CertGrid
Microsoft Certification

AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals Practice Exam

Validates foundational skills for supporting, securing and protecting an AI-enabled Microsoft 365 environment - the core features and objects of Microsoft 365 services including licensing, the admin centres and the security model of Microsoft Entra ID, data protection and governance with Microsoft Purview including sensitivity labels, DLP, insider risk, DSPM for AI and SharePoint oversharing, and the basic administration of Copilot and agents covering licences, pay-as-you-go billing, usage monitoring, prompt management and the agent approval and lifecycle process.

Start with a free AB-900 practice test, then work through 610 exam-style questions with full answer explanations, and take timed mock exams to track your readiness against the exam objectives.

Free account: a fixed set of 20 practice questions for this exam, retryable anytime. Paid access unlocks the full bank and timed mock exams. No credit card required to start.

610
Practice pool
40-60 qs
Real exam (typical)
45 min
Real exam time
Foundational
Level
700 / 1000
Passing score

CertGrid runs a fixed 40-question timed mock, separate from the real exam format above.

Objective-mapped practice, aligned to current exam objectives · Reviewed Oct 2026 · Independent practice platform.

What the AB-900 exam covers

Free AB-900 practice test questions

A sample of 10 questions with answers and explanations. A free account includes a fixed set of 20 practice questions for this exam, retryable anytime. Paid access unlocks the full 610-question bank.

  1. Question 1Identify the core features and objects of Microsoft 365 services

    A user reports they cannot see Microsoft 365 Copilot in Word although colleagues can. What should the administrator check first?

    • AWhether a Copilot licence has been assigned to that userCorrect
    • BWhether the user's OneDrive has free storage left
    • CWhether the user belongs to a Teams channel
    • DWhether Copilot has been pinned in the Microsoft 365 app bar
    ✓ Correct answer: A

    Access to Copilot features is gated by the licence assigned to the individual user or inherited through a group, so a user without one sees no Copilot entry points at all while licensed colleagues do. Confirming the assignment in the Microsoft 365 admin center resolves the majority of these reports immediately.

    Why the other options are wrong
    • BA full OneDrive stops files syncing; it does not remove the Copilot entry points from Word.
    • CBelonging to a Teams channel does not grant Copilot access.
    • DPinning only arranges where the Copilot Chat app sits in the navigation bar and does not control Copilot inside Word.
  2. Question 2Understand data protection and governance tasks for Microsoft 365 and Copilot

    A Copilot administrator must explain what happens when a DLP policy is set to audit only. What is the effect?

    • AMatches are recorded without blocking the actionCorrect
    • BMatches are blocked without any record
    • CThe policy has no effect of any kind
    • DThe policy applies only to external recipients
    ✓ Correct answer: A

    Running a new policy in audit mode first shows how often it would trigger and against what content, which lets an administrator tune it before it starts blocking legitimate work. Deploying straight into enforcement is the usual cause of a rushed rollback.

    Why the other options are wrong
    • BAudit mode records matches rather than blocking them.
    • CThe policy does take effect by generating records of matches.
    • DThe policy scope is defined separately from the audit setting.
  3. Question 3Perform basic administrative tasks for Copilot and agents

    A Copilot administrator must explain what a scheduled prompt achieves. What does it do?

    • ARuns a saved prompt automatically at a set time and frequencyCorrect
    • BSaves the prompt to a gallery so colleagues can reuse it
    • CSends the user a reminder to run the prompt at the chosen time
    • DLets an administrator run prompts on a user's behalf
    ✓ Correct answer: A

    Recurring work such as a weekly summary can be set to run on its own, which removes the need for somebody to remember and produces the output consistently. It suits prompts whose value is regular rather than occasional. Reviewing its output occasionally keeps the schedule worthwhile, since a prompt that has stopped being accurate still runs.

    Why the other options are wrong
    • BKeeping a prompt for reuse is a different feature from running one on a schedule.
    • CThe schedule runs the prompt itself rather than prompting the person to run it.
    • DAdministrators control availability and can inventory schedules; users create their own.
  4. Question 4Identify the core features and objects of Microsoft 365 services

    An administrator is asked what happens to a Teams channel's files when the channel is deleted. What follows?

