On-device AI scores your readiness, builds an adaptive study plan, and flags topics fading from memory — before they cost you the exam.
506 practice questions
AI score prediction
100% offline
Download free
iPhone & iPad · Free to startOn your Mac? Scan to install
AB-650AI Services Administrator
AB-650 · 30 days left ›Book your AB-650 exam↗
PREDICTED786 ±37▲ 3 days to ready
AB-650 Practice Questions & Exam Prep — AI Services Administrator
Get exam-ready for AB-650 (Administering Microsoft 365 and AI Services) on iPhone or iPad. Azure Mastery uses on-device AI to predict your readiness score across all three AB-650 domains, build a personalised study plan from your weak spots, and surface topics you're forgetting. Core study stays on-device and works offline; optional sync uses your private iCloud account.
The exam
What is the AB-650 exam?
AB-650 is the Microsoft 365 Certified: AI Services Administrator Associate credential — currently a beta exam — the role-based exam for administrators who configure, manage, secure, and govern Microsoft 365 tenants, workloads, and AI services. That covers Microsoft 365 Copilot, whatever agents your organisation deploys, and the newer Microsoft Agent 365 governance surface. AB-650 spans configuring the tenant itself, governing and securing identities, workloads and data, and managing and securing the AI services layer end to end.
AB-650 is tenant-admin and governance-aware — it is not a builder exam. It validates that you can configure and manage a Microsoft 365 tenant and its workloads (branding, domains, licensing, Microsoft 365 Backup, mailboxes, Teams, SharePoint for Copilot), govern and secure the tenant (Microsoft Entra identities, authentication and Conditional Access, Microsoft Defender for Office 365, Microsoft Purview data protection), and manage and secure AI services (Copilot readiness and settings, Microsoft Entra Agent ID, the agent registry, Agent 365 governance, and Copilot Control System monitoring). Expect scenario questions that hand you a tenant configuration or a stated requirement and ask which specific control satisfies it.
Because AB-650 is in beta, Microsoft is still gathering data on question quality before scoring is finalised. Every question in Azure Mastery's AB-650 bank is mapped to the skills measured on the current outline. Read the official Microsoft study guide.
Questions40–60 questions
Duration120 minutes
Pass score700 / 1000
CostPriced by region (beta)
ValidityRenew annually (Associate)
StatusBeta exam
Official Microsoft skills outline
AB-650 exam objectives
Three domains from Microsoft's current outline. Every domain summary below is paraphrased from the official study guide; Azure Mastery tags each question so you can see where your weak spots cluster.
AI & agent skill mapDataModelsAgentsResponsible AI
Configure and manage Microsoft 365 tenants and workloads20–25%
Explore key topics
The baseline layer. Configure the tenant itself — branding, domains, organisational settings, group-based and pay-as-you-go licensing including licences for Microsoft 365 Copilot, Microsoft Agent 365, and Microsoft Copilot Studio — plus Microsoft 365 Backup setup, restore and monitoring, network connectivity insights, and service health. Then manage the workloads themselves: mailboxes, Microsoft Teams (channels, owners, members, and the Copilot meeting-transcription policy), and SharePoint sites configured for Copilot (SharePoint Advanced Management, Microsoft Search in SharePoint, site exclusions).
Govern and secure Microsoft 365 tenants and workloads40–45%
Explore key topics
Largest domain by far. Manage identities in Microsoft Entra — users, guest and external access, groups, role assignments and Privileged Identity Management, administrative units, and bulk management through Microsoft Graph PowerShell. Implement authentication and access — methods, Password Protection, self-service password reset, and Conditional Access with ID Protection and multifactor authentication. Secure workloads with Microsoft Defender for Office 365 — alerts, threat policies, investigation, and attack simulation training. Protect data with Microsoft Purview — data loss prevention across Exchange, SharePoint, OneDrive, Teams, endpoints and Copilot; sensitivity labels; retention; and Data Security Posture Management for AI activity.
