- AB-900 is scored on a 700/1000 scale, not a raw percentage - see the AB-900 Passing Score breakdown.
- Data protection and governance is the largest domain at 35-40%, so it deserves the most study time.
- The exam itself runs 45 minutes inside a 65-minute proctored appointment via Pearson VUE (Certiport for students/educators).
- No prior credential, degree, or training hours are required - only working familiarity with Microsoft 365, identity, governance, and Copilot administration.
What AB-900 Actually Tests
AB-900 is Microsoft's Microsoft 365 Copilot and Agent Administration Fundamentals exam, administered through Pearson VUE (with Certiport also available for students and educators). It's a Fundamentals-level credential, which means it isn't checking whether you can architect a tenant from scratch - it's checking whether you understand the core objects, governance controls, and administrative workflows an organization needs before and after rolling out Copilot and agents across Microsoft 365.
If you've spent any time researching what AB-900 actually is or looked into the meaning behind the AB-900 name, you already know the acronym gets reused across unrelated industries. This guide, and everything on this site, refers exclusively to the Microsoft credential - nothing else.
The Three Domains, Broken Down
Microsoft groups AB-900 content into three domains, and the weighting tells you exactly where to focus. For a deeper dive into each area, the AB-900 Exam Domains Guide covers every sub-topic in detail - but here's the version you need for planning study time.
Domain 1: Identify the core features and objects of Microsoft 365 services (30-35%)
This domain checks whether you know the building blocks - the services, licensing objects, and administrative surfaces that Copilot and agents sit on top of.
- Core Microsoft 365 service categories and how they relate to each other
- Identity and access fundamentals as they apply to Copilot-enabled tenants
- Where administrative controls live across the Microsoft 365 admin surfaces
Domain 2: Understand data protection and governance tasks for Microsoft 365 and Copilot (35-40%)
This is the largest domain on the exam, and it's the one candidates most often underestimate. It covers how sensitive data is classified, labeled, and controlled before Copilot or agents can safely interact with it.
- Data governance concepts that determine what Copilot can and cannot surface
- How protection policies interact with agent behavior across Microsoft 365 content
- Administrative responsibility for compliance boundaries in Copilot deployments
Domain 3: Perform basic administrative tasks for Copilot and agents (25-30%)
This domain is the most hands-on in flavor, focused on the actual administrative actions tied to Copilot and agent management.
- Enabling, configuring, and managing Copilot experiences at a tenant level
- Basic agent lifecycle administration tasks
- Monitoring and troubleshooting fundamentals for Copilot/agent administration
Key Takeaway
Spend roughly proportional time to domain weight - but bias slightly toward Domain 2. It's the biggest slice of the exam and the one most likely to trip up candidates who studied Copilot features but skipped governance mechanics.
Exam Format, Timing & Registration Mechanics
AB-900 is delivered as a proctored, computer-based exam, and Microsoft has listed possible interactive item types alongside standard multiple-choice questions - though the exact format mix isn't publicly disclosed. Here's what is confirmed:
- Exam time: 45 minutes of actual exam time within a standard 65-minute appointment (the extra time covers check-in, NDA, and instructions).
- Delivery: Proctored, computer-based, with supported remote delivery options.
- Language: English is listed as an available language.
- Resources: No in-exam access to Microsoft Learn documentation - you're tested on recall and applied understanding, not lookup skills.
- Registration channels: Pearson VUE is the primary testing provider; Certiport is also listed specifically for students and educators.
On cost: a commonly cited third-party figure floats around US$99, but that number is not confirmed as the official current U.S. checkout price. Treat it as a reference point, not a guarantee - and remember that exam fees, any prep materials, and Copilot licensing costs (if you need hands-on practice access) are billed separately. For a fuller pricing breakdown, see the AB-900 Certification Cost guide, and check the AB-900 Exam Dates page before you lock in a scheduling window, since content updates can shift what's covered.
Passing Score & What "700" Really Means
AB-900 uses a scaled score out of 1000, and the passing threshold is 700. This is not the same as needing 70% of questions correct - scaled scoring weighs items differently, so raw percentage math doesn't map cleanly onto the pass line. Microsoft doesn't publish the exact total, scored, or unscored item counts for this exam, and the commonly referenced "40-60 questions" range that applies broadly across Microsoft exams isn't a confirmed guarantee for AB-900 specifically.
Pass rates for AB-900 are also not publicly disclosed by Microsoft. Any specific percentage you see elsewhere should be treated skeptically unless it cites a verifiable source - for more on this, the AB-900 Pass Rate analysis walks through what is and isn't actually known.