    • AThe channel's folder in the team's site is removed with itCorrect
    • BThe files move to the team's general channel
    • CThe files are emailed to the team members
    • DThe files remain accessible in their original location
    ✓ Correct answer: A

    Because a standard channel's files sit in a folder within the team's site, deleting the channel removes that folder along with its contents, subject to the recycle bin, which surprises teams who assumed the files were stored independently. Moving anything needed beforehand avoids the problem.

    Why the other options are wrong
    • BFiles are not moved to the general channel on deletion.
    • CFiles are not emailed to members when a channel is deleted.
    • DThe original location is removed along with the channel.
  5. Question 5Understand data protection and governance tasks for Microsoft 365 and Copilot

    A risk committee asks what could go wrong if an AI system behaves inconsistently. Which principle covers that?

    • AThat the system should behave consistently and fail safelyCorrect
    • BThat the tenant should never run out of storage
    • CThat people should be able to understand how it reached a decision
    • DThat the people who deploy it remain answerable for it
    ✓ Correct answer: A

    A system whose behaviour varies unpredictably or that fails in ways nobody anticipated causes harm even when it works most of the time, so the principle asks organisations to consider how the system behaves under unusual conditions and what happens when it is wrong.

    Why the other options are wrong
    • BStorage capacity is an operational matter rather than a principle.
    • CThat describes transparency and interpretability, which explain how a decision was reached rather than how the system behaves when conditions change.
    • DThat describes accountability, which places responsibility on the people who build and deploy the system.
  6. Question 6Perform basic administrative tasks for Copilot and agents

    A Microsoft 365 administrator must decide what to do when users ask for a capability Copilot does not provide. What is the honest response?

    • ASay so and record it as a requirement for considerationCorrect
    • BPoint them at a third-party tool outside the tenant
    • CTell them the capability already exists in Copilot
    • DAsk them to raise the request with Microsoft support directly
    ✓ Correct answer: A

    Telling people plainly what the capability does not do preserves credibility, and recording the need means it can be weighed against other work rather than disappearing. Pointing people at an unmanaged tool moves the work outside every control the tenant applies.

    Why the other options are wrong
    • BAn unmanaged tool takes the data outside the tenant's controls.
    • CAsserting a capability that does not exist costs credibility.
    • DSupport handles service problems rather than gathering requirements.
  7. Question 7Identify the core features and objects of Microsoft 365 services

    The estate administrator is asked what happens if the tenant's external sharing is set to allow only existing guests. What follows?

    • AContent can be shared only with people already invitedCorrect
    • BNew guests can also be invited if they verify with a code
    • CAnybody with a link can open the content
    • DExisting guests are limited to view-only permissions
    ✓ Correct answer: A

    The setting permits collaboration with external people already present in the directory while preventing new ones being invited through sharing, which suits an organisation wanting to control who enters. Internal sharing, and the permission level chosen when sharing, are decided separately.

    Why the other options are wrong
    • BInviting new guests who verify with a code is the next setting up, not this one.
    • CAnonymous links are not permitted under that setting.
    • DThe setting decides who may be shared with, not the permission they receive.
  8. Question 8Understand data protection and governance tasks for Microsoft 365 and Copilot

    An operations administrator is asked what makes an insider risk programme acceptable to employees. What matters?

    • ATransparency about what is monitored and whyCorrect
    • BConcealing the programme entirely
    • CMonitoring every message from everybody
    • DPublishing every case to the organisation
    ✓ Correct answer: A

    Programmes that are explained, proportionate and subject to their own controls are generally accepted, whereas covert or unbounded monitoring produces distrust and often falls foul of employment obligations. Transparency also deters some of the behaviour being watched for.

    Why the other options are wrong
    • BConcealing the programme entirely produces distrust when discovered.
    • CMonitoring every message from everybody is disproportionate.
    • DPublishing cases to the organisation breaches privacy severely.
  9. Question 9Understand data protection and governance tasks for Microsoft 365 and Copilot

    The tenant admin must decide what to tell a department whose sensitive content will be restricted. What matters in the message?

