Microsoft AB-900 Exam Practice Questions, practice question pack
MICROSOFT · AB-900

Microsoft AB-900 Exam Practice Questions

89 questionsPDF by emailUpdated September 2026

US$39

Try 10 questions free

Card, Apple Pay or Google Pay. Your PDF is sent by email as soon as you check out.

Pass or your money backFail the exam after using this pack and we refund it. How the guarantee works
Category:
TRY BEFORE YOU BUY

Three of the 89 questions in this pack

Question 1

Your organization has a Microsoft 365 E5 subscription.

You need to ensure that a third-party cloud service can authenticate to Microsoft Entra.

What should you configure?

  1. a Microsoft 365 Copilot connector
  2. multifactor authentication (MFA)
  3. a Conditional Access policy
  4. an app registration
Show answer and explanation

Correct answer: D. an app registration

An app registration in Microsoft Entra is required to enable a third-party cloud service to authenticate to Microsoft Entra. This registration creates the necessary service principal and credentials that allow the external application to establish trust and obtain access tokens for authentication.

Why the other options are wrong

  • A. Microsoft 365 Copilot connectors are for integrating Copilot functionality, not for third- party authentication.
  • B. MFA is an authentication mechanism for users, not for application-to-Entra authentication.
  • C. Conditional Access policies enforce access rules but do not enable initial authentication registration.

Question 2

Your organization has a Microsoft 365 subscription.

You need to evaluate your organization’s Identity Secure Score.

Which two factors affect the score? Each correct answer presents a complete the solution.

NOTE: Each correct selection is worth one point.

  1. the SharePoint site permissions
  2. the number of global administrators
  3. passwords that are never expired
  4. the location of the users
Show answer and explanation

Correct answer: B, C

B. the number of global administrators C. passwords that are never expired Identity Secure Score measures identity configuration and administrative practices in Microsoft Entra ID and returns improvement actions with point values. The number of global administrators is scored because keeping privileged role assignments to a small number reduces attack surface. Password expiration policy is also scored: Microsoft recommends setting passwords to never expire and using strong authentication instead of forced rotation, so that configuration is reflected in the score.

Why the other options are wrong

  • A. SharePoint site permissions are governed by SharePoint and Microsoft Purview controls and are not part of the Identity Secure Score calculation.
  • D. The physical or geographic location of users is not measured by Identity Secure Score, although sign-in risk and location can be used in Conditional Access policies.

Question 3

Your organization has a Microsoft 365 subscription.

You need to review the impact of a recent phishing incident that targeted email users.

What should you use?

  1. the Microsoft Defender portal
  2. the Microsoft 365 admin center
  3. the Microsoft Entra admin center
  4. the Microsoft Exchange admin center
Show answer and explanation

Correct answer: A. the Microsoft Defender portal

The Microsoft Defender portal provides comprehensive threat investigation and incident response capabilities, including the ability to review phishing attacks, email threats, and their impact on users. This portal centralizes security incident analysis and provides detailed threat intelligence.

Why the other options are wrong

  • B. The Microsoft 365 admin center manages licensing and general administration, not threat analysis.
  • C. The Microsoft Entra admin center focuses on identity and access management, not email threat investigation.
  • D. The Microsoft Exchange admin center manages mail flow and Exchange settings but lacks the advanced threat analysis features needed for phishing incident review.

See all 10 free questions Get the full pack, US$39

89 practice questions for Microsoft 365 Certified: Copilot and Agent Administration Fundamentals (AB-900), with full explanations.

Every question comes with the correct answer, the reasoning behind it, and a short note on why each wrong option is wrong. Work through it once with the answers, then again with the questions-only copy under exam conditions.

  • 89 questions mapped to the AB-900 exam objectives
  • Answers and explanations for every question, including the wrong options
  • A questions-only PDF for timed practice runs
  • Instant delivery by email the moment you check out
  • Free monthly updates for as long as the exam is live
  • Pass or your money back

An AB-900 attempt costs US$99 in the US. This pack is US$39, paid once.

Try 10 questions free before you buy.

Last updated September 2026 · 89 questions

What makes the AB-900 hard

AB-900 is not a Copilot how-to exam, it is a governance exam wearing a Copilot badge: Purview DLP versus sensitivity labels, DSPM for AI versus Insider Risk, conditional access versus Identity Secure Score. The exam spends more time on data protection and governance than on Copilot itself, because the real job of an AB-900 certified admin is making sure Copilot does not surface data it should not touch. That is the domain most candidates underestimate.

The exam runs 40 to 60 questions in 45 minutes, 65 minutes total seat time, with a pass mark of 700 out of 1000. At US$99 it is one of the cheaper Microsoft exams, but a retake costs another US$99 and a 24-hour wait, and AB-900 renews annually through a free Microsoft Learn assessment.

This pack has 89 practice questions for the AB-900, covering Microsoft 365 core objects, Purview governance, and Copilot and agent administration, so the licensing and oversharing questions Microsoft favours are not a surprise on exam day.

About the exam

AB-900 is Microsoft’s foundational certification for IT administrators supporting an AI-enabled Microsoft 365 environment. It validates the ability to configure, secure and govern Copilot and agents across Microsoft 365, covering identity, data protection and compliance fundamentals alongside AI administration. The certification renews annually through a free online assessment.

Exam domains

  • Understand data protection and governance for Microsoft 365 and Copilot: 35 to 40%
  • Understand core Microsoft 365 objects and security fundamentals: 30 to 35%
  • Perform basic administrative tasks for Copilot and agents: 25 to 30%

40 to 60 questions, 45 minutes (65 minutes total seat time), pass mark 700 out of 1000, US$99 in the US, priced by local currency elsewhere, no prerequisites, renews annually, online proctored and test centres.

Reviews

There are no reviews yet.

Only logged in customers who have purchased this product may leave a review.

Questions before you buy

What do I get when I buy the Microsoft AB-900 pack?

89 practice questions as a PDF, each with the correct answer, a full explanation and a note on why the other options are wrong, plus a separate questions-only PDF for timed practice.

How quickly do I receive it?

Your PDF is prepared and sent to your email address after checkout, and you get a confirmation as soon as it is on its way.

Is there a free sample?

Yes. Ten questions from this pack, with answers and explanations, are free on this page and as a PDF, so you can judge the quality before you pay.

Are updates included?

Yes. The pack is updated every month for as long as the exam is live, and updates are free for everyone who has bought it.

What if I fail the exam?

We refund the pack. Sit the exam 7 to 30 days after buying, then send your official score report within 7 days of the exam date, as set out in the refund policy.

Can I share it with colleagues?

Each purchase is licensed to one person. For a team, school or training organisation, email support@certstash.com for a licence that fits.

Related products