Key Takeaway
Don't chase a percentage target while studying. Aim for solid, even coverage across all three domains so that scaled scoring works in your favor rather than exposing a weak spot in one area.
Who Takes AB-900 and Who Hires For It
AB-900 has no formal prerequisites - no required degree, no prior certification, no mandated training hours. Microsoft does expect candidates to already be comfortable with general Microsoft 365 administration, identity concepts, governance basics, and some exposure to how Copilot fits into an organization's tenant. Full eligibility details are covered in the AB-900 Requirements guide.
In practice, this credential tends to appeal to:
- Microsoft 365 administrators expanding into Copilot and agent governance responsibilities
- IT generalists who need to demonstrate baseline fluency before taking on Copilot rollout projects
- Compliance and governance staff who need to speak the same language as the admins deploying Copilot
- Students and career-changers using Certiport access to build a foundational Microsoft credential
Because this is a Fundamentals-tier certification, it's generally positioned as a proof-of-baseline-knowledge credential rather than a senior-role gatekeeper. If you're weighing whether the investment is worthwhile for your specific career path, the ROI analysis and the salary guide both dig into that question without inventing numbers that aren't publicly available.
A Domain-Weighted Study Timeline
Generic study advice (flashcards, timed review blocks, spaced repetition) only helps if it's mapped to AB-900's actual weighting. Here's a four-week structure built around the domain percentages rather than a one-size-fits-all template.
Foundations - Domain 1
- Map out core Microsoft 365 services and how they connect to each other
- Review identity and access basics relevant to Copilot-enabled environments
- Get comfortable navigating the admin surfaces referenced in the credential outline
Deep Dive - Domain 2
- Spend the most hours here since it's 35-40% of the exam
- Study how data classification and protection policies shape what Copilot can access
- Practice reasoning through governance scenarios, not just memorizing policy names
Applied Administration - Domain 3
- Walk through Copilot enablement and configuration steps end to end
- Cover basic agent lifecycle management tasks
- Run full-length timed practice under the 45-minute exam constraint
For a compact reference during your final review pass, keep the AB-900 Cheat Sheet handy, and use our practice test platform to simulate the actual timing pressure before exam day.
Mistakes That Sink First-Time Candidates
Most people who fail AB-900 on the first try don't fail because the material is obscure - they fail because their prep didn't match the exam's actual shape. Common patterns:
- Overweighting Domain 3 because it feels the most "hands-on." It's actually the smallest domain at 25-30%. Governance content (Domain 2) deserves more hours, not fewer.
- Assuming raw percentage math applies to the pass line. A 700/1000 scaled score isn't the same as 70% correct - see the passing score explainer for the distinction.
- Skipping registration mechanics. Not confirming whether you're testing through Pearson VUE or Certiport, or misjudging the 65-minute appointment window versus the 45-minute exam time, can create unnecessary exam-day stress.
- Studying features in isolation from governance context. AB-900 repeatedly links Copilot/agent administration back to data protection - memorizing a feature list without understanding its governance implications leaves gaps.
- Underestimating difficulty because it's "Fundamentals." The difficulty guide breaks down why Fundamentals-level doesn't mean trivial, especially for candidates without hands-on Microsoft 365 admin experience.
Key Takeaway
Treat the exam as three interconnected domains, not three separate quizzes. Copilot administration decisions in Domain 3 only make sense in light of the governance rules covered in Domain 2.
| Domain | Weight | Primary Focus |
|---|---|---|
| Domain 1: Core Microsoft 365 features and objects | 30-35% | Foundational services, licensing, identity basics |
| Domain 2: Data protection and governance | 35-40% | Classification, protection policies, Copilot governance boundaries |
| Domain 3: Copilot and agent administration | 25-30% | Enablement, configuration, agent lifecycle, monitoring |
Frequently Asked Questions
No. There's no formal prerequisite - no degree, prior credential, or mandated training hours. Microsoft does expect general familiarity with Microsoft 365, identity, governance, and Copilot administration concepts going in. See the requirements guide for full details.
The scored exam time is 45 minutes, delivered inside a standard 65-minute proctored appointment that includes check-in and instructions.
A scaled score of 700 out of 1000. This isn't equivalent to 70% of questions answered correctly, since scaled scoring weighs items unevenly - full explanation in the passing score breakdown.
Data protection and governance (Domain 2), since it carries the largest weight at 35-40% and underpins concepts tested in the other two domains as well.
No. As a Fundamentals-level certification, AB-900 does not expire and has no renewal assessment or continuing-education requirement once you pass.