AB-900: Predict your score.
Know what to study next.
See your predicted score, follow a study plan based on your answers, and revisit topics you're starting to forget. It all runs on your device.
323 practice questions
AI score prediction
100% offline
Download free
iPhone & iPad · Free to startOn your Mac? Scan to install
AB-900M365 Copilot Admin Fundamentals
AB-900 · 30 days left ›
PREDICTED786 ±37✓ Exam Ready · 87% confidence
AB-900 Practice Questions & Exam Prep — Microsoft 365 Copilot and Agent Administration Fundamentals
Get exam-ready for AB-900 (Microsoft 365 Copilot and Agent Administration Fundamentals) on iPhone or iPad. Azure Mastery uses on-device AI to predict your readiness score across all three AB-900 domains — Core M365 features, Data protection and governance, and Copilot / agent admin tasks — builds a personalised study plan from your weak spots, and surfaces topics you're forgetting. Core study stays on-device and works offline; optional sync uses your private iCloud account.
The exam
What is the AB-900 exam?
AB-900 is the Microsoft 365 Copilot and Agent Administration Fundamentals credential — the entry-level exam for IT admins who deploy, govern, and support Microsoft 365 Copilot and Copilot agents in an enterprise.
AB-900 is practical and admin-centre-focused. It covers:
Core Microsoft 365 features and objects across admin centres, identity, and security
Data protection and governance through Microsoft Purview — Information Protection, DLP, Insider Risk, DSPM for AI, and Data Lifecycle Management
How Copilot accesses data via Microsoft Graph while respecting M365, Purview, and Defender controls
Basic admin tasks: assigning Copilot licences, monitoring PAYG billing, approving agents, and tracking agent usage across the M365 and Power Platform admin centres
Expect questions that ask which admin centre or which Purview tool fits a stated business need.
Microsoft published the AB-900 skills outline on 22 July 2026. Every question in Azure Mastery's AB-900 bank is mapped to the current outline — including the newer DSPM for AI, Copilot Analytics, and SharePoint oversharing topics. Read the official outline at learn.microsoft.com.
QuestionsTypically 35–50; varies
Duration45 minutes (65 min seat)
Pass score700 / 1000
CostUSD $99 (≈ £75 UK)
ValidityDoes not expire (Fundamentals)
FormatOnline or test centre
Skills measured · 22 July 2026
AB-900 exam objectives
Three domains, weighted by Microsoft's 22 July 2026 release outline. Every domain below lists Microsoft's own skill groups verbatim from the official skills outline, and Azure Mastery tags each question to its assessed domain so you can see which topics need more practice.
AI & agent skill mapDataModelsAgentsResponsible AI
Identify the core features and objects of Microsoft 365 servicesPublished weight 30–35%
113 exam-scoped practice questions in the app
Explore Core topics
Identify the core objects of Microsoft 365 services
Understand the Microsoft 365 security principles
Identify the core security features of Microsoft 365 services
This domain tests naming the right admin centre — Exchange, SharePoint, Teams, or M365 — for a described object or task.
Candidates who've only used one or two admin centres regularly under-prepare for questions about the others.
Walk through each admin centre once, matching a handful of objects to the console that actually manages them.
Understand data protection and governance tasks for Microsoft 365 and CopilotPublished weight 35–40%
127 exam-scoped practice questions in the app
Explore Protect topics
Understand Microsoft Purview
Understand data security implications of Copilot
Identify data protection and governance risks for Microsoft 365 and Copilot
Identify and monitor oversharing in SharePoint in Microsoft 365
Which Purview surface fits a scenario, from Information Protection through to DSPM for AI, is what this domain actually checks.
Older DLP and labelling features often get more study time than newer surfaces like DSPM for AI and oversharing reports.
Give DSPM for AI and SharePoint oversharing detection the same attention as classic DLP; this domain weighs heaviest.
Perform basic administrative tasks for Copilot and agentsPublished weight 25–30%
83 exam-scoped practice questions in the app
Explore Admin topics
Understand features and capabilities of Copilot and agents
Perform basic administrative tasks for Copilot
Perform basic administrative tasks for agents
Licensing, PAYG billing, agent approval, and monitoring usage across two admin centres make up this domain's operational core.
Agent administration gets confused with agent building, which is separate Copilot Studio maker work outside this exam.
Separate configuring who can use an agent from designing how it responds; only the former is tested here.
Common traps
Where AB-900 candidates slip
Five recurring misconceptions that trip up otherwise well-prepared AB-900 candidates, grounded in the current skills outline.
Know the primary admin surface for each Microsoft 365 workload
Candidates treat the admin centres as interchangeable consoles rather than each owning a distinct set of objects.
Object-to-centre mapping is the graded skill, ahead of simply recognising each console by name.
Match the object named in the scenario to the primary admin surface for that workload, while remembering that some settings are visible in more than one portal.
A Copilot licence and pay-as-you-go billing solve different usage patterns
Both are ways to pay for Copilot, so candidates assume the exam only cares that a valid billing method was picked.
