Download free
iPhone & iPad · Free to startOn your Mac? Scan to install
AB-900M365 Copilot Admin Fundamentals
AB-900 · 30 days left ›
PREDICTED786 ±37✓ Exam Ready · 87% confidence
Inside the app
Nine interactive practice formats, on iPhone
Azure Mastery has nine interactive formats for exam practice. The examples below show original AB-900 practice questions in Azure Mastery on iPhone and iPad. The exam simulator uses timed sessions with the published domain weights. Microsoft's live interface and question mix may differ.
Which SharePoint site type is intended for read-mostly news and announcements broadcast to a wide audience, rather than for active team collaboration?
A team siteTeam sites are designed for active collaboration with a bundled M365 group, mailbox, and optional Team.
A hub siteHub sites unify navigation across associated sites — they're a structural pattern, not a broadcast content type.
A communication siteCommunication sites are designed for read-mostly news and broadcast scenarios with rich pages and news web parts.
A classic publishing siteClassic publishing sites are legacy and Microsoft recommends modern communication sites instead.
Multiple choice
An original AB-900 practice question with one correct answer. Choose an option to read its written rationale.
Exam-specific sampleExplore more question formats
Which three of the following are recognized as Microsoft's Responsible AI principles? Select three answers.
TransparencyTransparency is a Responsible AI principle, requiring that AI behaviour be explainable and understandable to the people it affects.
Speed of model releaseSpeed of model release is a delivery metric, not a Responsible AI principle, and rushing releases can compromise the careful testing the framework calls for.
FairnessFairness is one of Microsoft's six Responsible AI principles, requiring systems to treat all groups equitably and avoid biased outcomes.
Maximum profitMaximum profit is a business objective rather than a Responsible AI principle, and pursuing it without guardrails can undermine equitable, accountable AI.
Reliability and safetyReliability and safety is a Responsible AI principle, requiring systems to perform dependably and fail safely under unexpected conditions.
Multi-select
An original AB-900 multi-select question. Select all the correct options to earn the mark.
All-or-nothing
Order the steps to assign a Microsoft 365 Copilot license to one user in the Microsoft 365 admin center.
⋮⋮1Sign in as a License Administrator or User Administrator
⋮⋮2Go to Users > Active users
⋮⋮3Select the user, then open Licenses and apps
⋮⋮4Select the Microsoft 365 Copilot license and save changes
Drag-and-drop
An original AB-900 ordering question you can answer by touch on iPhone and iPad.
Interactive item
From the Power Platform admin center navigation below, select the node where an admin governs Power Platform / Copilot Studio environments and their DLP policies.
Hotspot
An original AB-900 question with a visual prompt, designed for touch on iPhone and iPad.
Tap target
Fabrikam Bank — Microsoft 365 Copilot Pilot Fabrikam Bank is piloting Microsoft 365 Copilot for 200 employees in the Marketing team. The bank is regulated; the IT team wants tight governance from day one.
1Which Microsoft 365 admin centre configuration should the team use?
2Which capability provides this behavior?
3Which Microsoft surface provides this audit capability?
4Which Azure configuration meets this requirement?
Case studies
An original AB-900 case study with several questions about the same requirements and environment.
Multi-question
✕Your answer: A team site
✨ Answer Coach:Team sites are designed for active collaboration with a bundled M365 group, mailbox, and optional Team.
— grounded in authored certification guidance
Answer Coach
Answer Coach explains why the answer is correct and, where available, why each option is right or wrong. It helps you understand a mistake and remember the distinction. Read explanations after each question or at the end of a practice test. On supported devices, optional AI can reword a note on your device after checking it against the written guidance.
App exclusive
AB-900 Practice Questions & Exam Prep — Microsoft 365 Copilot and Agent Administration Fundamentals
Get exam-ready for AB-900 (Microsoft 365 Copilot and Agent Administration Fundamentals) on iPhone or iPad. Azure Mastery uses on-device AI to predict your readiness score across all three AB-900 domains — Core M365 features, Data protection and governance, and Copilot / agent admin tasks — builds a personalised study plan from your weak spots, and surfaces topics you're forgetting. Core study stays on-device and works offline; optional sync uses your private iCloud account.
