Microsoft 365 Copilot and Agent Administration Fundamentals AB-900 Exam Questions

Page: 1 / 14
Total 75 questions
Question 1

A user named User1 is responsible for quarterly sales reporting.

User1 needs to identify performance trends, generate visual insights, and create a summary of anomalies across multiple files that contain various datasets.

What should you use



Answer : D

The correct answer is D. the Analyst agent in Microsoft 365 Copilot. Microsoft Learn training for Microsoft 365 Copilot specifically distinguishes the Analyst agent as the tool for gathering insights from data and enhancing data presentations. Microsoft's guidance also notes in the Researcher FAQ that when the task is spreadsheet-related, Analyst agent is better suited for Microsoft Excel related tasks. This makes Analyst the best choice for a quarterly sales reporting scenario that involves detecting performance trends, surfacing anomalies, and producing visual insights from multiple datasets.

The other options are less suitable. Researcher is intended for complex multi-step research and source-cited reports across web and work content, not specialized data analysis across files. Microsoft 365 Copilot Search is for finding information, not for deep quantitative analysis and anomaly summarization. Copilot in Excel is powerful for workbook-level analysis, but the question emphasizes broader insight generation across multiple files and asks for the best Copilot experience for trends, visuals, and anomaly summaries. Microsoft positions Analyst as the dedicated agent for that kind of data-analysis workflow.


Question 2

Your organization has a Microsoft 365 subscription.

You need to evaluate your organization's Identity Secure Score.

Which two factors affect the score? Each correct answer presents a complete the solution.

NOTE: Each correct selection is worth one point.



Answer : B, C

The correct answers are B and C. Microsoft documents that Identity Secure Score in Microsoft Entra is based on identity security recommendations, including recommendations such as ''Designate more than one Global Administrator'' and ''Do not expire passwords.'' Those recommendations directly map to the number of global administrators and whether passwords are set to never expire, so both factors affect the score.


Question 3

Your organization has a Microsoft 365 subscription.

You need to evaluate your organization s Identity Secure Score.

Which two factors affect the score? Each correct answer presents a complete the solution.

NOTE: Each correct selection is worth one point.



Answer : A, D

The correct answers are A and D because Microsoft Entra Identity Secure Score is based on identity security recommendations, and Microsoft Learn specifically lists recommendations such as ''Designate more than one Global Administrator'' and ''Do not expire passwords.'' That means the number of global administrators in the tenant and whether password expiration is disabled directly influence the Identity Secure Score. Microsoft also notes that the score measures how closely an organization aligns with Microsoft's recommended identity security best practices.

Option B is incorrect because SharePoint site permissions are related to SharePoint and Microsoft 365 workload permissions, not to the Entra identity-focused scoring model. Option C is incorrect because user location may be evaluated in Conditional Access and Zero Trust scenarios, but it is not itself listed as a direct Identity Secure Score factor in the Microsoft Entra recommendations referenced by Microsoft Learn. Identity Secure Score is driven by tracked identity recommendations and security configurations, not by simple geographic placement of users.


Question 4

Your company requires that all Microsoft SharePoint sites have a minimum of two owners.

You need to ensure that sites that have less than two owners are marked as read-only if the sites are NOT remediated.

What should you configure in the SharePoint admin center?



Answer : C

The correct answer is C. Site lifecycle management. In the SharePoint admin center, Microsoft includes a Site ownership policy under Site lifecycle management that can identify sites with too few owners and drive remediation. Microsoft documents that this policy can detect sites with fewer than the required number of owners, notify site owners, and if the issue is not fixed, enforce an action such as making the site read-only. That directly matches the requirement that sites with fewer than two owners be marked as read-only when they are not remediated.

The other options do not fit this scenario. Site-level access restriction is about controlling who can access a site, not enforcing ownership-count governance. Data access governance reports help identify oversharing and permissions exposure, but they do not enforce a minimum-owner remediation policy that makes sites read-only. Block download policy for SharePoint and OneDrive is used to restrict downloading from unmanaged devices or similar access scenarios, not to handle insufficient site ownership. Therefore, the Microsoft-documented feature to configure is Site lifecycle management.


Question 5

Your organization has a Microsoft 365 E5 subscription.

You need to prevent users from sharing corporate financial data to external users. What should you use?



Answer : B

The correct answer is B. data loss prevention (DLP) policies. Microsoft Learn states that Microsoft Purview Data Loss Prevention helps organizations identify, monitor, and automatically protect sensitive information across Microsoft 365 locations such as Exchange, SharePoint, OneDrive, Teams, and devices. Microsoft specifically documents scenarios for preventing sensitive items from being shared with external users in SharePoint and OneDrive, and DLP policies can also block or restrict sharing based on sensitive information types, labels, or policy conditions. This is exactly the control used when the requirement is to stop users from sharing corporate financial data outside the organization.

Option A is incorrect because retention labels manage how long content is kept or deleted, not whether it can be shared externally. Option C is incorrect because role groups are used for permissions and administrative access delegation, not content-sharing prevention. Option D is incorrect because Insider Risk Management is designed to detect and investigate risky user behavior, not to directly block external sharing transactions in the way DLP policies do. For proactive enforcement of external-sharing restrictions on sensitive financial information, Microsoft's documented solution is DLP policies.


Question 6

Your company has a Microsoft SharePoint site named Site1. Site1 contains all the policies of the company s HR department. The policies are saved as Microsoft Word documents.

All users have read access to Site1.

The HR department manager reports that user requests about the policies are NOT being addressed in a timely manner, especially around major holidays.

You need to recommend a solution to enable the users to find the HR department policies. The solution must provide the users with a list of common queries and ensure that responses are grounded only in Site1.

What should you include in the recommendation?



Answer : C

The correct answer is C. a custom Microsoft 365 Copilot agent. Microsoft Learn explains that Agent Builder in Microsoft 365 Copilot lets you create agents with specific instructions, dedicated knowledge sources, and starter prompts. Starter prompts are designed to help users understand the most common supported scenarios, which directly matches the requirement to provide users with a list of common queries. Microsoft also documents that an agent can be grounded in selected SharePoint sites, folders, or files, allowing the response scope to be targeted to the HR policy content in Site1 rather than broad enterprise or web data.

The other options do not fit the requirement. Copilot in Word is document-focused and is not intended to create a reusable, shared query experience grounded only in one SharePoint source. Copilot notebooks group materials and chats, but they are not the right tool for publishing a guided HR policy assistant with starter prompts. Researcher is designed for broader, multi-step research using work data and web content, so it does not satisfy the requirement to keep answers grounded only in Site1.


Question 7

A user named User1 creates a Microsoft 365 Copilot agent named Agent1 and shares the agent to a user named User2. What occurs if an admin blocks Agent1?



Answer : B

The correct answer is B. Microsoft documents that admins can block agents in the Microsoft 365 admin center, and when administrators block Microsoft agents such as Researcher and Analyst, those agents are made inaccessible to all users in the tenant. Microsoft's agent management guidance also states that admins can manage agent lifecycle and access centrally, including blocking or removing agent availability across the organization.


Page:    1 / 14   
Total 75 questions