    • AWhat changes for them and how to request exceptionsCorrect
    • BWhich policies were changed and when
    • CHow much storage was saved
    • DWhich administrators approved the change and when they did
    ✓ Correct answer: A

    People accept a restriction far better when they know exactly what they will no longer be able to do and have a defined way to raise a case where it obstructs genuine work. Announcing a change without either produces workarounds and complaints.

    Why the other options are wrong
    • BThe policy detail behind the change is not what the department needs to act on.
    • CStorage saved is unrelated to what changes for them.
    • DWho approved it internally does not tell the department what changes for them.
  10. Question 10Understand data protection and governance tasks for Microsoft 365 and Copilot

    An operations administrator is asked what a good outcome from a first classification exercise looks like. What should it produce?

    • AA shared understanding of what the organisation holdsCorrect
    • BA sensitivity label applied to every file in the tenant
    • CA DLP policy running in every supported location
    • DAn owner assigned to every site in the tenant
    ✓ Correct answer: A

    Knowing what categories of sensitive material exist, roughly how much and where it sits is what lets an organisation design proportionate controls, and expecting complete labelling or blanket policies from a first exercise sets an unachievable bar. The understanding is the deliverable.

    Why the other options are wrong
    • BLabelling every file is not achievable from a first exercise.
    • CA DLP policy everywhere presumes the understanding not yet gained.
    • DAssigning owners is useful but is not what classification produces.

Who this AB-900 practice exam is for

This practice set is for anyone preparing for the AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals exam at the foundational level - from first-time candidates building a foundation to experienced Microsoft practitioners doing a final review before test day. If you learn best by working through realistic questions and reading why each answer is right or wrong, it is built for you.

How to use this AB-900 practice exam

  1. Start with the free sample questions above to gauge your current baseline.
  2. Read the full explanation on every question, including why each wrong option is wrong.
  3. Track your weak domains and focus your study where you are losing the most marks.
  4. Once you are scoring consistently well, take a timed, full-length mock exam.
  5. Use your readiness score to decide when you are ready to book the real AB-900 exam.

Related Microsoft resources

AB-900 practice exam FAQ

How many questions are in the AB-900 practice exam on CertGrid?

CertGrid has 610 practice questions for AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals, covering 3 exam domains. The real AB-900 exam runs 45 min (65 min seat time), typically with 40-60 questions. Microsoft publishes 40-60 questions as a typical range across its exams and states the number varies by exam; it does not publish a count for this one. CertGrid's timed mock is a fixed 40 questions.

What is the passing score for AB-900?

Microsoft grades AB-900 on a scaled score of 1 to 1000 with 700 required to pass; the scaled score is not a straight percentage. CertGrid reports your percent-correct on this mock separately as a readiness indicator. You have about 45 min to complete it. CertGrid tracks your readiness against the exam objectives so you know where to focus.

Are these official AB-900 exam questions?

No. CertGrid is an independent practice platform. We do not provide real or leaked exam questions. Our questions are original and designed to help you practice the concepts, scenarios, and difficulty style of the AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals exam.

Is there a free AB-900 practice test?

Yes. You can take a free AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals practice test straight away: a fixed set of 20 practice questions for this exam, retryable as often as you like, with no credit card required. You get readiness scoring and a weak-domain breakdown on those questions. Paid plans unlock the full 610-question bank, timed mock exams and full-bank domain analytics.

What CertGrid is (and is not)

CertGrid is an independent IT certification practice platform for Azure, AWS, Google, Cisco, Security, Linux, Kubernetes, Terraform, and other certification tracks. It provides objective-mapped practice questions, readiness scoring, weak-domain drills, and explanations to help learners understand what to study next.

Independent & original. CertGrid is an independent practice platform and is not affiliated with or endorsed by Microsoft. Questions are original practice items designed to mirror certification concepts and exam style. CertGrid does not provide official exam questions or braindumps.