The exam
What is the AB-900 exam?
AB-900 is the Microsoft 365 Copilot and Agent Administration Fundamentals credential — the entry-level exam for IT admins who deploy, govern, and support Microsoft 365 Copilot and Copilot agents in an enterprise.
AB-900 is practical and admin-centre-focused. It covers:
Core Microsoft 365 features and objects across admin centres, identity, and security
Data protection and governance through Microsoft Purview — Information Protection, DLP, Insider Risk, DSPM for AI, and Data Lifecycle Management
How Copilot accesses data via Microsoft Graph while respecting M365, Purview, and Defender controls
Basic admin tasks: assigning Copilot licences, monitoring PAYG billing, approving agents, and tracking agent usage across the M365 and Power Platform admin centres
Expect questions that ask which admin centre or which Purview tool fits a stated business need.
The AB-900 English skills revision takes effect on 14 October 2026. Microsoft 365 administrators should revisit the core security features skill group, marked as a minor change in the AB-900 change log. Earlier sittings use the preceding outline. The document update was 14 September 2026; that publication date does not bring the new assessment forward. Localized exam versions can follow a different schedule.
QuestionsTypically 35–50; varies
Duration45 minutes (65 min seat)
Pass score700 / 1000
CostUSD $99 (≈ £75 UK)
ValidityDoes not expire (Fundamentals)
FormatOnline or test centre
Published domains · English revision 14 October 2026
AB-900 exam objectives
The administration foundation starts with Microsoft 365 services and tenant objects, moves into protection and governance, and ends with basic Copilot and agent tasks. The weights are 30–35%, 35–40%, and 25–30%. Use them to balance conceptual knowledge with administrative responsibilities. See the published outline; the revision notice above explains which date applies.
AI & agent skill mapDataModelsAgentsResponsible AI
Identify the core features and objects of Microsoft 365 servicesPublished weight 30–35%
113 exam-scoped practice questions in the app
Explore Core topics
Identify the core objects of Microsoft 365 services
Understand the Microsoft 365 security principles
Identify the core security features of Microsoft 365 services
This domain tests naming the right admin centre — Exchange, SharePoint, Teams, or M365 — for a described object or task.
Candidates who've only used one or two admin centres regularly under-prepare for questions about the others.
Walk through each admin centre once, matching a handful of objects to the console that actually manages them.
Understand data protection and governance tasks for Microsoft 365 and CopilotPublished weight 35–40%
127 exam-scoped practice questions in the app
Explore Protect topics
Understand Microsoft Purview
Understand data security implications of Copilot
Identify data protection and governance risks for Microsoft 365 and Copilot
Identify and monitor oversharing in SharePoint in Microsoft 365
Which Purview surface fits a scenario, from Information Protection through to DSPM for AI, is what this domain actually checks.
Older DLP and labelling features often get more study time than newer surfaces like DSPM for AI and oversharing reports.
Give DSPM for AI and SharePoint oversharing detection the same attention as classic DLP; this domain weighs heaviest.
Perform basic administrative tasks for Copilot and agentsPublished weight 25–30%
83 exam-scoped practice questions in the app
Explore Admin topics
Understand features and capabilities of Copilot and agents
Perform basic administrative tasks for Copilot
Perform basic administrative tasks for agents
Licensing, PAYG billing, agent approval, and monitoring usage across two admin centres make up this domain's operational core.
Agent administration gets confused with agent building, which is separate Copilot Studio maker work outside this exam.
Separate configuring who can use an agent from designing how it responds; only the former is tested here.
Common traps
Where AB-900 candidates slip
Five recurring misconceptions that trip up otherwise well-prepared AB-900 candidates, grounded in the current skills outline.
Know the primary admin surface for each Microsoft 365 workload
Candidates treat the admin centres as interchangeable consoles rather than each owning a distinct set of objects.
Object-to-centre mapping is the graded skill, ahead of simply recognising each console by name.
Match the object named in the scenario to the primary admin surface for that workload, while remembering that some settings are visible in more than one portal.
