AB-900 exam questions explained by domain (with answers)

Question 1. Before enabling Copilot for a pilot group, the administrator must verify accepted domains and tenant-wide organization preferences. What should they use? Options: Microsoft 365 admin center; user or group-based licensing; Exchange admin center; SharePoint admin center. Answer: the Microsoft 365 admin center, which is where domain names and org settings live. Licensing grants service entitlements, Exchange manages mailboxes and distribution groups, and SharePoint manages sites and libraries.

Question 2. The administrator must govern collaboration spaces, their conversations and meeting behaviour from the most direct management surface. Answer: the Teams admin center, where teams, channels and policies are configured. This domain is a map: users, groups, licences, mailboxes, sites, teams, and which portal manages what. It also includes Zero Trust principles, authentication methods, conditional access, single sign-on and the basics of Microsoft Entra ID and Defender XDR.

Question 3. The administrator must keep or delete content for a defined period according to business and regulatory rules, without changing content ownership. Options: Microsoft Purview solution catalog; retention policies and labels; sensitivity labels; Purview data classification. Answer: retention policies and labels. Sensitivity labels classify and protect content, data classification discovers and categorizes it, and the catalog only helps you choose solutions.

Mixing up retention and sensitivity is the classic trap in this domain, which is the heaviest one. It also covers data loss prevention, insider risk management, communication compliance, DSPM for AI, eDiscovery, Compliance Manager and, crucially, how Copilot accesses data: through Microsoft Graph and honouring the user's permissions. That is why the exam asks about oversharing in SharePoint, data access governance reports and SharePoint Advanced Management.

Question 4. The administrator must choose between a per-user recurring entitlement and consumption-based billing for eligible experiences. Answer: monthly licensing versus pay-as-you-go. The other options (built-in Copilot versus custom agents, Copilot feature controls, Researcher) exist, but they settle a different decision.

Question 5. The administrator must track agent usage, operational health, ownership and lifecycle across admin portals. Answer: agent analytics in the Microsoft 365 admin center and the Power Platform admin center. Access controls limit who sees an agent, the agent builder creates it, and the approval workflow reviews it before publishing. The domain also covers assigning Copilot licences, monitoring adoption with Copilot Analytics, managing saved and scheduled prompts, and the use cases for Researcher, Analyst and custom agents.

In all five, the four options are real tools and three of them would be right for a different need. You do not pass by recognising names, but by knowing what each tool does and does not do. An effective way to study is to build your own "need, tool, portal" table for every bullet in the study guide and check it in a trial tenant.

The AB-900 practice test has hundreds of questions with this structure, an online test by domain and a timed 45-minute mock exam. To organise your study, see the AB-900 outline and the plan to pass.