How long does the Defender for Office 365 Plan 2 trial run?
Multiple choice
An original AB-650 practice question with one correct answer. Choose an option to read its written rationale.
Exam-specific sample
Azure Mastery
Microsoft Certification AB-650
AB-650: Predict your score. Know what to study next.
See your predicted score, follow a study plan based on your answers, and revisit topics you're starting to forget. It all runs on your device.
506 practice questions
AI score prediction
100% offline
Try a practice question →
50+ free questions per exam · No account needed.
Full banks: one-time purchase. Pro adds every bank and advanced study tools. Compare access options.
Original questions with written explanations. How we review them · About readiness estimates
Inside the app
Nine interactive practice formats, on iPhone
Azure Mastery has nine interactive formats for exam practice. The examples below show original AB-650 practice questions in Azure Mastery on iPhone and iPad. The exam simulator uses timed sessions with the published domain weights. Microsoft's live interface and question mix may differ.
Explore more question formats
In which two applications does the Copilot AI disclaimer NOT appear? Select two.
Multi-select
An original AB-650 multi-select question. Select all the correct options to earn the mark.
All-or-nothingDrag-and-drop
An original AB-650 ordering question you can answer by touch on iPhone and iPad.
Interactive itemHotspot
An original AB-650 question with a visual prompt, designed for touch on iPhone and iPad.
Tap targetCase studies
An original AB-650 case study with several questions about the same requirements and environment.
Multi-questionAnswer Coach
Answer Coach explains why the answer is correct and, where available, why each option is right or wrong. It helps you understand a mistake and remember the distinction. Read explanations after each question or at the end of a practice test. On supported devices, optional AI can reword a note on your device after checking it against the written guidance.
App exclusiveAB-650 Practice Questions & Exam Prep — AI Services Administrator
Get exam-ready for AB-650 (Administering Microsoft 365 and AI Services) on iPhone or iPad. Azure Mastery uses on-device AI to predict your readiness score across all three AB-650 domains, build a personalised study plan from your weak spots, and surface topics you're forgetting. Core study stays on-device and works offline; optional sync uses your private iCloud account.
The exam
What is the AB-650 exam?
AB-650 is the Microsoft 365 Certified: AI Services Administrator Associate credential — currently a beta exam — for administrators who configure, manage, secure, and govern Microsoft 365 tenants, workloads, and AI services. That covers Microsoft 365 Copilot, whatever agents your organisation deploys, and the Microsoft Agent 365 governance surface.
AB-650 is tenant-admin and governance-aware — it is not a builder exam. It validates that you can:
- Configure and manage a Microsoft 365 tenant and its workloads — branding, domains, licensing, Microsoft 365 Backup, mailboxes, Teams, SharePoint for Copilot
- Govern and secure the tenant — Microsoft Entra identities, authentication and Conditional Access, Microsoft Defender for Office 365, Microsoft Purview data protection
- Manage and secure AI services — Copilot readiness and settings, Microsoft Entra Agent ID, the agent registry, Agent 365 governance, and Copilot Control System monitoring
Expect scenario questions that hand you a tenant configuration or a stated requirement and ask which specific control satisfies it.
Because AB-650 is in beta, Microsoft is still gathering data on question quality before scoring is finalised. Every question in Azure Mastery's AB-650 bank is mapped to the skills measured on the current outline. Read the official Microsoft study guide.
- Questions40–60 questions
- Duration120 minutes
- Pass score700 / 1000
- CostPriced by region (beta)
- ValidityRenew annually (Associate)
- StatusBeta exam
Published skills outline · guide updated 27 July 2026
AB-650 exam objectives
Three domains, with weights listed in the published study guide. Each domain below carries Microsoft's own skill-group wording, taken verbatim from the official study guide, so you always know exactly where a gap sits.
Configure and manage Microsoft 365 tenants and workloadsPublished weight 20–25%
103 exam-scoped practice questions in the app
Explore Tenant topics
- Configure and manage a Microsoft 365 tenant
- Manage Microsoft 365 workloads
- Tests baseline tenant configuration: branding, licensing, Microsoft 365 Backup, and workload setup for Teams and SharePoint.
- Candidates skim this domain as routine admin work, then miss questions on Copilot-specific settings.
- Learn which licence unlocks which AI surface; Copilot, Agent 365, and Copilot Studio aren't interchangeable.
Govern and secure Microsoft 365 tenants and workloadsPublished weight 40–45%
207 exam-scoped practice questions in the app
Explore Govern topics
- Manage identities in Microsoft Entra
- Implement and manage authentication and access in Microsoft Entra
- Secure Microsoft 365 workloads
- Protect data in Microsoft 365 by using Microsoft Purview
- Identity, Conditional Access, Defender, and Purview all show up together here, in the domain carrying the largest published weight.
- A deep identity background can lead you to skim Microsoft Entra Agent ID, assuming it's a footnote on familiar content.
