Free Microsoft AB-900 Exam Questions

A group of high-impact administrators in a Microsoft 365 tenant are repeatedly targeted by modern phishing kits that can proxy sign-in pages and steal MFA codes in real time. The security team wants a sign-in method that is resistant to credential theft and MFA code replay, and that ties authentication to a hardware-backed credential. Which authentication method best meets this requirement?

A bank wants to stop users from pasting highly regulated IDs into Microsoft 365 Copilot Chat, while keeping Copilot available for normal work. Their security architect captures these requirements:Must block prompts and files that match specific sensitive info types.Must apply to Microsoft 365 Copilot and Copilot Chat without disabling them.Must be centrally managed with existing data loss prevention controls.Which configuration best meets these requirements?

A risk analyst is explaining when to use Microsoft Purview Insider Risk Management instead of only relying on DLP and audit logs.Complete the sentence:“Use Microsoft Purview Insider Risk Management when you need to ______.”

You’re the Microsoft 365 administrator for Contoso. The CIO has purchased a small batch of Microsoft 365 Copilot seats to pilot with the legal team. Legal users already have eligible Microsoft 365 E5 licenses and active Microsoft Entra ID accounts.You need to ensure that only named pilot users can start using Copilot in Word, Outlook, and Teams.Which action best reflects the correct way to enable Copilot for these users?

An organization is rolling out Copilot and several custom AI agents. Security and compliance teams want a central place to see which AI apps are accessing sensitive data, track prompts and responses, and identify risky AI usage across multiple clouds. They also want recommendations on how to improve their overall data security posture for AI workloads.To achieve this, they should use Microsoft’s ______.