Browse Certification Practice Tests by Exam Family

Microsoft AB-900 365 Fundamentals Practice Test

Try 12 Microsoft AB-900 sample questions and practice-test preview prompts on Microsoft 365 fundamentals, Copilot administration basics, service concepts, identity, compliance, and adoption scope.

AB-900 is a Microsoft 365 route for administrators learning Microsoft 365 Copilot and agent administration fundamentals.

IT Mastery coverage for AB-900 is under review. Use this page to try 12 original sample questions, review the route fit, likely assessed areas, and related live practice pages.

Practice option: Sample questions available

AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals practice update

Start with the 12 sample questions on this page. Dedicated practice for AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals is not currently included as a full web-app practice page; enter your email to get updates when full practice becomes available or expands for this exam.

Need live practice now? See currently available IT Mastery exam pages.

Occasional practice updates. Unsubscribe anytime. We only publish independently written practice questions, not real, leaked, copied, or recalled exam questions.

Route snapshot

  • Issuer: Microsoft
  • Family: Microsoft 365
  • Exam code: AB-900
  • Route name: Microsoft 365 Copilot and Agent Administration Fundamentals
  • Current IT Mastery status: Sample questions

What to review first

AreaPractical focus
Tenant and identity basicsReview users, groups, licensing, Microsoft Entra, and admin-center decisions.
Collaboration and endpoint operationsMatch Teams, endpoint, communications, and Microsoft 365 workloads to scenarios.
Copilot administrationReview governance, access, and operational readiness for Copilot and agents.
If you need practice nowStart here
SC-900 Security FundamentalsGood Microsoft identity and compliance baseline.
GitHub FoundationsUseful collaboration fundamentals adjacent route.
IT ExamsBrowse current live IT Mastery practice.

Practice options

  • IT Mastery coverage for this exam: under review
  • Best use right now: try the 12 sample questions, confirm that AB-900 is your target exam, then use the closest live Azure, Microsoft, security, data, DevOps, or IT fundamentals pages while coverage expands
  • Update form: use the Notify me form near the top of this page if AB-900 is your actual target exam
  • Quick review: open the AB-900 cheat sheet if you need a compact Microsoft 365 Copilot administration checklist before the sample questions.

Sample Exam Questions

Try these 12 original sample questions for Microsoft AB-900. They are designed for self-assessment and are not official exam questions.

Question 1

Topic: Copilot readiness

A tenant has overshared SharePoint sites and unmanaged sensitive files. What should be improved before Copilot rollout?

  • A. Permissions, labels, data governance, content quality, and access reviews.
  • B. Public access to all content.
  • C. No retention or labels.
  • D. Ignoring stale sites.

Best answer: A

Explanation: Copilot and agents use tenant content and permissions. Readiness depends on data and access hygiene.

What this tests: Preparing Microsoft 365 Copilot environments.


Question 2

Topic: agent administration

A business team wants a custom agent to answer questions from approved HR documents only. What should the admin review?

  • A. General internet answers only.
  • B. Allowed knowledge sources, permissions, grounding, ownership, testing, and publishing controls.
  • C. Anonymous access to HR content.
  • D. No testing before publishing.

Best answer: B

Explanation: Agent administration requires controlling knowledge, permissions, lifecycle, and expected behavior.

What this tests: Administering Copilot agents safely.


Question 3

Topic: licensing

Users cannot access Copilot features after rollout. What should be checked first?

  • A. Only browser zoom.
  • B. The user’s wallpaper.
  • C. Prerequisite licenses, Copilot license assignment, service availability, and account sign-in.
  • D. A DNS record for another app.

Best answer: C

Explanation: Access to Copilot features depends on licensing, service availability, and correct account state.

What this tests: Troubleshooting Copilot access basics.


Question 4

Topic: security boundary

A Copilot response includes content a user should not see. What is the likely control area to inspect?

  • A. The model temperature only.
  • B. The user’s keyboard layout.
  • C. A Teams emoji setting.
  • D. Source content permissions, sharing settings, sensitivity labels, and access governance.

Best answer: D

Explanation: Copilot should respect user permissions, so unexpected exposure often points to content-permission or governance problems.

What this tests: Investigating Copilot data-boundary issues.


Question 5

Topic: adoption

A team turns on Copilot but users do not know how to use it safely. What should be included?

  • A. User enablement, prompt guidance, acceptable-use expectations, and support path.
  • B. No training or support.
  • C. Unlimited unmanaged experiments.
  • D. Deleting all help content.

Best answer: A

Explanation: Copilot administration includes adoption and safe-use readiness, not only license assignment.

What this tests: Planning Copilot adoption and support.


Question 6

Topic: audit and monitoring

An organization needs to understand Copilot usage and risky patterns. What should be reviewed?

