AB-900 Study App for iOS — Microsoft 365 Copilot and Agent Administration Fundamentals
Get exam-ready for AB-900 (Microsoft 365 Copilot and Agent Administration Fundamentals) on iPhone or iPad. Azure Mastery uses on-device AI to predict your readiness score across all three AB-900 domains — Core M365 features, Data protection and governance, and Copilot / agent admin tasks — builds a personalised study plan from your weak spots, and surfaces topics you're forgetting. All without sending a single byte off your device.
The exam
What is the AB-900 exam?
AB-900 is the Microsoft 365 Copilot and Agent Administration Fundamentals credential — the entry-level exam for IT admins who deploy, govern, and support Microsoft 365 Copilot and Copilot agents in an enterprise. AB-900 covers the core features and objects of Microsoft 365 (admin centres, identity, security), data protection and governance via Microsoft Purview, and the basic administrative tasks for Copilot and agents (licensing, monitoring, agent approval, lifecycle).
AB-900 is practical and admin-centre-focused. It validates that you can identify the right Microsoft 365 admin centre and object for a task (Exchange, SharePoint, Teams, M365), recognise Microsoft Purview surfaces (Information Protection, DLP, Insider Risk, DSPM for AI, Data Lifecycle Management), understand how Copilot accesses data via Microsoft Graph and respects M365 / Purview / Defender controls, and perform basic admin tasks (assign Copilot licences, monitor PAYG billing, approve agents, monitor agent usage in M365 and Power Platform admin centres). Expect questions that ask which admin centre or which Purview tool fits a stated business need.
Microsoft published the AB-900 skills outline in May 2026. Every question in Azure Mastery's AB-900 bank is mapped to the current outline — including the newer DSPM for AI, Copilot Analytics, and SharePoint oversharing topics. Read the official outline at learn.microsoft.com.
Questions35–45 mixed format
Duration45 minutes (65 min seat)
Pass score700 / 1000
CostUSD $99 (≈ £75 UK)
ValidityDoes not expire (Fundamentals)
FormatOnline or test centre
Skills measured · May 2026
AB-900 exam objectives
Three domains, weighted by Microsoft's May 2026 release outline. Every domain summary below is paraphrased from the official skills outline; bullet-level objectives in Azure Mastery are tagged so you always know which domain you're being tested on and where your weak spots cluster.
Identify the core features and objects of Microsoft 365 services30–35%
The M365 admin foundation. Identify the right admin centre and object for a task — M365 admin centre (domain names, org settings, licences), Exchange Online (mailboxes, distribution lists), SharePoint in M365 (sites, libraries, permissions), Teams (teams, channels, policies). Understand Microsoft 365 security principles — Zero Trust, authentication / authorisation methods, Microsoft Defender XDR features. Identify Microsoft Entra capabilities — conditional access, SSO, MFA, Privileged Identity Management (PIM), App registrations and Enterprise apps, audit logs, Identity Secure Score, and tools for common sign-in troubleshooting. Around 11–16 questions per sitting.
Understand data protection and governance tasks for Microsoft 365 and Copilot35–40%
The largest domain. Microsoft Purview surfaces — Information Protection, Data Loss Prevention (DLP), Insider Risk Management, Communication Compliance, Data Security Posture Management (DSPM) for AI, and Data Lifecycle Management. Sensitivity labels, data classification, retention. Understand how Copilot accesses data, how Microsoft Graph influences Copilot responses, and how Copilot uses M365 / Purview / Defender controls to protect against risk. Use Compliance Manager, Data Explorer, Insider Risk, Communication Compliance, Activity Explorer, DSPM for AI, and Content search in eDiscovery. Identify and monitor SharePoint oversharing — including SharePoint Advanced Management's restricted site access. Around 14–18 questions.
Perform basic administrative tasks for Copilot and agents25–30%
The Copilot ops layer. Compare built-in Copilot and agent capabilities, monthly licence vs pay-as-you-go (including SharePoint), enableable / disableable Copilot features, and use cases for Researcher, Analyst, and custom agents. Assign Copilot licences. Monitor PAYG billing policies. Track Copilot usage and adoption via Copilot Analytics in the M365 admin centre. Manage prompts (save, share, schedule, delete). For agents: configure user access, create an agent, understand the agent approval process, and monitor agents (usage, operational insights, lifecycle) via M365 admin centre and Microsoft Power Platform admin centre. Around 9–14 questions.
Designed for AB-900
How Azure Mastery helps you pass AB-900
Azure Mastery ships with 358 AB-900 practice questions, every one written specifically against the current (May 2026) skills outline — not generic Microsoft 365 trivia. Each question carries a domain tag mapped to the official three domains (Core M365 features, Data protection & governance, Copilot / agent admin tasks), so you always know which area you're being tested on and where your weak spots are clustered. Admin-centre object lookups, Microsoft Purview surface comparisons, and Copilot Analytics scenarios appear throughout — matching the format of the live exam.
