dc dotCreds
Daily, exam-focused micro practice

Free AB-900 practice test

Know why every answer is right or wrong.

Every answer explained with source-backed reasoning No guessing Progress tracked Questions updated at May 13, 2026, 5:25 AM CDT
Exam breakdown Top domains in this AB-900 bank
Microsoft 365 Services, Admin Centers, Identity, And Access 38%
About 90 items in this bank
Data Protection, Governance, Compliance, And Responsible AI 36%
About 86 items in this bank
Copilot Administration, Agents, Usage, Billing, And Adoption 26%
About 62 items in this bank

What AB-900 covers: Microsoft 365 Services, Admin Centers, Identity, And Access (38%) • Data Protection, Governance, Compliance, And Responsible AI (36%) • Copilot Administration, Agents, Usage, Billing, And Adoption (26%)

New set every day. Start today's questions before they rotate.

AB-900 icon

AB-900

Microsoft 365 Copilot and Agent Administration Fundamentals (AB-900)

What you get immediately

  • A real AB-900 question first, not a wall of copy
  • Correct answer plus per-choice explanation
  • Source link for follow-up study
  • Free daily set, then full-bank Pro when you want more
Question 1 of 10
Objective 3.5 Copilot Administration, Agents, Usage, Billing, And Adoption

Which of the following is true regarding Agent Builder in Microsoft 365 Copilot?

Concept tested: Identify Copilot agents concepts, including what agents are, how they extend Copilot, and where they are managed.

A. Correct: This because Agent Builder offers an immediate, interactive AI development experience that's perfect for quick and straightforward projects.

B. Incorrect: This because Agent Builder is designed to be accessible without requiring advanced programming skills.

C. Incorrect: This because Agent Builder is not available on mobile versions of the apps and sites listed in the article.

D. Incorrect: This because you can test the agent before deploying it for use in your conversations with Microsoft 365 Copilot.

Why this matters: This matters because understanding how to effectively utilize Agent Builder enhances productivity by allowing quick creation and customization of agents tailored to specific organizational needs.
Question 2 of 10
Objective 2.9 Data Protection, Governance, Compliance, And Responsible AI

Which Data access governance activity report tracks sites where content was shared with Everyone except external users in the last 28 days?

Concept tested: Data Protection, Governance, Compliance, And Responsible AI

A. Correct: The EEEU activity report tracks sites where content was shared broadly with internal users in the last 28 days.

B. Incorrect: The site permissions report is a snapshot report that shows the current permission structure, not recent EEEU activity.

C. Incorrect: The sensitivity label for files report identifies labeled content, not EEEU sharing activity.

D. Incorrect: Site access review is a remediation action, not the activity report that tracks EEEU sharing.

Why this matters: This report helps admins spot broad internal exposure that can increase oversharing risk before or during Copilot deployment.
Question 3 of 10
Objective 1.7 Microsoft 365 Services, Admin Centers, Identity, And Access

You are tasked with evaluating your organization's identity security posture and receiving recommendations for improvement. Which Microsoft Entra feature would you use to achieve this?

Concept tested: Identify Microsoft Entra features including PIM, app registrations, enterprise applications, sign-in logs, and Identity Secure Score.

A. Incorrect: App registrations are used for managing applications that your organization uses, not for evaluating security posture.

B. Incorrect: PIM is used to manage and monitor privileged access within the organization but does not provide a dashboard for overall identity security evaluation.

C. Incorrect: Sign-in logs allow you to review user sign-in activities but do not offer insights or recommendations for improving the security of your identity environment.

D. Correct: Identity Secure Score provides a dashboard with insights and recommendations for improving the security posture of your identity environment.

Why this matters: This matters because using Identity Secure Score helps organizations identify potential weaknesses in their identity protection measures and take proactive steps to enhance security.
Keep the momentum

You're 3 questions in. Want the full bank?

Unlock the full question set, timed exam mode, practice mode, saved progress, previous tests, and readiness scoring.

