Get 100% Authentic Microsoft AB-900 Dumps with Correct Answers
New Training Course AB-900 Tutorial Preparation Guide
Microsoft AB-900 Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
NEW QUESTION # 36
Your organization has a Microsoft 365 subscription.
A user named John is assigned an admin role as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes the statement based on the information presented in the graphic.
Answer:
Explanation:
Explanation:
The correct answer is View all the users in the Microsoft Entra tenant . In the exhibit, John is assigned the Global Reader role. Microsoft documents that the Global Reader role is intended for users who need to view administrator features and settings in admin centers that a Global Administrator can view, but without edit permissions. That makes it appropriate for read-only visibility into tenant-wide directory and admin information, including users in Microsoft Entra.
The other answer choices are not supported by the Global Reader role. Microsoft distinguishes admin-center visibility from access to content in workloads such as SharePoint sites and Exchange mailboxes . Global Reader is a read-only administrative role, not a content access role for reading all documents or mailbox items. Likewise, performing eDiscovery of Microsoft 365 Copilot prompts requires Purview eDiscovery permissions or role group membership, not merely the Global Reader role. Microsoft documents eDiscovery permissions separately in Purview role groups.
Therefore, based on the assigned role shown, the valid completion is that John can view all the users in the Microsoft Entra tenant .
NEW QUESTION # 37
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point
Answer:
Explanation:
Explanation:
Communications Compliance uses OCR (optical character recognition) and machine learning to detect offensive or risky text inside images , including those in SharePoint and OneDrive.
By default, Communications Compliance pseudonymizes user identities to reduce investigator bias. Admins can later deanonymize if needed.
It does not add disclaimers. It silently monitors communications and flags policy violations; disclaimers are handled by Exchange transport rules, not Communications Compliance.
NEW QUESTION # 38
Hotspot Question
Select the answer that correctly completes the sentence.
Answer:
Explanation:
NEW QUESTION # 39
Hotspot Question
Select the answer that correctly completes the sentence.
Answer:
Explanation:
Explanation:
Microsoft Graph is the underlying data fabric that connects all Microsoft 365 services. It captures and provides:
Collaboration history - who you work with and how often
Document relevance - files most pertinent to your work context
Communication frequency - email/Teams interaction patterns
Microsoft 365 Copilot uses these Graph signals to deliver personalized, contextually relevant responses - it's essentially the intelligence layer that tells Copilot what matters most to each user.
NEW QUESTION # 40
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
Answer:
Explanation:
Explanation:
The correct selections are Yes, Yes, No. Microsoft Purview sensitivity labels are used to classify and protect organizational data. Microsoft documents that sensitivity labels can protect content such as documents and emails, and it explicitly states that documents and emails can have sensitivity labels applied. Microsoft also supports sensitivity labels for containers, including Microsoft Teams, Microsoft 365 Groups, SharePoint sites, Viva Engage communities, and Loop workspaces. Therefore, a SharePoint site can be labeled, and an Exchange email message can be labeled. Windows 11 devices are different: they are managed and protected through endpoint management and security solutions such as Microsoft Intune and Microsoft Defender for Endpoint. Sensitivity labels apply to supported content and containers, not directly to Windows device objects.
NEW QUESTION # 41
Select the answer that correctly completes the sentence.
Answer:
Explanation:
Explanation:
In Microsoft 365 Copilot, you should use the Researcher agent to perform multi-step reasoning over unstructured data.
The correct answer is the Researcher agent . Microsoft describes Researcher in Microsoft 365 Copilot as an agent for complex, multi-step research that can reason across information sources and synthesize findings into structured outputs. That aligns with the phrase multi-step reasoning in the question. Microsoft's guidance also contrasts Researcher with Analyst , which is aimed more at data analysis and spreadsheet- oriented tasks.
The other options are less suitable. Chat is general-purpose and not the specialized tool Microsoft positions for deeper multi-step research workflows. A notebook is used to organize materials and chats, not as the main reasoning engine for this scenario. The Analyst agent is better suited to structured data analysis, trends, and calculations rather than broad reasoning over unstructured data such as documents, notes, and mixed content. Based on Microsoft's product positioning, the best fit for multi-step reasoning over unstructured information is the Researcher agent .
NEW QUESTION # 42
For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
The correct selections are No, Yes, Yes . Statement 1 is No because Microsoft states that if an organization has a Microsoft 365 Copilot license and at least one user is assigned to a Copilot license, SharePoint administrators automatically get access to the SharePoint Advanced Management features required for Copilot deployment. Microsoft does not say that all users in the organization must have Microsoft 365 Copilot licenses for administrators to use SharePoint Advanced Management.
Statement 2 is Yes because Microsoft documents SharePoint Advanced Management features such as Restricted Content Discovery and Restricted SharePoint Search , which can limit whether content from specific SharePoint sites appears in Microsoft 365 Copilot and organization-wide search experiences.
Statement 3 is Yes because Microsoft explicitly states that organizations can purchase a standalone SharePoint Advanced Management license for each user in the organization. That means it is available even for organizations that do not have Microsoft 365 Copilot.