Manage and secure AI services in Microsoft 36535–40%
Explore key topics
The newest, fastest-moving domain. Enable and manage Microsoft 365 Copilot — tenant readiness, data-readiness and oversharing remediation, Copilot Search, tenant settings including the AI disclaimer, Microsoft 365 Copilot Cowork, third-party providers, and connectors. Implement and manage agents in Microsoft 365 and Agent 365 — lifecycle workflows through Microsoft Entra Agent ID, agent owners, allowed types and templates, and the agent registry for discovering, reviewing, publishing, blocking, and installing agents. Secure and govern agents with Agent 365 — activity monitoring, sensitive-data protection, and compliance-gap evaluation. Monitor AI services — cost, Copilot adoption reporting, and service health through the Copilot Control System.
Designed for AB-650
How Azure Mastery helps you pass AB-650
Azure Mastery ships with the full 501-question AB-650 bank mapped to the current outline. Each question carries a domain tag mapped to the official three domains (tenant/workloads, govern/secure, AI services), so you always know which area you're being tested on and where your weak spots cluster. Tenant configuration scenarios, Purview DLP requirements, and agent-registry governance decisions appear throughout.
The on-device Exam IQ engine predicts your AB-650 score before you sit the exam. After roughly 30 questions it has enough signal to give a confidence-scored prediction (e.g. "786 ±37, 68% confidence") — and tells you the specific topics that are dragging your readiness down. No vague "study more" advice; just a ranked list of objectives where improvement would move your score the furthest.
The adaptive study plan rebuilds itself from your answer history. Get a scenario question wrong? The engine surfaces another question in the same domain in your next session. Master a topic across three sessions and it backs off, prioritising the next-highest-leverage gap. The plan optimises for the gap between where you are and the 700 pass score, not for blind volume.
Knowledge decay tracking matters for AB-650 because the "govern and secure" domain alone covers a lot of ground — identity, threat protection, and data protection together are worth 40–45% of the exam. The topic you mastered three weeks into your study window is the topic you'll forget by exam day if you stop revising. Azure Mastery tracks every topic's decay curve and flags topics approaching expiry, and weak-spot drills automatically pull from decayed topics first.
Blueprint-aligned exam rehearsal uses a timed, blueprint-weighted session: a randomised 40–60-question set drawn from original practice questions, weighted by domain percentages from the current outline, with the 120-minute timer running and no jumping back to flag-and-review.
Answer Coach pairs the correct reasoning with option-by-option rationale where available, then turns each miss into a private, grounded lesson: the misconception, key distinction, and rule to remember. Choose explanations after each question or at the end of a practice test, then jump straight back to missed answers; session notes stay ready when you revisit. Authored guidance is always available, while supported devices may optionally rewrite a note on-device only after grounding checks.
During your first week, Aura adapts the next step as you go. Every session ends with a concise recap of what changed, what to focus on, and the best follow-up.
Everything essential runs on-device. Your answer history, readiness gauge, and coaching stay private. Optional sync uses your private iCloud account; there is no Azure Mastery account, tracking, or external processing server.
6-week study plan
Suggested AB-650 study plan
Most candidates prepare for AB-650 in four to eight weeks, depending on their Microsoft 365 and Microsoft Entra administration experience. The six-week plan below weights the two largest domains — govern/secure and AI services — with two weeks each, Azure Mastery's adaptive sessions, and the in-app exam simulator. Adjust the pace to your background — the readiness gauge tells you when you're done, not the calendar.
Tenant and workloads
Week 1: Configure and manage a Microsoft 365 tenant — branding, domains, organisational settings, licensing including AI-service licences, Microsoft 365 Backup, network connectivity insights, service health. Then manage workloads — mailboxes, Teams, SharePoint sites, and the Copilot meeting-transcription policy matrix.
Govern and secure (largest domain, 40–45%)
Week 2: Identities in Microsoft Entra — users, guests, groups, roles and Privileged Identity Management, administrative units, bulk management via Microsoft Graph PowerShell. Then authentication and access — methods, Password Protection, self-service password reset, Conditional Access and ID Protection.
Week 3: Secure Microsoft 365 workloads with Defender for Office 365 — alerts, threat policies, investigation, attack simulations. Then protect data with Microsoft Purview — DLP across workloads and Copilot, sensitivity labels, retention, and Data Security Posture Management.