  • A. No logs.
  • B. Admin reports, audit logs, policy signals, and governance reviews.
  • C. Manual guesses only.
  • D. Publicly posting every prompt.

Best answer: B

Explanation: Monitoring helps administrators understand usage, risk, and support needs while respecting governance.

What this tests: Monitoring Copilot and agent activity.


Question 7

Topic: plugin and connector risk

A connector would let an agent access a sensitive line-of-business system. What should be assessed?

  • A. Enable every connector by default.
  • B. No owner approval.
  • C. Connector permissions, data exposure, business owner approval, logging, and least privilege.
  • D. Anonymous access to the system.

Best answer: C

Explanation: Connectors can expand what agents can access. Administrators need permission and governance review.

What this tests: Managing connector and extension risk.


Question 8

Topic: agent lifecycle

A custom agent is no longer maintained but remains available to users. What should happen?

  • A. Leave stale agents forever.
  • B. Remove all owners.
  • C. Disable audit records.
  • D. Review ownership, usage, risk, and retire or update the agent through lifecycle governance.

Best answer: D

Explanation: Agents need lifecycle management like other business applications. Stale agents can create trust and security risk.

What this tests: Managing agent lifecycle.


Question 9

Topic: sensitivity labels

How can labels help Copilot administration?

  • A. They classify and protect content that Copilot and agents may reference under user permissions.
  • B. They replace all user training.
  • C. They make all content public.
  • D. They remove the need for access reviews.

Best answer: A

Explanation: Labels support information protection and governance, which affects safe Copilot usage.

What this tests: Connecting labels to Copilot readiness.


Question 10

Topic: prompt safety

A user asks an agent to ignore its instructions and reveal restricted guidance. What risk should admins understand?

  • A. A storage quota issue only.
  • B. Prompt injection or instruction-manipulation risk.
  • C. A Teams ringtone issue.
  • D. A billing export failure.

Best answer: B

Explanation: Agents can face prompt-based attacks or misuse. Administrators need safety and boundary awareness.

What this tests: Recognizing Copilot and agent safety risks.


Question 11

Topic: business ownership

A department wants an agent for procurement policy. Who should own its business accuracy?

  • A. No owner because AI owns the content.
  • B. Only an unrelated network engineer.
  • C. A named business owner with admin governance and review support.
  • D. Every user equally with no review.

Best answer: C

Explanation: Agents need accountable owners for content accuracy, scope, and lifecycle decisions.

What this tests: Assigning ownership for agents.


Question 12

Topic: route fit

A candidate focuses on Microsoft 365 Copilot and agent administration fundamentals. Which route is closest?

  • A. MS-721 only.
  • B. AZ-700 only.
  • C. DP-420 only.
  • D. AB-900.

Best answer: D

Explanation: AB-900 is the Microsoft 365 Copilot and Agent Administration Fundamentals route.

What this tests: Choosing the Copilot administration fundamentals route.


AB-900 Copilot administration map

Use this map to connect the sample questions to the Microsoft 365 administration decisions this route usually tests.

    flowchart LR
	  S1["Tenant readiness"] --> S2
	  S2["License and access planning"] --> S3
	  S3["Copilot and agent policy"] --> S4
	  S4["Data and security governance"] --> S5
	  S5["User adoption and support"] --> S6
	  S6["Monitor usage and risk"]

Quick Cheat Sheet

CueWhat to remember
ReadinessCheck identity, licensing, data governance, and admin roles before enabling Copilot broadly.
AccessUse groups, role assignments, and policy boundaries to control who can use Copilot and agents.
Data governanceCopilot answers depend on reachable data, so permissions and oversharing risk matter.
AdministrationKnow where admin centers, reports, and policy settings fit.
AdoptionPlan support, communication, and feedback loops rather than treating Copilot as only a switch.

Mini Glossary

  • Agent: AI-assisted workflow or assistant that can use configured instructions, tools, or data.
  • Copilot admin center: Administrative surface for managing Copilot readiness, settings, and reporting.
  • Least privilege: Giving users and admins only the access needed for their work.
  • Oversharing: Risk that users can access too much organizational content through existing permissions.
  • Tenant: Microsoft 365 organizational environment containing identities, services, and settings.

Microsoft AB-900 practice update

Use this page to review AB-900 sample questions and use the Notify me form for updates. The related pages below help you compare adjacent IT Mastery Microsoft 365 practice options before choosing what to study next.

Official source

What to open next

In this section

  • Microsoft AB-900 Cheat Sheet: 365 Copilot Admin
    Review the Microsoft 365 Copilot and Agent Administration Fundamentals (AB-900) scope, tenant readiness, identity, permissions, data governance, Copilot administration, agent controls, and adoption traps before practicing.
Revised on Monday, May 25, 2026