The on-device Exam IQ engine predicts your AB-900 score before you sit the exam. After roughly 25 questions it has enough signal to give a confidence-scored prediction (e.g. "786 ±37, 68% confidence") — and tells you the specific topics that are dragging your readiness down. No vague "study more" advice; just a ranked list of objectives where improvement would move your score the furthest.
The adaptive study plan rebuilds itself from your answer history. Get a Purview question wrong? The engine surfaces another Purview question in your next session. Master a topic across three sessions and it backs off, prioritising the next-highest-leverage gap. The plan optimises for the gap between where you are and the 700 pass score, weighted toward Data Protection & Governance because it's the heaviest (35–40%) domain — not for blind volume.
Knowledge decay tracking matters even for a Fundamentals exam — Microsoft 365 admin centres and Purview surfaces are easy to confuse if you only study them once. Azure Mastery tracks every topic's decay curve and flags topics approaching expiry. The padlock icon on the Today screen is your "revisit before you forget" cue, and weak-spot drills automatically pull from decayed topics first.
Real exam simulation mode runs at AB-900's actual length and time pressure: a randomised 35–45-question set drawn from the full 324-question bank, weighted by domain percentages from the May 2026 outline, with the 45-minute timer running and no jumping back to flag-and-review. It's the closest you can get to the live Pearson VUE / online-proctored experience without sitting the exam.
Everything runs on-device. Your answer history, your readiness gauge, your decay alerts — none of it leaves your iPhone or iPad. No account required to start, no tracking, no sync server. Privacy-first by design.
3-week study plan
Suggested AB-900 study plan
Most candidates pass AB-900 after two to four weeks of focused study, depending on prior Microsoft 365 admin experience. The three-week plan below maps onto the three AB-900 domains (weighted toward Data Protection & Governance at 35–40%), Azure Mastery's adaptive sessions, and the in-app exam simulator. Adjust pace to taste — the readiness gauge tells you when you're done, not the calendar.
Core features and objects of Microsoft 365
Week 1: Identify the core objects of Microsoft 365 services — M365 admin centre (licences, domain names, org settings), Exchange Online (mailboxes, distribution lists), SharePoint in M365 (sites, libraries, permissions), Teams (teams, channels, policies). Zero Trust principles, authentication and authorisation methods. Microsoft Defender XDR. Microsoft Entra — conditional access, SSO, MFA, PIM, App registrations / Enterprise apps, audit logs, Identity Secure Score, sign-in troubleshooting tools.
Data protection and governance
Week 2: Largest domain (35–40%). Microsoft Purview surfaces — Information Protection, DLP, Insider Risk Management, Communication Compliance, DSPM for AI, Data Lifecycle Management. Sensitivity labels, classification, retention. How Copilot accesses data via Microsoft Graph and respects M365 / Purview / Defender controls. Responsible AI principles. Use Compliance Manager, Data Explorer, Insider Risk, Communication Compliance, Activity Explorer, DSPM for AI, and Content search in eDiscovery. SharePoint oversharing — including SharePoint Advanced Management restricted site access.
Copilot & agent admin tasks, sharpen, simulate
Week 3: Compare built-in capabilities of Copilot and agents, monthly licence vs PAYG (including SharePoint), enable / disable Copilot features, use cases for Researcher / Analyst / custom agents. Assign Copilot licences, monitor PAYG billing, monitor adoption via Copilot Analytics, manage prompts. For agents: configure user access, create agents, approval process, monitoring via M365 and Power Platform admin centres. Then: run Focus Weak Spots every morning, plus two end-to-end Exam Simulator runs at full 45-minute length. Schedule the exam when readiness gauge is 720+ with reasonable confidence.
Inside the app
Every Microsoft question type, on iPhone
AB-900's question bank uses the same formats Microsoft puts on the live exam — not just multiple choice. Each visualisation below is a faithful mock of how the type renders inside Azure Mastery on iPhone and iPad. Exam-simulator mode runs all of them at full 45-minute length with no flag-and-review jumps, mirroring Pearson VUE.
Which Azure compute service is best for event-driven container workloads?
Azure Functions
Azure Container Apps
Azure Service Bus
Azure App Service
Multiple choice
One correct answer from four to six options. The most common type on every Azure exam — practical recall of services, settings, and limits.
~50% of questions
Select two services that support point-in-time restore.
Azure SQL Database
Azure Service Bus
Azure Cosmos DB
Azure Functions
Multi-select
Pick two or more correct answers from a list. Microsoft tells you exactly how many to choose. Partial credit not awarded — you need every selection right.
All-or-nothing
Order the steps to deploy a Bicep template.
