Free Microsoft AB-900 Exam Questions

Your security team has been asked to report “how we will move Identity Secure Score from 32% to at least 60% in the next quarter” instead of just quoting the number. They want a view in the Entra portal that shows each actionable recommendation, its impact on the score, and whether it is completed, partially completed, or not started, so they can build a roadmap from it. To build this roadmap, they should primarily use the ________ associated with Identity Secure Score in the Entra admin center.

A risk analyst is explaining when to use Microsoft Purview Insider Risk Management instead of only relying on DLP and audit logs.Complete the sentence:“Use Microsoft Purview Insider Risk Management when you need to ______.”

Your organization uses both per-user Microsoft 365 Copilot licenses and a pay-as-you-go billing policy for a pilot group using SharePoint agents. A security architect says:“The billing policy only decides which Azure subscription is charged. It does not change what data Copilot can see. Copilot still only uses content the signed-in user already has permission to access.”Is this statement True or False?

Your organization has a Microsoft 365 subscription.All users are assigned a Microsoft 365 Copilot license.You need to prevent the users from generating images by using Copilot.What should you use?

A new security engineer claims that the only realistic way to troubleshoot oversharing in SharePoint and OneDrive is to ask each site owner to review their permissions manually, because there are no built-in reports that highlight broadly exposed sites or excessive sharing. You disagree and point out that there are dedicated admin-level tools that surface oversharing patterns and can trigger site access reviews. The engineer’s claim that there are no built-in tools to help identify oversharing is correct. True or False?