- Learn Data Loss Prevention and Data Security Posture Management as separate tools that answer different questions.
Manage and secure AI services in Microsoft 365Published weight 35–40%
196 exam-scoped practice questions in the app
Explore AI Services topics
- Enable and manage Microsoft 365 Copilot
- Implement and manage agents in Microsoft 365 and Agent 365
- Secure and govern agents by using Agent 365
- Monitor AI services in Microsoft 365
- Copilot readiness, the agent lifecycle through Microsoft Entra Agent ID, and Agent 365 governance are bundled into a single domain.
- A tenant can hold a Copilot licence and still not be ready for it, a distinction that's easy to miss.
- Learn the agent registry and Agent 365 policies as governance tools, not agent-building skills.
Common traps
Where AB-650 candidates slip
Five recurring misconceptions that trip up otherwise well-prepared AB-650 candidates, grounded in the current study guide.
Building an agent and governing one are different job functions
AB-650 questions describe an agent that already exists and ask how to license, register, or monitor it.
- The exam is testing whether you reach for the agent registry or an Agent 365 policy, not Copilot Studio maker skills.
- Treat any stem about an existing agent as a governance question, never a design question.
SC-300 identity depth is not required, but agent identity is exam-specific here
Candidates with a deep identity background sometimes skim Microsoft Entra Agent ID, assuming it's a footnote on familiar content.
- Agent identity carries its own lifecycle and ownership model, quite separate from a human account.
- Study Microsoft Entra Agent ID directly rather than assuming Conditional Access knowledge covers it.
Data Loss Prevention and Data Security Posture Management answer different questions
A DLP policy blocks a specific action, while Data Security Posture Management gives visibility into what's already happening.
- Picking DSPM for visibility into oversharing risk and DLP for blocking an action is exactly what's scored.
- Ask whether the stem wants enforcement or visibility before choosing between the two controls.
Copilot readiness is a distinct configuration step, not a licensing checkbox
Assigning a Microsoft 365 Copilot licence doesn't make a tenant ready for it.
- The exam is testing whether you know oversharing remediation and SharePoint tuning happen before rollout, not the licence itself.
- Treat unexpected content in Copilot answers as a readiness-work question, not a licensing question.
The beta status changes retake eligibility
Microsoft allows only one attempt while an exam is in beta. If you do not pass, you can retake it after the exam becomes generally available.
- The usual 24-hour and 14-day retake waits apply only after the exam is live.
- Check Microsoft's current beta and retake guidance before booking another attempt.
Designed for AB-650
How Azure Mastery helps you pass AB-650
Exam-specific practice
- 506 AB-650 practice questions, each tagged to one of Microsoft's three published domains.
- Govern and secure alone carries 40–45% of the published weight, the exam's largest domain.
- Practise picking the right control for a stated requirement: DLP versus DSPM, a licence versus real readiness.
Predicted score
- Exam IQ predicts your AB-650 score on-device after roughly 30 questions, with a confidence range attached.
- It flags whichever domain is dragging your readiness down, not an average across all three.
- Govern and secure moves the confidence score fastest, since it alone carries 40–45% of the weight.
Adaptive study plan
- Early sessions lean on govern and secure: identity, Conditional Access, Defender, and Purview.
- A wrong governance answer pulls another governance question into your very next session.
- Three clean passes on a topic and the plan hands that slot to a weaker one.
Knowledge decay
- Govern and secure alone covers enough ground that a topic mastered early fades fast without revisiting.
- Azure Mastery tracks every topic's decay curve and flags ones approaching expiry.
- Weak-spot drills pull decayed topics back into rotation before you forget them for good.
Exam rehearsal
- Each Exam Simulator run draws a fresh, randomised set weighted to the three published domains.
- There's no going back to flag a question for later, matching the discipline of a proctored sitting.
- Microsoft controls the live proctored interface and exact item mix, not this app.
Answer Coach
- Calls out the look-alike control you reached for — DLP vs DSPM, a licence vs real readiness — before the right one.
- A miss teaches you the boundary between two controls, sharpening judgement instead of adding a fact.
- Every miss becomes a private note you can revisit from your missed-answers list.
Aura guidance
- Aura tracks how you're handling the governance domain specifically during week one.
- Close out a session and get a short note on what changed and what's worth revisiting next.
Private by design
- Your AB-650 answer history, readiness prediction, and coaching notes stay on your device.
- iCloud sync is available if you want it, off by default and private when switched on.
- No account sits between you and the app.
6-week study plan
Suggested AB-650 study plan
Move from tenant administration to security and AI services. This six-week route gives two weeks each to governance and AI, then time for review.
-
Tenant and workloads
- Configure domains, branding, settings and licences.
- Review Microsoft 365 Backup, connectivity insights and service health.
- Manage mailboxes, Teams, SharePoint and Copilot transcription policies.
-
Identity and access
- Manage users, guests, groups, roles and administrative units.