⋮⋮1Create resource group
⋮⋮2az bicep build
⋮⋮3az deployment group create
⋮⋮4Verify outputs
Drag-and-drop
Arrange items into the correct sequence — deployment steps, the order operations occur in a pipeline, troubleshooting flows. Long-press to drag on touch.
Order matters
Tap the setting that enables soft delete on this storage account.
Hotspot
Tap the correct area of an image — the right setting in a portal screenshot, the right resource in a topology diagram. Practical visual recall under time pressure.
Tap target
Contoso Ltd needs to migrate 40 VMs from on-premises to Azure with an RTO of four hours and zero data loss…
1Which migration tool meets the RTO?
2What backup tier is required?
3Which network design supports failover?
4How should they configure RBAC?
Case studies
Rare on Fundamentals exams — AB-900 mostly uses single-question formats. When they do appear, expect a short scenario about a Microsoft 365 admin task or Copilot rollout with 2–3 linked questions.
Rare on AB-900
✕Your answer: Azure Service Bus
✨ Why wrong:Service Bus is for enterprise messaging with FIFO & transactions. The scenario specifies massive event ingestion at high throughput — Event Hubs is the right primitive…
— generated on-device by Apple Foundation Model
Why Wrong AI
An Azure Mastery exclusive. When you answer incorrectly, an on-device Apple Foundation Model writes a targeted explanation grounded in the correct rationale. Never leaves your device.
App exclusive
Frequently asked
AB-900 FAQs
How much does the AB-900 exam cost?
AB-900 is a Fundamentals-tier exam. The voucher is USD $99 in the United States; in the UK it's typically around £75. Microsoft regularly offers free vouchers via Microsoft Build, Microsoft Ignite, and free virtual training events for Fundamentals certifications, so check your Microsoft Learn profile for active offers before booking. Fundamentals certifications do not expire, so there is no annual renewal cost.
Does the AB-900 certification expire?
No. AB-900, like other Microsoft Fundamentals certifications (AZ-900, AI-900, AI-901, SC-900, DP-900), does not expire. Once earned, the credential is yours permanently. This is in contrast to Associate and Specialty certifications which require annual renewal on Microsoft Learn.
What is the AB-900 retake policy if I fail?
The first retake is allowed after 24 hours. Second and third retakes each require a 14-day wait. Microsoft caps retakes at five attempts per 12-month rolling period. Each attempt requires a new voucher purchase. AB-900's Fundamentals tier means questions are broader than they are deep, so most retake failures come from skipped Purview / Defender XDR content rather than M365 admin centre topics.
How long should I study for AB-900?
Most candidates pass AB-900 after two to four weeks of focused study, assuming basic Microsoft 365 admin familiarity. If Microsoft 365 admin centres and Microsoft Entra are new to you, plan for six weeks — the exam expects you to recognise admin-centre objects (Exchange, SharePoint, Teams, M365), Purview surfaces (Information Protection, DLP, Insider Risk, DSPM for AI), and Defender XDR features. Azure Mastery's readiness gauge tells you when you're at exam-ready; don't book until it shows roughly 720 or higher.
AB-900 vs SC-900 — which should I take first?
Different scopes. SC-900 (Security, Compliance, and Identity Fundamentals) is the broad Microsoft security overview — Entra, Defender, Purview, compliance, identity. AB-900 is narrower and more practical: it focuses on Microsoft 365 Copilot administration, with security and Purview coverage scoped to the Copilot / agent threat surface (DSPM for AI, sensitivity-label flow into Copilot grounding, oversharing in SharePoint). If you already passed SC-900, AB-900 will feel like an extension. If you're starting fresh and your role is M365-Copilot-focused, take AB-900 directly first.
AB-900 vs AB-620 — what's the difference?
Different jobs. AB-900 is the Fundamentals-tier admin cert: it expects you to identify Microsoft 365 admin-centre objects, Purview governance surfaces, and Copilot administration controls (licensing, usage analytics, agent approval flow). AB-620 (AI Agent Builder) is the Associate-tier maker cert: it expects you to build agents in Copilot Studio with topics, generative answers, knowledge sources, and channel deployments. AB-900 administers; AB-620 builds. Many M365 admins take both because real-world Copilot rollouts require admin governance and maker support.
Where AB-900 fits
Certification paths that include AB-900
AB-900 is the Fundamentals-tier entry point for Microsoft 365 Copilot and agent admin roles. It pairs with AB-620 for admins who also build Copilot Studio agents, and complements SC-900 for the broader security and identity context. Tap any linked exam below to see its dedicated study app page.
AB-900 is a Fundamentals-tier admin credential. SC-900 covers the broader security / compliance / identity vocabulary you'll see referenced in AB-900's Purview and Defender content; AB-620 is the natural next step for admins who also build agents in Copilot Studio.
Ready to pass AB-900?
Download Azure Mastery free. 358 AB-900 practice questions across all three domains, AI score prediction, full-length exam simulator, adaptive study plan. iPhone & iPad.