NEW QUESTION # 43
Hotspot Question
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
NEW QUESTION # 44
Hotspot Question
A user named User5 navigates to https://myapps.microsoft.com. After entering their username and password, User5 receives the following message on their mobile device.
Use the drop-down menus to select the answer choice that completes the statement based on the information presented in the graphic.
Answer:
Explanation:
NEW QUESTION # 45
Hotspot Question
You need to ensure that users can use an external system as a knowledge source for custom Microsoft 365 Copilot agents.
What should you configure in the Microsoft 365 admin center? To answer, select the appropriate settings in the answer area.
Answer:
Explanation:
Explanation:
To allow users to use an external system as a knowledge source for custom Microsoft 365 Copilot agents, you need to configure Connectors in the Microsoft 365 admin center under the Copilot section.
Connectors enable Copilot to connect to and ingest data from external systems (such as third- party databases, services, or applications), making that external content available as a knowledge source for custom Copilot agents.
NEW QUESTION # 46
Your organization has a Microsoft 365 E5 subscription.
You need to ensure that a third-party cloud service can authenticate to Microsoft Entra.
What should you configure?
- A. a Conditional Access policy
- B. an app registration
- C. a Microsoft 365 Copilot connector
- D. multifactor authentication (MFA)
Answer: B
Explanation:
The correct answer is D. an app registration . Microsoft Learn states that to delegate identity and access management functions to Microsoft Entra ID , an application must be registered with a Microsoft Entra tenant . When you register an application, you create its identity configuration in Microsoft Entra, and a corresponding service principal is created so the application can authenticate and integrate with the tenant.
This is the standard Microsoft mechanism for allowing a third-party cloud service or app to authenticate to Microsoft Entra.
The other options do not provide the app identity required for authentication. Multifactor authentication (MFA) strengthens user sign-ins, but it does not onboard a third-party service as an application identity in Entra. Conditional Access enforces access policies after authentication and authorization decisions are being made; it does not create the application identity itself. A Microsoft 365 Copilot connector is used to bring external data into Microsoft 365 experiences, not to let a third-party cloud service authenticate to Microsoft Entra. Therefore, the correct configuration is an app registration .
NEW QUESTION # 47
Hotspot Question
You open the Microsoft Entra admin center as shown in the following exhibit.
Use the drop-down menus to select the answer choice that completes the statement based on the information presented in the graphic.
Answer:
Explanation:
NEW QUESTION # 48
Your organization has a Microsoft 365 subscription.
All users are assigned Microsoft 365 Copilot licenses.
Some users report receiving Copilot responses that contain information from a Microsoft SharePoint site named Finance. The users report that the information is commercially sensitive.
You need to prevent Copilot from providing responses that contain information from the Finance site.
What should you do?
- A. From Microsoft Defender, create a data connector.
- B. From the Finance site, configure permissions.
- C. From Microsoft Purview, create an Information Barrier (IB) policy.
- D. From Microsoft Entra, create a Conditional Access policy.
Answer: C
Explanation:
To prevent Microsoft 365 Copilot from providing responses using sensitive information from a SharePoint site, you can create a Data Loss Prevention (DLP) policy in Microsoft Purview.
Information Barriers (IB) can be used to prevent entire groups of users (segments) from accessing specific SharePoint sites. If an IB policy prevents a user from accessing a site, Copilot will respect that restriction and will not include information from that site in its responses to those users.
Reference:
https://learn.microsoft.com/en-us/purview/information-barriers
NEW QUESTION # 49
Hotspot Question
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Box 1: No
Communications Compliance is focused on monitoring communications (Teams chats, Exchange emails, Viva Engage messages), not content stored in SharePoint document libraries. SharePoint content scanning falls under Information Protection/DLP.
Box 2: Yes
By default, usernames are anonymized (replaced with pseudonyms) in Communications Compliance to protect privacy during the review process. Investigators see anonymized identities unless an admin chooses to reveal them.
Box 3: No
Communications Compliance works silently in the background - it does not add any disclaimer or notification to monitored messages. Users are typically notified via policy tips or organizational policies, not inline disclaimers on each message.
NEW QUESTION # 50
Select the answer that correctly completes the sentence.
Answer:
Explanation:
Explanation:
From the SharePoint admin center, you can create a site .
The correct answer is site . Microsoft documents that in the SharePoint admin center , administrators can go to Active sites and select Create to create a new SharePoint site, such as a team site or communication site .
Microsoft also describes site creation as one of the key tasks available to users with the SharePoint Administrator role.
The other options do not fit this sentence. A server is not something you create from the SharePoint admin center in Microsoft 365, because SharePoint Online is a Microsoft-managed cloud service. A user is typically created in the Microsoft 365 admin center or Microsoft Entra admin center, not in the SharePoint admin center. A role is also assigned through Microsoft 365 or Microsoft Entra administrative experiences, not created from the SharePoint admin center as the primary task described here.
So the sentence is correctly completed as: From the SharePoint admin center, you can create a site.
NEW QUESTION # 51
Your organization has a Microsoft 365 subscription.
The HR department at your company asks for a copy of all the recent files that were modified by a user named User1.