- Practise PIM and bulk changes with Microsoft Graph PowerShell.
- Review authentication, password protection, SSPR, Conditional Access and ID Protection.
-
Threat and data protection
- Configure Defender for Office 365 policies and alerts.
- Practise investigation and attack simulations.
- Review Purview DLP, sensitivity labels, retention and data security posture.
-
Microsoft 365 Copilot
- Check tenant readiness and address data oversharing.
- Review Copilot settings, Search and Cowork.
- Configure connectors and third-party providers.
-
Agents and AI operations
- Review the Microsoft Entra Agent ID lifecycle.
- Explore the agent registry and Agent 365 governance.
- Monitor AI cost, adoption and health in the Copilot Control System.
-
Review and rehearse
- Use Focus Weak Spots to revisit difficult distinctions.
- Complete two timed, 120-minute Exam Simulator sessions.
- Review errors and plan any further practice.
Frequently asked
AB-650 FAQs
How much does the AB-650 exam cost?
Microsoft prices AB-650 by region and hasn't published a flat beta fee — check the official exam page when you register. During the beta, Microsoft sometimes opens a discounted registration window announced on the Learn blog. Renewal afterwards is a free annual online assessment.
Does the AB-650 certification expire?
Yes. Associate certifications including AB-650 expire annually, renewed free through a short online assessment on Microsoft Learn within the six-month window before expiry. Fundamentals certifications such as AB-900 are different — those don't expire.
What is the AB-650 retake policy if I fail?
AB-650's beta status changes this for now.
- During the beta: you can take the exam only once.
- If you do not pass, you can retake it after the exam becomes generally available; then the standard 24-hour first-retake and 14-day later-retake waits apply.
- Cap: five total attempts within 12 months of the first attempt, each needing its own voucher.
How long should I study for AB-650?
Four to eight weeks is typical if you already administer Microsoft 365 tenants and Microsoft Entra ID. Spend longer if Purview, Conditional Access, Agent 365, or Microsoft Entra Agent ID are unfamiliar. Azure Mastery's readiness gauge is the better signal for when to book.
AB-650 vs AB-620 — administer or build?
Different roles over the same agent estate. AB-620 is the maker-role exam for designing agents inside Copilot Studio. AB-650 is the administrator-role exam: governing whatever agents your organisation ends up with — licensing, identity, Defender, Purview, and Agent 365 monitoring.
AB-650 vs AB-900 — do I need the fundamentals exam first?
AB-900 stays conceptual — what Copilot and agent administration are for. AB-650 expects you to actually configure tenant settings, identity policies, and governance controls, and defend the trade-offs between similar options. AB-900 isn't a formal prerequisite, but it's a solid foundation.
AB-650 vs SC-300 — how much identity overlap is there?
SC-300 goes far deeper into Microsoft Entra identity architecture — hybrid identity, application integration, identity governance. AB-650 covers the identity surface an administrator actually touches day to day, plus the newer agent identity model that SC-300 doesn't cover.
What does the AB-650 exam format actually look like?
AB-650 follows Microsoft's general 40–60 question range, varying by sitting. Azure Mastery's bank weights single-answer and scenario items most heavily, with multi-select, drag-to-match, dropdown, hot-area, and case-study questions layered in — all original practice content.
Can I try Azure Mastery's AB-650 content before paying?
The app is free to download, with 50+ free AB-650 questions and written explanations. The full bank unlocks with a one-time exam-pack purchase, or unlock every exam with a subscription or lifetime upgrade. For broader Microsoft 365 and Copilot revision, Pro adds readiness guidance and coaching alongside the question banks.
Does AB-650 practice work without a connection?
Yes — practice, scoring, and the Exam IQ prediction happen entirely on-device, so a commute with no signal works the same as being online. Nothing to sign up for; iCloud sync is available if you want it.
Free study guides
Free guides that pair with AB-650
Where AB-650 fits
Certification paths that include AB-650
AB-650 is the Microsoft 365 AI Services Administrator credential — the role-based cert for administrators governing Microsoft 365, Copilot, and the agent estate. AB-900 is the optional fundamentals on-ramp, and SC-300 is the natural complement for candidates who also own deep identity architecture. Tap any linked exam below to see its dedicated study app page.
AI Services Administrator path
Terminal at Associate- AB-900 Fundamentals (optional)
- AB-650 AI Services Administrator
Governance + identity combo path
Two role-based certs- AB-900 Fundamentals
- AB-650 Microsoft 365 & AI services
- + SC-300 Identity architecture
- Governance & identity admin role-ready
Sibling: AI Agent Builder track
Associate tierReady to pass AB-650?
Download Azure Mastery free. 506 AB-650 practice questions across all three domains, AI score prediction, full-length exam simulator, adaptive study plan. iPhone & iPad.
Download Azure Mastery — free iPhone & iPad · Free to start · No account required