Unlock this exam

228 more questions, timed exam mode, and saved history are waiting in the full unlock.

Question 4 of 10
Objective 3.1 Copilot Administration, Agents, Usage, Billing, And Adoption

Which admin center is required to assign Microsoft 365 Copilot licenses?

Concept tested: Copilot Administration, Agents, Usage, Billing, And Adoption

A. Correct: The Microsoft 365 admin center is used to assign Copilot licenses, as mentioned in the .

B. Incorrect: The SharePoint admin center is used for specific tasks related to SharePoint but not for assigning Copilot licenses.

C. Incorrect: The Microsoft Purview portal is involved in data governance and compliance but not directly in assigning Copilot licenses.

D. Incorrect: Microsoft Entra ID (AAD) manages identities and access but does not handle the assignment of Microsoft 365 Copilot licenses.

Why this matters: This decision affects how teams enforce standards, limit risk, and observe the environment over time.
Question 5 of 10
Objective 2.1 Data Protection, Governance, Compliance, And Responsible AI

Which Microsoft Purview feature applies labels that stay with files and emails so protection can travel with the content?

Concept tested: Data Protection, Governance, Compliance, And Responsible AI

A. Correct: Sensitivity labels travel with the labeled content and can keep protection attached to the file or email.

B. Incorrect: DLP applies policies to detect and protect sensitive data, but it is not the labeling feature that stays with the content.

C. Incorrect: Information Barriers restrict collaboration paths rather than labeling content.

D. Incorrect: Insider Risk Management investigates risky activity, not content labeling that travels with files and emails.

Why this matters: Admins need to know which protection follows the content itself versus which controls operate at policy or user-behavior level.
Question 6 of 10
Objective 1.1.1 Microsoft 365 Services, Admin Centers, Identity, And Access

Which section of the Microsoft 365 admin center allows you to create and manage groups such as Microsoft 365 group, Teams, distribution group, security group, or shared mailbox?

Concept tested: Microsoft 365 Services, Admin Centers, Identity, And Access

A. Incorrect: Manage users focuses on adding, deleting, or resetting passwords for individual users rather than creating groups.

B. Correct: It directly allows you to create and manage different types of groups such as Microsoft 365 group, Teams, distribution group, security group, or shared mailbox.

C. Incorrect: Roles are related to assigning built-in roles in Microsoft Entra ID for access control rather than creating groups.

D. Incorrect: Billing handles financial aspects like viewing and managing subscriptions but does not involve the creation of groups.

Why this matters: Admins need this distinction to assign the right access or governance control without over-permissioning.
Question 7 of 10
Objective 3.2 Copilot Administration, Agents, Usage, Billing, And Adoption

In the Microsoft 365 admin center, which page shows how many Microsoft 365 Copilot licenses are available before you assign them?

Concept tested: Copilot Administration, Agents, Usage, Billing, And Adoption

A. Correct: Billing > Licenses shows the available licenses for the product before assignment.

B. Incorrect: Active users is where admins manage licenses for specific users after choosing the product licenses to assign.

C. Incorrect: Settings & options does not show the product license inventory used for Copilot assignment.

D. Incorrect: Security & compliance is unrelated to reviewing available Copilot license quantities.

Why this matters: Admins need to check available license inventory before they start assigning Copilot access to users.
Question 8 of 10
Objective 2.7 Data Protection, Governance, Compliance, And Responsible AI

Which of the following best describes how Microsoft 365 Copilot ensures it does not overshare sensitive information within an organization?

Concept tested: Identify responsible AI and Copilot security controls such as grounding, permissions, prompts, and oversharing risk.

A. Incorrect: This because Microsoft 365 Copilot operates within existing permissions and access controls, preventing oversharing of sensitive information.

B. Correct: This because while data residency rules are important for compliance, they do not directly address the issue of oversharing sensitive information.

C. Incorrect: This because although encryption is crucial for protecting user communications, it does not specifically prevent oversharing based on existing permissions and access controls.

