Free Microsoft AB-900 Exam Questions
Absolute Free AB-900 Exam Practice for Comprehensive Preparation
-
Microsoft AB-900 Exam Questions
-
Provided By: Microsoft
- Exam: Microsoft 365 Certified: Copilot and Agent Administration Fundamentals
- Certification: Microsoft AI Business Solutions
-
Total Questions: 437
-
Updated On: Sep 25, 2026
-
Rated: 4.9 |
-
Online Users: 874
-
Question 1
-
A security architect enables Microsoft Entra ID Protection and assumes that, from that moment onward, any sign-in flagged as “high risk” will automatically be blocked or forced to perform multifactor authentication, even if no Conditional Access policies have been configured to act on risk. The architect states, “ID Protection on its own will enforce MFA or block access when risk is detected.” This statement is:
Answer: B
-
A security architect enables Microsoft Entra ID Protection and assumes that, from that moment onward, any sign-in flagged as “high risk” will automatically be blocked or forced to perform multifactor authentication, even if no Conditional Access policies have been configured to act on risk. The architect states, “ID Protection on its own will enforce MFA or block access when risk is detected.” This statement is:
-
Question 2
-
A bank wants to stop users from pasting highly regulated IDs into Microsoft 365 Copilot Chat, while keeping Copilot available for normal work. Their security architect captures these requirements:Must block prompts and files that match specific sensitive info types.Must apply to Microsoft 365 Copilot and Copilot Chat without disabling them.Must be centrally managed with existing data loss prevention controls.Which configuration best meets these requirements?
Answer: B
-
A bank wants to stop users from pasting highly regulated IDs into Microsoft 365 Copilot Chat, while keeping Copilot available for normal work. Their security architect captures these requirements:Must block prompts and files that match specific sensitive info types.Must apply to Microsoft 365 Copilot and Copilot Chat without disabling them.Must be centrally managed with existing data loss prevention controls.Which configuration best meets these requirements?
-
Question 3
-
A group of high-impact administrators in a Microsoft 365 tenant are repeatedly targeted by modern phishing kits that can proxy sign-in pages and steal MFA codes in real time. The security team wants a sign-in method that is resistant to credential theft and MFA code replay, and that ties authentication to a hardware-backed credential. Which authentication method best meets this requirement?
Answer: C
-
A group of high-impact administrators in a Microsoft 365 tenant are repeatedly targeted by modern phishing kits that can proxy sign-in pages and steal MFA codes in real time. The security team wants a sign-in method that is resistant to credential theft and MFA code replay, and that ties authentication to a hardware-backed credential. Which authentication method best meets this requirement?
-
Question 4
-
The HR team at Tailwind Traders has 200 specialists who use Copilot heavily every day across Outlook, Word, Teams, and SharePoint. The CFO wants Copilot costs for this team to be stable and easy to forecast for the next 12 months. Other small project teams will experiment with SharePoint agents, but their usage will be occasional and unpredictable.Which licensing approach best fits the HR specialists?
Answer: D
-
The HR team at Tailwind Traders has 200 specialists who use Copilot heavily every day across Outlook, Word, Teams, and SharePoint. The CFO wants Copilot costs for this team to be stable and easy to forecast for the next 12 months. Other small project teams will experiment with SharePoint agents, but their usage will be occasional and unpredictable.Which licensing approach best fits the HR specialists?
-
Question 5
-
Your organisation stores customer records in SharePoint and plans to let users query them through agents. You want to stop users from accidentally sending credit card numbers to external destinations via Copilot Chat or agents, even if they are allowed to see that data internally. You decide to use Microsoft Purview.In Microsoft Purview, you configure _____ to detect and block this kind of data exfiltration in Copilot interactions.
Answer: B
-
Your organisation stores customer records in SharePoint and plans to let users query them through agents. You want to stop users from accidentally sending credit card numbers to external destinations via Copilot Chat or agents, even if they are allowed to see that data internally. You decide to use Microsoft Purview.In Microsoft Purview, you configure _____ to detect and block this kind of data exfiltration in Copilot interactions.