AB-900 Sample Questions With Answers

About these questions

These five questions are original. We wrote them in the spirit of the AB-900 skills measured as of October 14, 2026, spread across the three domains. They are not real exam questions, and the real exam will word things differently.

How to use these

Try each question without looking at your notes, and pick an answer before you open the explanation. Then read the explanation even when you were right, because the reason the closest wrong option fails is where the learning is. Note any domain where you slipped and revisit it on the domains explained page.

Question 1 (Identify the core features and objects of Microsoft 365 services)

Fabrikam wants a Microsoft Entra security group that automatically adds a user whenever the job title attribute is set to Technician, and removes the user when it changes. Which option meets this requirement, and what is needed for it?

  • A. An assigned membership group, which needs Microsoft Entra ID P2
  • B. A dynamic distribution group, which needs Microsoft Entra ID P1
  • C. A dynamic membership group, which needs Microsoft Entra ID P1
  • D. A dynamic membership group, which is included in Microsoft Entra ID Free
Show the answer and explanation

Correct answer: C. A dynamic membership group uses a rule on user attributes, such as job title, to add and remove members automatically. This feature needs Microsoft Entra ID P1 licensing for the users who are members. Option D is the closest wrong option: it names the right group type but wrongly places it in the Free edition. A dynamic distribution group is an Exchange mail object, not a security group, and an assigned group is maintained by hand, so it would not react to attribute changes.

Question 2 (Identify the core features and objects of Microsoft 365 services)

At Contoso, a budget workbook vanished from a SharePoint document library. The finance director wants to know which person deleted it and at what time. Which tool should an administrator use?

  • A. Microsoft Entra audit logs
  • B. Microsoft Purview Audit
  • C. Microsoft Entra sign-in logs
  • D. Microsoft Purview Data Explorer
Show the answer and explanation

Correct answer: B. Microsoft Purview Audit records user and admin activity across services such as SharePoint, OneDrive, Exchange, and Teams, so a search can show who deleted the file and when. Entra audit logs, the closest wrong option, record changes to the directory such as users, groups, and apps, not actions on files. Entra sign-in logs show authentication events only. Data Explorer shows a snapshot of classified content, not a history of what users did.

Question 3 (Understand data protection and governance tasks for Microsoft 365 and Copilot)

A Copilot user at Woodgrove Bank is shown details from a staff bonus spreadsheet. The file turns out to be shared with every employee in the organization. What addresses the root cause?

  • A. Remove the user’s Copilot license
  • B. Turn off web search in Copilot
  • C. Remove the overly broad sharing permission from the file
  • D. Move the spreadsheet to another folder in the same library
Show the answer and explanation

Correct answer: C. Copilot only surfaces content that the signed-in user is already allowed to see, so the underlying problem is the oversharing. Fixing the permission closes the gap for everyone, whether or not they use Copilot. Removing the license, the closest wrong option, would hide the symptom for one person while the file stays open to all. Web search controls queries to the web, not internal files. Moving the file does not change who can open it.

Question 4 (Understand data protection and governance tasks for Microsoft 365 and Copilot)

Northwind Traders wants Microsoft Purview to find contracts stored in SharePoint automatically. The contracts have no fixed number pattern, but they share a similar structure and wording. Which classification method fits best?

  • A. A trainable classifier
  • B. A sensitive information type based on a regular expression
  • C. Exact Data Match
  • D. A keyword dictionary
Show the answer and explanation

Correct answer: A. Trainable classifiers learn from example documents, which suits document types such as contracts that have no fixed pattern. A sensitive information type, the closest wrong option, relies on patterns and keywords and would miss documents that look alike but share no consistent string. Exact Data Match compares content with exact values from your own data table. A keyword dictionary is only a list of terms used within a pattern-based type.

Question 5 (Perform basic administrative tasks for Copilot and agents)

Adatum wants to help employees write clearer prompts and improve the quality of their writing. It wants to use agents that Microsoft already provides rather than build its own. Which two should it use? Choose two.

  • A. Prompt Gallery
  • B. Writing Coach
  • C. Copilot Dashboard
  • D. Prompt Coach
  • E. Scheduled prompts
Show the answer and explanation

Correct answers: B and D. Prompt Coach is a prebuilt agent that helps users write better prompts, and Writing Coach is a prebuilt agent that gives feedback to improve writing. Prompt Gallery, the closest wrong option, is a library for saving and sharing prompts, not an agent that coaches. The Copilot Dashboard reports adoption and impact for leaders, and scheduled prompts run a saved prompt at set times.

Next step

If these felt comfortable, review the exam format and book. If a domain felt shaky, try more questions in the AB-900 practice tests.