D. Incorrect: This because while a multi-layered security approach is part of Microsoft's defense-in-depth strategy, it is not the primary control that prevents oversharing.

Why this matters: This matters because Microsoft 365 and Copilot questions test which control handles the specific data protection, compliance, or governance job in the scenario.
Question 9 of 10
Objective 1.2 Microsoft 365 Services, Admin Centers, Identity, And Access

As a Microsoft 365 administrator, which action is prohibited when attempting to assign licenses for a subscription purchased by an individual user through self-service?

Concept tested: Identify how license assignment controls access to Microsoft 365 services and Copilot-related capabilities.

A. Incorrect: Assigning licenses directly from the Active Users page is allowed as long as it's not for a self-service purchase subscription.

B. Incorrect: Taking over and managing a purchase or trial subscription allows you to assign or unassign licenses after taking control of the subscription.

C. Incorrect: Adding users and assigning licenses simultaneously can be done through the admin center, but this option does not address the limitation with self-service purchases.

D. Correct: Cannot assign licenses for a self-service purchase subscription because administrators are restricted from modifying these subscriptions directly.

Why this matters: This matters because understanding limitations on license assignment prevents unauthorized access and misuse of purchased services.
Question 10 of 10
Objective 3.7 Copilot Administration, Agents, Usage, Billing, And Adoption

When setting up Microsoft 365 Copilot pay-as-you-go billing, what is the initial step an administrator needs to take to configure usage-based pricing for specific scenarios?

Concept tested: Identify billing and metering concepts for Copilot agents and pay-as-you-go usage.

A. Incorrect: This because enabling user access is not the initial step; it follows after setting up the billing policy.

B. Incorrect: This because setting spending budgets and turning off services are management actions, not setup steps.

C. Correct: This because adding a billing policy is the first required step to initiate pay-as-you-go billing.

D. Incorrect: This because understanding adoption patterns is part of evaluating usage but not an initial setup action.

Why this matters: This matters because correctly setting up the billing process ensures accurate tracking and management of costs for Copilot services.
Free preview complete

You've reached the free preview.

Go beyond sample questions with the full source-backed bank, objective practice, exam mode, saved progress, and readiness scoring.

238 verified questions are ready behind the full unlock.

More practice in the app

Keep studying AB-900 in the app

You finished the free web set. The app gives you a larger rotating bank, weak-domain drills, readiness tracking, and longer mobile review.

Download on the App Store
Go Pro

Unlock the full AB-900 bank.

Get the full source-backed bank, timed exam mode, practice mode, saved progress, previous tests, and readiness scoring for this exam.

238 full-bank questions Every choice explained Exam Mode and Practice Mode Question sets and random tests Readiness score and trends Previous test box scores

You've answered 0/10 free questions today.

Locked: 228 more questions in the full bank.

Locked: exam simulation mode and end-of-exam review.

Today's free set refreshes soon. Upgrade to continue with the full bank.

Question sets Random tests Timed Exam Mode Practice Mode feedback Readiness tracking Previous tests and domain breakdowns Full explanation review No ads

Unlock this exam, or compare the career path and bundle options when you want a broader guided route.

Compare paths and bundles
Secure checkout powered by Stripe. Source-backed questions. Not brain dumps. Daily audit checks. Reported issues are reviewed and repaired.

Today’s Set
10 questions
Daily set rotates at 10:00 AM local time
Progress
0/10
Answered on this page session
Accuracy
0%
Loading countdown…

7-day score keeper

Answer questions today and this will become a rolling 7-day scorecard.

Local history
Optional progress sync

Keep today’s practice moving

Guest progress saves automatically on this device. Add an email later when you want a magic link that keeps your daily AB-900 practice in sync across browsers.

Guest progress saves on this device automatically

Guest progress is available without an account.

238 verified questions are currently in the live bank. Questions updated at May 13, 2026, 5:25 AM CDT. The daily set rotates at 10:00 AM local time, and each explanation links back to the source used to write it. Use the web set for quick practice, then switch to the app when available for larger banks and deeper review.