What should you use in the Microsoft Purview portal? To answer, select the appropriate solutions in the answer area.
Answer:
Explanation:
Explanation:
The correct answer is eDiscovery . In Microsoft Purview, eDiscovery is the solution used to search for content and export copies of that content from Microsoft 365 locations such as SharePoint and OneDrive.
Microsoft Learn states that when you export search results from eDiscovery, copies of native Office documents and other documents are exported . That directly matches the requirement to provide HR with a copy of files .
By contrast, Audit is primarily used to investigate user and admin activity records and can export those audit records to CSV , but it does not export the actual files themselves. Audit would help identify that User1 modified files, but the question asks for copies of the recent files modified by User1 , which is an eDiscovery content search and export scenario rather than an activity-log reporting scenario.
So, among the Microsoft Purview solutions shown, the appropriate selection is eDiscovery because it is the Purview tool designed to find and export the actual content items HR wants to receive.
NEW QUESTION # 52
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
* Microsoft Defender for Office 365 provides protection from phishing and malware attacks. Answer: Yes
* Microsoft Defender for Identity monitors identities in Active Directory domains. Answer: Yes
* Microsoft Defender Vulnerability Management provides protection for software as a service (SaaS) applications. Answer: No The correct selections are Yes, Yes, No . Microsoft documents that Microsoft Defender for Office 365 protects email and collaboration workloads from threats such as phishing and malware , including zero-day malware and business email compromise scenarios. That makes statement 1 Yes .
Statement 2 is also Yes because Microsoft states that Microsoft Defender for Identity monitors identity signals from on-premises Active Directory and related identity infrastructure to detect suspicious activity and identity-based attacks. Microsoft further describes monitoring information generated from your organization's Active Directory, network, and event activities.
Statement 3 is No because Microsoft Defender Vulnerability Management is focused on discovering and prioritizing vulnerabilities across devices and assets such as Windows, macOS, Linux, mobile platforms, and network devices. Microsoft's SaaS application protection offering is Microsoft Defender for Cloud Apps , not Defender Vulnerability Management.
NEW QUESTION # 53
Select the answer that correctly completes the sentence.
Answer:
Explanation:
Explanation:
The correct answer is Microsoft Defender XDR . Microsoft Learn defines Microsoft Defender XDR as a unified pre- and post-breach enterprise defense suite that natively coordinates detection, prevention, investigation, and response across endpoints, identities, email, and applications to provide integrated protection against sophisticated attacks. That wording matches the sentence in the question almost exactly, which makes this the clearly correct choice.
The other options do not fit that definition. Microsoft Entra Conditional Access is Microsoft's Zero Trust policy engine used to evaluate signals and enforce access policies, not a cross-domain threat detection and response suite. Microsoft Entra ID Protection focuses on detecting and responding to identity risks such as risky sign-ins and risky users. Microsoft Purview is Microsoft's portfolio for data governance, data security, and compliance. None of those products is described by Microsoft as coordinating detection, prevention, investigation, and response across endpoints, identities, email, and applications in the same integrated XDR manner. Therefore, the only answer that correctly completes the sentence is Microsoft Defender XDR .
NEW QUESTION # 54
An organisation needs to protect confidential financial reports so that only members of the finance team can open them, even if the files are accidentally shared externally. Which Microsoft Purview feature should they use?
- A. Sensitivity labels with encryption
- B. Retention policies
- C. Data Loss Prevention (DLP) policies
- D. Communication Compliance policies
Answer: A
Explanation:
Sensitivity labels with encryption protect documents at the file level by encrypting the content and restricting access to specified users or groups. Even if a labelled file is shared outside the organisation, only authorised users can decrypt and open it.
NEW QUESTION # 55
Hotspot Question
Your organization has a Microsoft 365 subscription.
You discover that Microsoft SharePoint files are being shared to users outside your organization.
You need to identify which files are being shared to the external users.
Which report should you use in the SharePoint admin center? To answer, select the appropriate report in the answer area.
Answer:
Explanation:
NEW QUESTION # 56
Select the answer that correctly completes the sentence.
Answer:
Explanation:
Explanation:
The correct answer is are NOT assigned a Microsoft 365 Copilot license. Microsoft's official reporting guidance explains that the Copilot credits report is used to manage metered consumption costs for Microsoft
365 Copilot Chat. The purpose of this report is to show credit consumption tied to pay-as-you-go billing policies, including metrics such as total credits used and credits used per user, per agent, and per billing policy. Microsoft's Copilot analytics documentation further defines these credit-related metrics around Copilot Chat users, which are users with a Microsoft 365 license but without a Microsoft 365 Copilot license who consume credits while using agents.
Because licensed Microsoft 365 Copilot users are generally covered by their Copilot entitlement for included agent usage, the credits report is intended to track the metered agent usage scenario for users who are not assigned a Microsoft 365 Copilot license and who interact with work-grounded agents in Microsoft 365 Copilot Chat. That is why this option correctly completes the sentence.
NEW QUESTION # 57
......
Dumps of AB-900 Cover all the requirements of the Real Exam: https://www.validvce.com/AB-900-exam-collection.html
