AB-900 Practice Exam — AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals

Analysis: Correct answers: Statement 1: No; Statement 2: Yes; Statement 3: No. The Search & intelligence feature in the Microsoft 365 admin center is used to manage search settings and insights for Microsoft 365, not to view administrative service administrator audit logs. The Microsoft Defender portal (now part of the Microsoft Purview compliance portal ecosystem) includes an Audit log search feature that can be used to view administrative actions taken by service administrators. The Audit feature for Microsoft 365 administrative actions is not available in the Microsoft Purview governance portal, which is used for data governance and discovery across data platforms. Key Concept: Microsoft 365 audit logs for administrative actions are accessed via the Audit feature in the Microsoft Defender portal or the Microsoft Purview compliance portal, not other unrelated Microsoft portals. References: Search audit logs in the Microsoft Defender portal, Office 365 Management Activity API reference, https://learn.microsoft.com/en-us/office/office-365-management-api/office-365-management-activity-api-reference

Analysis: The correct completed sentence is: Microsoft Entra Privileged Identity Management (PIM) provides time-bound role activation. The other options are incorrect: restricted access to Microsoft 365 services is a general access control function, not the core specific capability PIM provides; user lifecycle management is handled by Microsoft Entra ID Governance and other user management tools, not PIM; enterprise application management is a core feature of the main Microsoft Entra ID service, not PIM. PIM is built for just-in-time privileged access, which uses time-bound activation to limit standing privileged access and reduce security risk. Key Concept: Microsoft Entra Privileged Identity Management (PIM) enables just-in-time privileged access management through time-bound role activation to minimize standing privileged access risk. References: What is Privileged Identity Management?, https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-configure

Option Analysis: A. Option A is incorrect because a Microsoft 365 Copilot connector is used to integrate external data sources into Microsoft Copilot, not to enable third-party cloud service authentication to Microsoft Entra. B. Option B is incorrect because multifactor authentication is an additional verification step for sign-ins, not a configuration that enables a third-party service to authenticate to Microsoft Entra in the first place. C. Option C is incorrect because a Conditional Access policy is used to enforce access controls for existing authentication scenarios, not to register and enable a third-party service to authenticate to Microsoft Entra. D. Option D is correct because app registration in Microsoft Entra ID registers the third-party application as a service principal, establishes the trust relationship, and configures the settings required for the service to authenticate to Microsoft Entra. Key Concept: Any application or third-party cloud service that wants to use Microsoft Entra ID for authentication and authorization must first be registered in the Microsoft Entra tenant. References: Application and service principal objects in Microsoft Entra ID, https://learn.microsoft.com/en-us/entra/identity-platform/app-objects-and-service-principals Quickstart: Register an application with the Microsoft identity platform, https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app

Analysis: The correct answer is: provide control over how users can access cloud apps. Option 1 is incorrect because Conditional Access policies are configured in Microsoft Entra ID (formerly Azure Active Directory), not the Microsoft Defender portal. Option 2 is incorrect because Conditional Access policies apply to both cloud and on-premises resources, not only on-premises resources. Option 4 is incorrect because Conditional Access does not require a Microsoft Exchange mailbox to function. Key Concept: Microsoft Entra Conditional Access is Azure AD's policy engine that enforces automated access control decisions for accessing cloud and organizational resources based on defined conditions. References: What is Conditional Access in Microsoft Entra ID?, https://learn.microsoft.com/en-us/entra/identity/conditional-access/overview

Analysis: The correct answer to complete the sentence is accountability. This definition directly matches Microsoft's description of the accountability responsible AI principle, which mandates human oversight and responsibility for AI systems to ensure humans retain control over AI system outcomes. Other principles do not fit this definition: inclusiveness focuses on accessibility for all people, privacy and security focuses on protecting data, reliability and safety focuses on consistent, safe system performance, and transparency focuses on clear disclosure of how AI systems work. Key Concept: Microsoft's accountable AI principle requires that stakeholders maintain human oversight and responsibility for all AI systems to ensure humans remain in control of AI outcomes. References: Microsoft Responsible AI Principles, Microsoft Learn: Introduction to responsible AI