Usage pattern is the variable under test, since both options technically switch Copilot on for the user.
Check whether the scenario describes steady or occasional usage before choosing between a licence and pay-as-you-go billing.
DSPM for AI is scoped to AI tools, not general data loss
Standard DLP and DSPM for AI both stop sensitive content leaking, so candidates default to the more familiar DLP answer.
AB-900 checks whether you route a prompt-or-grounding-data leak to DSPM for AI instead of standard DLP.
Pick DSPM for AI whenever the scenario describes a risk coming specifically from a Copilot or agent response.
Sensitivity labels protect content; oversharing reports find it after the fact
Both sit inside Microsoft Purview, so candidates reach for labelling whenever a question mentions who can access a file.
Telling protection from detection apart is the graded skill, since only one tool shows who has access right now.
Pick an oversharing report, not a sensitivity label, for any question about auditing who currently has access to a site.
Administering an agent is not the same task as building one
AB-900 tests who can use, publish, or monitor an agent, never how the agent's own conversation logic works.
The admin's job, approving and monitoring an agent, is what's graded here, never the maker's conversation design.
Rule out any answer describing conversation design; that work belongs to a separate Copilot Studio certification, not this exam.
Designed for AB-900
How Azure Mastery helps you pass AB-900
Exam-specific practice
323 AB-900 practice questions, each tagged to one of the official three domains.
Coverage weights data protection and governance heaviest at 35–40%, ahead of core M365 features.
Practise naming the right admin centre or Purview surface for a scenario, the exam's real test.
Predicted score
Exam IQ starts forecasting your AB-900 score on-device after about 25 answers, with a confidence range.
It names the specific Purview or admin-centre topic actually dragging your score down.
See which of the three domains needs the most work before you book.
Adaptive study plan
Your plan weights data protection and governance heaviest, matching its 35–40% share of the exam.
Miss a Purview-surface question and the next session surfaces another Purview question first.
Master a topic across three sessions and the plan moves to your next-highest gap.
Knowledge decay
Forget which admin centre owns which object and Purview-surface questions get harder to place too.
A padlock icon marks topics as they approach decay, your signal to revisit before they slip.
Weak Spots sessions pull decayed admin-centre or Purview topics back into rotation.
Exam rehearsal
Rehearse 35–45 original questions on a 45-minute clock; once you submit, there's no going back.
The mix follows the July 2026 outline's domain split, built from Azure Mastery's own bank.
Microsoft alone controls the live AB-900 interface and its exact question set.
Answer Coach
Untangles AB-900's recurring mix-ups: which admin centre owns an object, DSPM for AI versus standard DLP.
Get one wrong and Answer Coach names the exact boundary the scenario was testing.
On an eligible device, a note can be reworded once grounding checks confirm it's safe.
Aura guidance
Aura learns your AB-900 rhythm within a week and adjusts what it recommends.
Each session wraps with a quick note: what changed, what needs attention, your next move.
Private by design
Your AB-900 answers, readiness gauge, and Answer Coach notes stay on-device by default.
There's no Azure Mastery account to sign up for and no server in the loop.
Sync, if you opt in, runs through your own iCloud account only.
3-week study plan
Suggested AB-900 study plan
Build a Microsoft 365 foundation, then explore data protection and Copilot administration. Allow time for practice and review within this three-week route.
Microsoft 365 foundations
Review admin-centre settings, Exchange, SharePoint and Teams objects.
Compare Zero Trust, authentication and authorisation concepts.
Explore Entra access controls, identity troubleshooting and Defender XDR.
Data protection and governance
Review Purview labels, DLP, retention, insider risk and communication compliance.
Explore compliance, investigation and DSPM for AI tools.
Trace Copilot data access and address SharePoint oversharing.
Copilot, agents and review
Compare Copilot and agent capabilities, licensing and usage monitoring.
Review agent access, creation, approval and administration.
Use Focus Weak Spots, then complete and review two 45-minute simulator sessions.
Inside the app
Nine interactive practice formats, on iPhone
Azure Mastery has nine interactive formats for exam practice. The examples below show original AB-900 practice questions in Azure Mastery on iPhone and iPad. The exam simulator uses timed sessions with the published domain weights. Microsoft's live interface and question mix may differ.
Which SharePoint site type is intended for read-mostly news and announcements broadcast to a wide audience, rather than for active team collaboration?
A team site
A hub site
A communication site
A classic publishing site
Multiple choice
An original AB-900 practice question with one correct answer. The app explains every option after you answer.
Exam-specific sample
Which three of the following are recognized as Microsoft's Responsible AI principles? Select three answers.
Transparency
Speed of model release
Fairness
Maximum profit
Reliability and safety
Multi-select
An original AB-900 multi-select question. Select all the correct options to earn the mark.
All-or-nothing
Order the steps to assign a Microsoft 365 Copilot license to one user in the Microsoft 365 admin center.