A Copilot licence and pay-as-you-go billing solve different usage patterns
Both are ways to pay for Copilot, so candidates assume the exam only cares that a valid billing method was picked.
Usage pattern is the variable under test, since both options technically switch Copilot on for the user.
Check whether the scenario describes steady or occasional usage before choosing between a licence and pay-as-you-go billing.
DSPM for AI is scoped to AI tools, not general data loss
Standard DLP and DSPM for AI both stop sensitive content leaking, so candidates default to the more familiar DLP answer.
AB-900 checks whether you route a prompt-or-grounding-data leak to DSPM for AI instead of standard DLP.
Pick DSPM for AI whenever the scenario describes a risk coming specifically from a Copilot or agent response.
Sensitivity labels protect content; oversharing reports find it after the fact
Both sit inside Microsoft Purview, so candidates reach for labelling whenever a question mentions who can access a file.
Telling protection from detection apart is the graded skill, since only one tool shows who has access right now.
Pick an oversharing report, not a sensitivity label, for any question about auditing who currently has access to a site.
Administering an agent is not the same task as building one
AB-900 tests who can use, publish, or monitor an agent, never how the agent's own conversation logic works.
The admin's job, approving and monitoring an agent, is what's graded here, never the maker's conversation design.
Rule out any answer describing conversation design; that work belongs to a separate Copilot Studio certification, not this exam.
Designed for AB-900
How Azure Mastery helps you pass AB-900
Exam-specific practice
323 AB-900 practice questions, each tagged to one of the official three domains.
Coverage weights data protection and governance heaviest at 35–40%, ahead of core M365 features.
Practise naming the right admin centre or Purview surface for a scenario, the exam's real test.
Predicted score
Exam IQ starts forecasting your AB-900 score on-device after about 25 answers, with a confidence range.
It names the specific Purview or admin-centre topic actually dragging your score down.
See which of the three domains needs the most work before you book.
Adaptive study plan
Your plan weights data protection and governance heaviest, matching its 35–40% share of the exam.
Miss a Purview-surface question and the next session surfaces another Purview question first.
Master a topic across three sessions and the plan moves to your next-highest gap.
Knowledge decay
Forget which admin centre owns which object and Purview-surface questions get harder to place too.
A padlock icon marks topics as they approach decay, your signal to revisit before they slip.
Weak Spots sessions pull decayed admin-centre or Purview topics back into rotation.
Exam rehearsal
Rehearse 35–45 original questions on a 45-minute clock; once you submit, there's no going back.
The mix follows the July 2026 outline's domain split, built from Azure Mastery's own bank.
Microsoft alone controls the live AB-900 interface and its exact question set.
Answer Coach
Untangles AB-900's recurring mix-ups: which admin centre owns an object, DSPM for AI versus standard DLP.
Get one wrong and Answer Coach names the exact boundary the scenario was testing.
On an eligible device, a note can be reworded once grounding checks confirm it's safe.
Aura guidance
Aura learns your AB-900 rhythm within a week and adjusts what it recommends.
Each session wraps with a quick note: what changed, what needs attention, your next move.
Private by design
Your AB-900 answers, readiness gauge, and Answer Coach notes stay on-device by default.
There's no Azure Mastery account to sign up for and no server in the loop.
Sync, if you opt in, runs through your own iCloud account only.
3-week study plan
Suggested AB-900 study plan
Build a Microsoft 365 foundation, then explore data protection and Copilot administration. Allow time for practice and review within this three-week route.
Microsoft 365 foundations
Review admin-centre settings, Exchange, SharePoint and Teams objects.
Compare Zero Trust, authentication and authorisation concepts.
Explore Entra access controls, identity troubleshooting and Defender XDR.
Data protection and governance
Review Purview labels, DLP, retention, insider risk and communication compliance.
Explore compliance, investigation and DSPM for AI tools.
Trace Copilot data access and address SharePoint oversharing.
Copilot, agents and review
Compare Copilot and agent capabilities, licensing and usage monitoring.
Review agent access, creation, approval and administration.
Use Focus Weak Spots, then complete and review two 45-minute simulator sessions.
