are NOT being addressed in a timely manner, especially around major holidays.

You need to recommend a solution to enable the users to find the HR department policies. The solution must provide the users with a list of common queries and ensure that responses are grounded only in Site1.

What should you include in the recommendation?
1. A
  the personal assistant in Copilot in Word
2. B
  a custom Microsoft 365 Copilot agent
3. C
  the Researcher agent in Microsoft 365 Copilot
4. D
  a Microsoft 365 Copilot notebook
Show answer

Correct answer: B

Why
A custom Microsoft 365 Copilot agent can use Site1 as its only knowledge source, with conversation starters listing common queries, so answers come only from the HR policies. Copilot in Word, Researcher and notebooks are not scoped as a shared HR self-service experience with suggested prompts.