⋮⋮1Sign in as a License Administrator or User Administrator
⋮⋮2Go to Users > Active users
⋮⋮3Select the user, then open Licenses and apps
⋮⋮4Select the Microsoft 365 Copilot license and save changes
Drag-and-drop
An original AB-900 ordering question you can answer by touch on iPhone and iPad.
Interactive item
From the Power Platform admin center navigation below, select the node where an admin governs Power Platform / Copilot Studio environments and their DLP policies.
Hotspot
An original AB-900 question with a visual prompt, designed for touch on iPhone and iPad.
Tap target
Fabrikam Bank — Microsoft 365 Copilot Pilot Fabrikam Bank is piloting Microsoft 365 Copilot for 200 employees in the Marketing team. The bank is regulated; the IT team wants tight governance from day one.
1Which Microsoft 365 admin centre configuration should the team use?
2Which capability provides this behavior?
3Which Microsoft surface provides this audit capability?
4Which Azure configuration meets this requirement?
Case studies
An original AB-900 case study with several questions about the same requirements and environment.
Multi-question
✕Your answer: A team site
✨ Answer Coach:Team sites are designed for active collaboration with a bundled M365 group, mailbox, and optional Team.
— grounded in authored certification guidance
Answer Coach
Answer Coach explains why the answer is correct and, where available, why each option is right or wrong. It helps you understand a mistake and remember the distinction. Read explanations after each question or at the end of a practice test. On supported devices, optional AI can reword a note on your device after checking it against the written guidance.
App exclusive
Frequently asked
AB-900 FAQs
Which admin centre owns a given object — is that a recurring AB-900 trap?
Yes. AB-900 often gives an object, a mailbox setting, a Teams policy, a SharePoint site, and expects you to know which admin centre actually owns it, rather than treating the centres as interchangeable. Answer Coach names the specific centre a wrong pick would have sent you to instead.
Different scopes. SC-900 is the broad Microsoft security overview: Entra, Defender, Purview, identity. AB-900 is narrower and practical, focused on M365 Copilot administration, with Purview coverage scoped to the Copilot threat surface. Passed SC-900 already? AB-900 feels like an extension. New to both? Start with AB-900 if your role is Copilot-focused.
What question formats should I expect on AB-900?
Most Microsoft Fundamentals exams contain 35–50 questions, but the exact count and formats vary by sitting. Azure Mastery's original practice bank includes single-select, scenario, yes/no, multi-select, drag-to-match, hot-area, drag-and-drop, dropdown, and case-study interactions.
What's the AB-900 exam fee, and does it vary by region?
The listed US price is USD $99, while regional pricing and promotions can change. Check Microsoft's exam page and current offers before booking. Fundamentals certifications never expire, so there's no annual renewal cost.
Once earned, does an AB-900 credential ever lapse?
No. AB-900, like other Microsoft Fundamentals certifications (AZ-900, AI-901, SC-900, DP-900), never expires once earned. Associate and Specialty certifications differ: those require annual renewal on Microsoft Learn.
DSPM for AI vs standard DLP — how does AB-900 tell them apart?
AB-900 tests whether you know DSPM for AI is scoped to Copilot and agent interactions, flagging oversharing and exposure risk in prompts and grounding data, while standard DLP governs data movement across email, Teams, and file storage generally. Picking the wrong one is the exact mix-up Answer Coach catches.
I failed AB-900 — how soon can I book a retake?
The wait before your first retake is 24 hours.
First retake: 24-hour wait.
Second and third retakes: 14-day wait each.
Microsoft caps you at five attempts within any rolling 12-month period, a voucher required each time.
Different jobs. AB-900 is the Fundamentals-tier admin cert: identifying M365 admin-centre objects, Purview surfaces, and Copilot administration controls. AB-620 (AI Agent Builder) is the Associate-tier maker cert: building agents in Copilot Studio with topics and knowledge sources. AB-900 administers; AB-620 builds. Many admins take both.
Can I try Azure Mastery's AB-900 bank before paying?
Yes. The app is free to download with a free allowance of AB-900 questions so you can try every feature. The full 323-question bank unlocks with a one-time exam-pack purchase, or a subscription unlocks every exam in the catalogue.
Can I revise AB-900 offline?
Yes. Nothing in the study loop needs a connection: practice, scoring, and the readiness prediction all happen on-device. No account is needed, and your data only leaves the device if you opt into private iCloud sync.
Free study guides
Free guides that pair with AB-900
Where AB-900 fits
Certification paths that include AB-900
AB-900 is the Fundamentals-tier entry point for Microsoft 365 Copilot and agent admin roles. It pairs with AB-620 for admins who also build Copilot Studio agents, and complements SC-900 for the broader security and identity context. Tap any linked exam below to see its dedicated study app page.
AB-900 is a Fundamentals-tier admin credential. SC-900 covers the broader security / compliance / identity vocabulary you'll see referenced in AB-900's Purview and Defender content; AB-620 is the natural next step for admins who also build agents in Copilot Studio.
Ready to pass AB-900?
Download Azure Mastery free. 323 AB-900 practice questions across all three domains, AI score prediction, full-length exam simulator, adaptive study plan. iPhone & iPad.
