CertifyDeckCargando contenido…
AB-650 · Sample questions
8 real questions from the CertifyDeck AB-650 bank, spread across the domains of the official Microsoft 365 Certified: Microsoft 365 and AI Services Administrator Associate skills outline, with the correct answer and a full explanation of why the other options are wrong. They are original questions written from the public syllabus, not exam dumps, and they are the same style you will find in the practice tests and mock exams.
Correct answer: A. Reports Reader
The troubleshooting guide states that Reports Reader is the least privileged role required to access the activity logs. Global Reader and Security Administrator also grant access but are more privileged than necessary, and Authentication Administrator is about managing authentication methods, not viewing sign-in logs.
Correct answer: A. User.ReadWrite.All
Microsoft's documented example authenticates with Connect-MgGraph -Scopes "User.ReadWrite.All" before running New-MgUser in a loop to bulk-create users. User.Read.All and Directory.Read.All are read-only scopes that wouldn't permit creating users, and Group.ReadWrite.All is the scope documented for adding or removing group members, not for creating users.
Correct answer: D. A retention policy applied to that SharePoint site
Use a retention policy to assign the same retention settings to all content at a site level; because every item in this site needs the same five-year retention with no exceptions, a retention policy is more efficient than applying a retention label to every document individually.
Correct answer: A. It prevents the tool from being used by agents or workflows
The Agent Tools actions table documents Block as preventing the selected tool from being used by agents or workflows; the tool stays visible in the registry rather than being deleted. There is no documented publisher notification or appeal step, and blocking does not change who published the tool.
Correct answer: B. AI Administrator
Documentation states that to access and manage Copilot connectors, an admin must be an AI administrator for the organization, and the prerequisite for deploying a connector is also stated as being an AI administrator in the Microsoft 365 admin center. Search, SharePoint, and Exchange Administrator roles aren't documented as sufficient for this task.
Correct answer: A. The already-installed Office apps keep working, but the self-service install option disappears from the portal for future installs
This setting only controls whether the self-service install option is presented and usable going forward, it is not retroactive and does not uninstall software, revoke licenses, or affect access to web-based apps like Outlook on the web. Existing installations continue to function normally; only future self-service installs are blocked, meaning IT must deploy Office through another method if new installs are needed.
Correct answer: A. Directly assign the license to the 10 pilot users individually, or create a small pilot security group and use group-based licensing for just that group
For a small, controlled pilot, either direct individual assignment to the 10 chosen users or creating a small dedicated pilot group with group-based licensing are both valid, practical approaches, letting the organization gather feedback and validate the license before a broader rollout. B skips the deliberate pilot phase the organization wants. C is an unnecessary and inappropriate security escalation, Global Administrator rights have nothing to do with self-provisioning a license. D describes a nonexistent automatic random-selection feature.
Correct answer: C. Team owner
Documentation states that the user who creates a new team is granted owner status by default, giving Diego rights such as adding members and managing team settings. Team member is a lesser role assigned to people the owner invites, not to the creator. Channel moderator is a separate, narrower capability for individual channels, not the role granted for creating a team. Teams administrator is a Microsoft 365 admin role assigned separately in the Teams admin center, not something creating a team grants automatically.
Answer each question before opening the explanation, and write down why you discarded the other options. On AB-650, most mistakes come from choosing an option that is technically possible but does not meet every requirement in the scenario.
These 8 questions are a taste of the format, not a diagnostic. To know which domains you fail, practice by domain for free and take a timed mock exam that mirrors the official weights and duration.
Start for free, no sign-up or card. Every question includes an explanation like the ones above, and the mock exam reproduces the official AB-650 format.