Frequently asked
AB-900 FAQs
Which admin centre owns a given object — is that a recurring AB-900 trap?
Yes. AB-900 often gives an object, a mailbox setting, a Teams policy, a SharePoint site, and expects you to know which admin centre actually owns it, rather than treating the centres as interchangeable. Answer Coach names the specific centre a wrong pick would have sent you to instead.
AB-900 vs SC-900 — which should I take first?
Different scopes. SC-900 is the broad Microsoft security overview: Entra, Defender, Purview, identity. AB-900 is narrower and practical, focused on M365 Copilot administration, with Purview coverage scoped to the Copilot threat surface. Passed SC-900 already? AB-900 feels like an extension. New to both? Start with AB-900 if your role is Copilot-focused.
What question formats should I expect on AB-900?
Microsoft lists a 45-minute assessment for Copilot and Agent Administration Fundamentals. Fundamentals sittings commonly contain 35–50 questions, but the booking can vary. Study tenant objects and roles, protection responsibilities, and routine Copilot administration. Azure Mastery uses original exercises to practise those decisions; its interactive formats do not promise a particular mix in your live exam.
What's the AB-900 exam fee, and does it vary by region?
The appointment provider calculates your fee using the country or region where you take the assessment. Read that quote before paying, rather than assuming a universal dollar price. Microsoft's Copilot and Agent Administration Fundamentals page links the booking service. The earned Fundamentals credential has no annual renewal charge.
Once earned, does an AB-900 credential ever lapse?
Copilot and Agent Administration Fundamentals is a non-expiring Microsoft Fundamentals credential. There is no yearly assessment to retain it. Microsoft can still revise the skills being tested for new candidates, so permanent credential validity should not be confused with an unchanged syllabus. Keep tenant administration knowledge current when Copilot capabilities and governance controls evolve.
DSPM for AI vs standard DLP — how does AB-900 tell them apart?
AB-900 tests whether you know DSPM for AI is scoped to Copilot and agent interactions, flagging oversharing and exposure risk in prompts and grounding data, while standard DLP governs data movement across email, Teams, and file storage generally. Picking the wrong one is the exact mix-up Answer Coach catches.
I failed AB-900 — how soon can I book a retake?
The wait before your first retake is 24 hours.
First retake: 24-hour wait.
All subsequent retakes: 14-day wait each.
Microsoft caps you at five attempts within any rolling 12-month period, a voucher required each time.
AB-900 vs AB-620 — what's the difference?
Different jobs. AB-900 is the Fundamentals-tier admin cert: identifying M365 admin-centre objects, Purview surfaces, and Copilot administration controls. AB-620 (AI Agent Builder) is the Associate-tier maker cert: building agents in Copilot Studio with topics and knowledge sources. AB-900 administers; AB-620 builds. Many admins take both.
Can I try Azure Mastery's AB-900 bank before paying?
Yes. The app is free to download with 50+ free AB-900 questions and written explanations. The full 323-question bank unlocks with a one-time exam-pack purchase, or a subscription unlocks every exam in the catalogue. Advanced study tools require Pro.
Can I revise AB-900 offline?
Yes. Nothing in the study loop needs a connection: practice, scoring, and the readiness prediction all happen on-device. No account is needed, and your data only leaves the device if you opt into private iCloud sync.
Free study guides
Free guides that pair with AB-900
Where AB-900 fits
Certification paths that include AB-900
AB-900 is the Fundamentals-tier entry point for Microsoft 365 Copilot and agent admin roles. It pairs with AB-620 for admins who also build Copilot Studio agents, and complements SC-900 for the broader security and identity context. Tap any linked exam below to see its dedicated study app page.
AB-900 is a Fundamentals-tier admin credential. SC-900 covers the broader security / compliance / identity vocabulary you'll see referenced in AB-900's Purview and Defender content; AB-620 is the natural next step for admins who also build agents in Copilot Studio.
Ready to pass AB-900?
Download Azure Mastery free. 323 AB-900 practice questions across all three domains, AI score prediction, full-length exam simulator, adaptive study plan. iPhone & iPad.
Azure Mastery
Exam AB-900
Download
