AB-900 · CHEAT SHEET

Microsoft 365 Certified: Copilot and Agent Administration Fundamentals

Key concepts grouped by official exam weight.

Download as PDF (free, no sign-up)

1. Identify the core features and objects of Microsoft 365 services

30–35%

Identify the core objects of Microsoft 365 services

User or group-based licensing is the primary capability to recognize when you need to explain how license types assigned to users and groups affect access to Microsoft 365 features. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Microsoft 365 admin center is the primary capability to recognize when you need to explore organization configurations in the Microsoft 365 admin center, including domain names and organization settings. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Exchange admin center is the primary capability to recognize when you need to identify mailboxes and distribution groups in the Exchange admin center. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
SharePoint admin center is the primary capability to recognize when you need to identify sites, libraries, and folders in the SharePoint admin center. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
SharePoint site roles and permissions is the primary capability to recognize when you need to identify appropriate roles and permissions for SharePoint sites. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.

Understand Microsoft 365 security principles

Zero Trust is the primary capability to recognize when you need to explain the core Zero Trust principles. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Authorization is the primary capability to recognize when you need to understand authorization. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Authentication methods is the primary capability to recognize when you need to understand authentication methods. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Threat protection and intelligence is the primary capability to recognize when you need to understand threat protection and intelligence. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Microsoft Defender XDR is the primary capability to recognize when you need to understand the features and capabilities of Microsoft Defender XDR. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.

Identify the core security features of Microsoft 365 services

Microsoft Entra ID is the primary capability to recognize when you need to understand the features and capabilities of Microsoft Entra ID. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Conditional Access is the primary capability to recognize when you need to understand Conditional Access policies. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Single sign-on (SSO) is the primary capability to recognize when you need to understand the purpose and benefits of single sign-on. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Microsoft Entra users and groups is the primary capability to recognize when you need to identify whether to use users or groups as the appropriate security object. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Microsoft Entra sign-in and diagnostic logs is the primary capability to recognize when you need to identify tools to troubleshoot multifactor authentication, Conditional Access, and risky sign-ins. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.

2. Understand data protection and governance tasks for Microsoft 365 and Copilot

35–40%

Understand Microsoft Purview

Microsoft Purview solution catalog is the primary capability to recognize when you need to understand Microsoft Purview Information Protection, Data Loss Prevention, Insider Risk Management, Communication Compliance, Data Security Posture Management for AI, and Data Lifecycle Management. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Sensitivity labels is the primary capability to recognize when you need to identify use cases for sensitivity labels in Microsoft Purview. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Microsoft Purview data classification is the primary capability to recognize when you need to understand data classification in Microsoft Purview. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Retention policies and labels is the primary capability to recognize when you need to understand retention. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.

Understand data security implications of Copilot

Microsoft 365 Copilot permission trimming is the primary capability to recognize when you need to understand how Microsoft 365 Copilot accesses data. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Microsoft Graph grounding is the primary capability to recognize when you need to understand how Microsoft Graph influences Copilot responses. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Purview and Defender controls is the primary capability to recognize when you need to understand how permissions and controls in Microsoft 365, Microsoft Purview, and Microsoft Defender protect Copilot against risks. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Responsible AI principles is the primary capability to recognize when you need to understand responsible AI principles. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.

Identify data protection and governance risks for Microsoft 365 and Copilot

Microsoft Purview Compliance Manager is the primary capability to recognize when you need to identify compliance risks and recommendations with Microsoft Purview Compliance Manager. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Microsoft Purview Data Explorer is the primary capability to recognize when you need to identify sensitive information with Microsoft Purview Data Explorer. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Insider Risk Management is the primary capability to recognize when you need to identify risks with Insider Risk Management. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Data Loss Prevention alerts is the primary capability to recognize when you need to identify and respond to alerts generated by Microsoft Purview Data Loss Prevention. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Communication Compliance is the primary capability to recognize when you need to identify policy violations generated by Communication Compliance. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.

Identify and monitor oversharing in SharePoint in Microsoft 365

SharePoint oversharing diagnostics is the primary capability to recognize when you need to identify tools to troubleshoot oversharing in an organization. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
SharePoint data access governance reports is the primary capability to recognize when you need to run a data access governance report in SharePoint. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
SharePoint Advanced Management restricted access control is the primary capability to recognize when you need to understand SharePoint Advanced Management capabilities, including restricted access control. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.

3. Perform basic administrative tasks for Copilot and agents

25–30%

Understand features and capabilities of Copilot and agents

Built-in Copilot and custom agents is the primary capability to recognize when you need to compare built-in Copilot capabilities with agents. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Monthly licensing and pay-as-you-go is the primary capability to recognize when you need to compare the Copilot monthly license model with pay-as-you-go, including SharePoint. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Copilot feature controls is the primary capability to recognize when you need to identify which Copilot features can be enabled or disabled. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Researcher is the primary capability to recognize when you need to identify use cases for Researcher. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Analyst is the primary capability to recognize when you need to identify use cases for Analyst. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.

Perform basic administrative tasks for Copilot

Copilot license assignment is the primary capability to recognize when you need to assign Copilot licenses. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Copilot billing policies is the primary capability to recognize when you need to monitor and manage Copilot pay-as-you-go billing policies. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Copilot Analytics and usage reports is the primary capability to recognize when you need to monitor Copilot usage and adoption with Copilot Analytics and the Microsoft 365 admin center. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Prompt management is the primary capability to recognize when you need to manage prompts, including saving, sharing, scheduling, and deleting prompts. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.

Perform basic administrative tasks for agents

Agent user access controls is the primary capability to recognize when you need to identify how to configure user access to agents. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Agent Builder is the primary capability to recognize when you need to create an agent. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Agent approval workflow is the primary capability to recognize when you need to understand the approval process for agents. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.
Microsoft 365 and Power Platform agent analytics is the primary capability to recognize when you need to monitor agent usage, operational insights, and lifecycle in the Microsoft 365 and Power Platform admin centers. In the exam, compare it with adjacent tools and choose the one that directly meets the requirement with appropriate scope and permissions.

Practice this certification