Manage and secure AI services (35–40%)
Week 4: Enable and manage Microsoft 365 Copilot — tenant readiness, data-readiness and oversharing remediation, Copilot settings, Copilot Search, Cowork, third-party providers, connectors.
Week 5: Implement and secure agents — Microsoft Entra Agent ID lifecycle, the agent registry, Agent 365 governance, and monitoring AI service cost, adoption and health through the Copilot Control System.
Sharpen and simulate
Week 6: Run Focus Weak Spots every morning, drilling the highest-value distinctions the exam repeats. Then run two full-length Exam Simulator sessions at the full 120-minute length. Schedule the exam when readiness gauge is 750+ with reasonable confidence.
Inside the app
Nine interactive practice formats, on iPhone
Azure Mastery uses nine interactive formats for exam-style rehearsal — not just multiple choice. Each visualisation below shows how an original AB-650 practice item renders inside Azure Mastery on iPhone and iPad. Exam-simulator mode runs a timed, blueprint-weighted practice session; Microsoft's live interface and exact item mix may differ.
How long does the Defender for Office 365 Plan 2 trial run?
30 days
180 days
12 months
90 days
Multiple choice
An original AB-650 practice-bank example with one correct answer. The app explains every option after you answer.
Exam-specific sample
In which two applications does the Copilot AI disclaimer NOT appear? Select two.
Whiteboard
Outlook
PowerPoint
Word
SharePoint
Multi-select
An original AB-650 multi-select practice item. Every required selection must be correct to earn the mark.
All-or-nothing
Arrange the steps for onboarding a custom namespace where the registrar does not support automated setup, starting with the first.
⋮⋮1Enter the namespace on the Add domain page
⋮⋮2Prove ownership with a TXT record, MX record or website file
⋮⋮3Publish the DNS records for the services you selected
⋮⋮4Return to the admin center and complete the setup
Drag-and-drop
An original AB-650 ordering prompt, rendered for touch on iPhone and iPad.
Interactive item
A site must end up matching the state captured before an incident, with everything created since discarded. Select the destination option to use.
Hotspot
An original AB-650 visual-context prompt, rendered for touch on iPhone and iPad.
Tap target
Kestrel Assurance — Governing a Growing Agent Estate Kestrel Assurance is an insurance group of 6,800 staff. Over eighteen months its claims, underwriting and customer service teams have built agents independently using…
1What must change before that analyst can investigate the risk?
2The organization in this case study finds that its growing population of agents…
3How should the 61 ownerless agents be handled?
4In the agent estate governed by this case study, the security team wants…
Case studies
An original AB-650 case-study scenario with linked questions that share the same requirements and environment.
Multi-question
✕Your answer: 30 days
✨ Answer Coach:A month leaves too little time to gather a defensible business case, particularly if the evaluation starts slowly.
— grounded in authored certification guidance
Answer Coach
Answer Coach shows the correct reasoning and option-by-option rationale where available, then explains the misconception, key distinction, and rule to remember. Choose explanations after each question or at the end of a practice test; supported devices may optionally rewrite a note on-device only after grounding checks.
App exclusive
Frequently asked
AB-650 FAQs
How much does the AB-650 exam cost?
Microsoft prices AB-650 by the country or region where the exam is proctored and has not published a single flat fee for the beta — check the official exam page for your local price when you register. During a beta, Microsoft sometimes opens a short discounted-registration window (announced on the Microsoft Learn blog) with a discount code for a limited number of seats. The certification renews annually with a free online assessment once you're certified, so there is no recurring fee.
Does the AB-650 certification expire?
Yes. Microsoft Associate certifications including AB-650 expire annually. Renewal is free — a short online assessment on Microsoft Learn within the six-month window before your expiration date. The renewal targets recent skills-outline updates, so staying current is straightforward if you remain broadly active in the role. (Fundamentals certifications such as AB-900 are different — those don't expire.)
What is the AB-650 retake policy if I fail?
