10 exam-style questions with answers and explanations, straight from our 1,030-question bank. Tap an answer to check yourself. When you're ready, take the scored version in the free practice test.
These 10 free AB-900 questions are organized by exam domain, so you can see how each part of the Microsoft 365 Certified: Copilot and Agent Administration Fundamentals blueprint is tested. Reveal the answer and explanation under each question.
A failed Microsoft 365 sign-in has this record: password succeeded; MFA succeeded; device noncompliant. An enforced Conditional Access policy requires both MFA and a compliant device. A matching location-block policy is in report-only mode, and no other requirement is unmet. What resolves this failure without weakening the policies?
Correct answer: D - Retry from a device that meets the enforced compliance requirement.
Members can still open the Bid Review private channel's documents in Teams, but an inventory of the parent team's SharePoint site does not contain them. Which storage location was omitted from the inventory?
Correct answer: A - The separate SharePoint site provisioned for the private channel.
An engineer has an eligible SharePoint Administrator assignment in Microsoft Entra PIM but cannot perform an approved maintenance task. The role has not been activated. Its activation settings require MFA and a justification, and permit enough time for the work. How should the engineer gain access without receiving broader or permanent privileges?
Correct answer: D - Activate the eligible role with the required MFA and justification.
During a Copilot pilot, an employee outside HR receives salary figures from an HR workbook and can also open it directly in SharePoint. The workbook has unique permissions: the HR group has Edit, and an accidental Read grant to Everyone except external users is the only access path for other staff. HR must keep using the workbook. Which change addresses the exposure at its source?
Correct answer: B - Remove the broad Read grant and retain the HR permissions.
In September 2026, an administrator reviews a SharePoint document created on March 15, 2020, and last modified on March 15, 2024. Three Purview policies apply: retain for seven years from creation, retain for five years from last modification, and delete three years after creation. There are no other holds or policies, and no further edits occur. Under these unchanged settings, in which year can permanent deletion first become eligible?
Correct answer: C - 2029, because the last-modified retention requirement ends latest.
A custom sensitive information type causes Purview DLP to block a supplier spreadsheet by mistaking product serial numbers for national identifiers. An authorized reviewer checks the matches and confirms that the file contains no protected information. The organization must continue blocking genuine identifiers. Which response corrects the detection problem while retaining that protection?
Correct answer: C - Record a false positive and narrowly refine the detector's matching criteria.
A departing employee downloads an unusual volume of customer files and then uploads copies to a personal cloud account. Individual DLP alerts exist, but investigators need to correlate the employee's actions over time and review their context before drawing conclusions. Which investigation approach best addresses that gap?
Correct answer: A - Review the activity sequence in Insider Risk Management.
Procurement needs two deliverables: a source-cited supplier comparison using internal planning documents and public information, and an analysis of purchasing CSV files to find spending outliers. Researcher and Analyst are both available to the team. Which allocation matches their intended strengths?
Correct answer: A - Researcher for the supplier comparison; Analyst for the purchasing data.
A Copilot pilot has 250 enabled users. Over the same 28-day period, 100 used Copilot in Word, 90 used it in Teams, and 30 used it in both; there was no other Copilot activity. The sponsor's remaining expansion requirement is that at least 70% of enabled users have used Copilot. All other rollout requirements are met. What does the report indicate?
Correct answer: B - 64% are active; the adoption requirement for expansion has not been met.
A SharePoint-agent pilot includes eligible Microsoft 365 users without the Copilot add-on. They can open the agent file and its source documents. An administrator creates an Azure-backed billing policy, adds the pilot security group, and verifies its membership. No pay-as-you-go service is connected to the policy yet. What completes the intended metered-access setup?
Correct answer: C - Connect SharePoint agents to the existing billing policy.
The full bank has 1,020 more AB-900 questions with explanations.
Continue in the free practice test →
View plans