Microsoft AB-900 Exam Practice Questions
US$39
Every question with the correct answer and why the other options are wrong.
Card, Apple Pay, Google Pay or PayPal. Your PDF is prepared and emailed to you after checkout, usually within a few hours.
The product is amazing, and the service is exceptional. I'll be back for more exam prep soon!
Three of the 89 questions in this pack
Question 1
Your organization has a Microsoft 365 subscription. Which two tasks can you perform by using the Exchange admin center? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Show answer and explanation
Correct answer: B, C. Create a mail flow rule; Create a shared mailbox.
The Exchange admin center is used to manage mail flow and create shared mailboxes. Mail flow rules (option B) control email routing and policies and are a core Exchange admin center function. Shared mailboxes (option C) can be created through the Exchange admin center to enable multiple users to access a single mailbox. License assignment (option A) is performed in the Microsoft 365 admin center, not Exchange admin center. Custom domain configuration (option D) is also managed in the Microsoft 365 admin center, not the Exchange admin center.
Why the other options are wrong
- A. License assignment is handled in the Microsoft 365 admin center, not the Exchange admin center.
- D. Custom domain configuration is managed in the Microsoft 365 admin center, not the Exchange admin center.
Question 2
You are reviewing your company’s security policies as part of a Zero Trust strategy. Which statement accurately describes the Zero Trust principles?
Show answer and explanation
Correct answer: B. Zero Trust assumes breach and verifies each request.
Zero Trust is a security strategy that assumes breach and verifies every request, regardless of source. This foundational principle requires continuous verification of all access attempts, users, devices, and data. Option A contradicts Zero Trust by suggesting authentication is minimized. Option C is the opposite of Zero Trust philosophy, which does not trust corporate network traffic by default. Option D is false because Zero Trust requires regular review and adjustment of access permissions as part of continuous verification.
Why the other options are wrong
- A. Zero Trust requires continuous authentication and verification, not minimized prompts.
- C. Zero Trust explicitly does not grant automatic trust to requests from corporate networks.
- D. Regular review and adjustment of access permissions is essential to Zero Trust implementation.
Question 3
Your organization has a Microsoft 365 subscription. You need to generate a report that shows the permissions and active sharing links of content stored in Microsoft OneDrive accounts. What should you use?
Show answer and explanation
Correct answer: C. Data access governance in the SharePoint admin center
Data access governance in the SharePoint admin center provides reports on permissions and active sharing links for content stored in OneDrive accounts. This feature specifically addresses sharing and permission analysis across OneDrive. Audit in the Defender portal (option A) tracks security events but not sharing link reports. Reports in the Microsoft 365 admin center (option B) provide general organizational reporting but not the specific OneDrive sharing link and permission details required. eDiscovery in Purview (option D) is designed for legal holds and content searches, not routine sharing permission reporting.
Why the other options are wrong
- A. Audit in the Microsoft Defender portal tracks security events, not sharing links and permissions reports.
- B. The Microsoft 365 admin center reports do not provide detailed OneDrive sharing link and permission analysis.
- D. eDiscovery is used for legal discovery and content holds, not for routine sharing and permissions reporting.
4 reviews for Microsoft AB-900 Exam Practice Questions
Only logged in customers who have purchased this product may leave a review.
How much of the Microsoft AB-900 bank is free?
89 questions in the bankEach step includes the one before, so buying only adds new questions.
- You are here10questionsFree sampleThree on this page, all ten as a PDF.Download the sample
- 1416% of the bankPractice pageFree on the site, every answer explained.Go to the practice page
- 1517% of the bankHalf PackFree by email, as one PDF, every answer explained.Get the Half Pack
- 89100%, the whole bankFull pack, US$39Plus the questions-only PDF, monthly updates, refund if you fail.Get the full pack
What’s in the Microsoft AB-900 pack
- 89 questions mapped to the AB-900 exam objectives
- Answers and explanations for every question, including the wrong options
- A questions-only PDF for timed practice runs
- Delivered by email shortly after checkout
- Free monthly updates for as long as the exam is live
- Pass or your money back
An AB-900 attempt costs US$99 in the US. This pack is US$39, paid once.
What makes the AB-900 hard
AB-900 is not a Copilot how-to exam, it is a governance exam wearing a Copilot badge: Purview DLP versus sensitivity labels, DSPM for AI versus Insider Risk, conditional access versus Identity Secure Score. The exam spends more time on data protection and governance than on Copilot itself, because the real job of an AB-900 certified admin is making sure Copilot does not surface data it should not touch. That is the domain most candidates underestimate.
The exam runs 40 to 60 questions in 45 minutes, 65 minutes total seat time, with a pass mark of 700 out of 1000. At US$99 it is one of the cheaper Microsoft exams, but a retake costs another US$99 and a 24-hour wait.
This pack has 89 practice questions for the AB-900, covering Microsoft 365 core objects, Purview governance, and Copilot and agent administration, so the licensing and oversharing questions Microsoft favours are not a surprise on exam day.
About the exam
AB-900 is Microsoft's foundational certification for IT administrators supporting an AI-enabled Microsoft 365 environment. It validates the ability to configure, secure and govern Copilot and agents across Microsoft 365, covering identity, data protection and compliance fundamentals alongside AI administration. Fundamentals certifications do not expire.
Questions before you buy
How quickly do I receive it?
Your PDF is prepared and sent to your email address after checkout, and you get a confirmation as soon as it is on its way.
Are updates included?
Yes. The pack is updated every month for as long as the exam is live, and updates are free for everyone who has bought it.
What if I fail the exam?
We refund the pack, or swap it for any other pack if you would rather keep studying. Sit the exam 7 to 30 days after buying, then send your official score report within 7 days of the exam date, as set out in the refund policy.
What is your pass rate?
99% of customers who prepare with a CertStash pack pass. If you do not, we refund the pack, or swap it for another pack.
Can I share it with colleagues?
Each purchase is licensed to one person. For a team, school or training organisation, email support@certstash.com for a licence that fits.
Related products
-
Microsoft MB-230
459 questionsUpdated Nov 20265.0 (7) US$39 -
Microsoft AB-410
174 questionsUpdated Nov 2026 US$39 -
Microsoft AZ-400
564 questionsUpdated Nov 20264.9 (13) US$39 -
Microsoft AZ-305
382 questionsUpdated Nov 20264.8 (13) US$39
Hobert Strittmatter –
The product is amazing, and the service is exceptional. I'll be back for more exam prep soon!
Brooks Piermatteo –
The AB-900 practice questions helped me understand Microsoft business concepts better. The materials were easy to review.
Mario Cesar –
The AB-900 practice tests were a good introduction to Microsoft business concepts. The exam questions helped me review important areas quickly.
Meng –
The AB-900 Microsoft 365 Copilot and Agent Administration Fundamentals is quite new, but this study guide was right on the money. It covers the core Copilot architecture and the essential security/compliance settings for agents. I felt very prepared for the questions on data privacy and tenant-level permissions.