Careers and fields this exam supports

AB-900 is most useful when your work touches Microsoft 365 Copilot, agent administration, governance, adoption, or business-side AI rollout.

  • Role examples: Microsoft 365 administrator, Copilot rollout lead, enablement specialist, and business systems analyst.
  • Where it shows up: AI adoption, productivity tooling, M365 administration, governance, and internal enablement.
  • On-the-job payoff: you need to explain where Copilot and agent controls fit inside the Microsoft stack.
  • Typical next step: It sits well beside AI-901 and the business-AI Microsoft exams when adoption and governance matter more than model engineering.
What matters more on AB-900

AB-900 is really an administration-and-governance exam. It rewards knowing where Microsoft 365 Copilot and agent controls fit inside the stack, not broad AI theory.

  • Current emphasis in this bank: Microsoft 365 Services, Admin Centers, Identity, And Access (38%).
  • Slow down on questions where Copilot features sound similar but the real distinction is tenant control, admin scope, security posture, or rollout responsibility.
  • Best official starting point: Microsoft Certified: Microsoft 365 Copilot and Agent Administration Fundamentals.
How to pass AB-900

The fastest path is to turn this exam into a repeatable pattern-recognition loop instead of a one-time cram session.

  • Start with the free daily set closed-book so you can see which parts of the cloud and it lane still feel weak.
  • Use every explanation as a checkpoint for why the right answer fits the scenario and why the other answer choices do not.
  • Open the official Microsoft source when a concept keeps missing so you fix the gap at the source instead of rereading generic notes.
  • Use the nearby cert pages when you need broader context around the same job path or technology stack.
Common mistakes on AB-900

The usual misses happen when learners recognize keywords but do not slow down enough to match the scenario to the exact decision the exam is testing.

  • Reading for one familiar keyword and skipping the deeper clue that tells you which cloud and it concept actually fits.
  • Memorizing isolated terms without checking why the right answer wins over the other answer choices in the same scenario.
  • Ignoring the official Microsoft source after a miss and hoping the next question will feel easier on its own.
  • Studying this page in isolation when one nearby cert page could clear up the broader pattern much faster.
How to use this AB-900 practice page

The fastest path is simple: answer the set, review the reasoning, then use the score history and source links to decide what to hit next.

  • Answer the free set first without looking anything up so the score reflects what is actually sticking.
  • Read every explanation, especially the wrong answer choices, so the weaker options stop looking plausible next time.
  • Open the linked source when a concept feels weak, then come back and repeat the question flow while the wording is fresh.
  • Use the 7-day score keeper, related cert links, and comparison pages to decide what to study next instead of guessing.
  • Move into the app when you want the full bank, timed reps, readiness tracking, and a steadier mobile study loop.
Official exam resources

Use these official Microsoft resources alongside the daily practice set. They cover the provider's own exam page, study guide, or prep material.

Need adjacent Microsoft practice pages too? Microsoft practice hub.

Video walkthroughs

Prefer to watch a few AB-900 questions first? Use the AB-900 video hub for short answer breakdowns and longer review sessions, then come back here for the daily scored set.

FAQ

How are AB-900 questions generated?

dotCreds builds AB-900 practice questions from Microsoft Learn documentation and product references, with official or primary sources preferred first. The questions are written for realistic study practice, not copied from exam dumps.

How are explanations sourced?

Each question includes a source-backed explanation and a link to the documentation or reference used to validate the answer. If an official page is too broad, dotCreds uses a reputable answer-level reference instead of pretending a generic page proves the answer.

What score do I get?

The page tracks today's answered count and accuracy for the 10-question daily set, then saves a 7-day score history on this device so you can see your recent practice trend.

Why use this site?

The site is the fastest way to start AB-900 practice without installing anything. It is built for daily recall, quick weak-topic discovery, and source-backed explanations you can review immediately.

Why use the app when available?

The web page is the quick free sampler. If a dotCreds app is available for AB-900, the app is better for larger banks, focused weak-domain drills, longer review sessions, and mobile study routines.