AB-650's beta status changes this for now. If you don't pass a beta exam, Microsoft has you wait until the exam goes live before you can retake it — the usual 24-hour and 14-day retake windows don't apply during the beta window. Once AB-650 is fully live, Microsoft's standard retake policy takes over: a 24-hour wait before your first retake, 14-day waits before the second and third, and a cap of five attempts per rolling 12 months. Each attempt requires a new voucher.
How long should I study for AB-650?
Allow four to eight weeks of focused study if you already administer Microsoft 365 tenants and Microsoft Entra ID day to day. Spend longer if Microsoft Purview data protection, Conditional Access, Agent 365, or Microsoft Entra Agent ID are new to you. Azure Mastery's readiness gauge helps you decide when to schedule the exam.
AB-650 vs AB-620 — administer or build?
Different roles over the same agent estate. AB-620 is the AI Agent Builder Associate credential — the maker-role exam for designing, integrating, and testing agents inside Microsoft Copilot Studio. AB-650 is the administrator-role exam: it's about governing whatever agents your organisation ends up with, wherever they were built, across the wider Microsoft 365 tenant — licensing, identity, Defender and Purview protection, the agent registry, and Agent 365 monitoring. A Copilot Studio maker and a Microsoft 365 administrator often sit on the same team; AB-620 and AB-650 map to those two different jobs.
AB-650 vs AB-900 — do I need the fundamentals exam first?
AB-900 (Microsoft 365 Copilot and Agent Administration Fundamentals) is the conceptual on-ramp — it stays at the "what is it and why does it matter" level across core Microsoft 365 objects, data protection concepts, and basic Copilot and agent administration. AB-650 is the associate-level exam built on top of that: it expects you to actually configure the tenant settings, identity policies, and agent governance controls, and to defend the trade-offs between similar-looking options. AB-900 isn't a formal prerequisite for AB-650, but it's a solid foundation if Microsoft 365 administration is new to you.
AB-650 vs SC-300 — how much identity overlap is there?
Some overlap, different depth. SC-300 (Identity and Access Administrator) goes far deeper into Microsoft Entra identity architecture — hybrid identity, external identities, application integration, and identity governance at a specialist level. AB-650 covers the identity surface a Microsoft 365 administrator actually touches day to day — users, groups, administrative units, Conditional Access, and Privileged Identity Management — plus the newer agent identity model built on Microsoft Entra Agent ID, which SC-300 does not cover. Candidates who own both Microsoft 365 and deep identity architecture often hold both certifications.
Is Azure Mastery free for AB-650 prep?
The app is free to download and includes a free allowance of AB-650 questions so you can try every feature. The full bank of 506 AB-650 practice questions unlocks with a one-time exam-pack purchase, or you can unlock every exam in the catalogue with a subscription or a one-time lifetime upgrade.
Does AB-650 practice work offline?
Yes. Question practice, scoring, and the readiness prediction all run on-device, so you can study on a flight or a commute with no connection. No account is required, and your study data stays on your device with optional private iCloud sync.
Is there an AB-650 practice test mode?
Yes — timed practice sessions use original, blueprint-aligned questions, published timing guidance, and supported interactive item types. Adaptive study sessions and Focus Weak Spots then target the domains where your accuracy is lowest.
Free study guides
Free guides that pair with AB-650
Where AB-650 fits
Certification paths that include AB-650
AB-650 is the Microsoft 365 AI Services Administrator credential — the role-based cert for administrators governing Microsoft 365, Copilot, and the agent estate. AB-900 is the optional fundamentals on-ramp, and SC-300 is the natural complement for candidates who also own deep identity architecture. Tap any linked exam below to see its dedicated study app page.
AB-650 sits at the AI Services Administrator Associate tier. AB-900 is the optional fundamentals foundation, AB-620 is the sibling maker-role exam for building agents rather than governing them, and SC-300 is the natural complement for candidates who also own deep identity architecture.
Ready to pass AB-650?
Download Azure Mastery free. 506 AB-650 practice questions across all three domains, AI score prediction, full-length exam simulator, adaptive study plan. iPhone & iPad.
