Free Practice Questions for Administering Microsoft 365 and AI Services (AB-650) Certification
Study with 365 exam-style practice questions designed to help you prepare for the Administering Microsoft 365 and AI Services (AB-650).
Exam experiencesNew
Pass and fail outcomes from candidates who prepared here — advice, scores, and prep time.
Start Practicing
All Domains
Practice with randomly mixed questions from all topics
Domain Mode
Practice questions from a specific topic area
Quiz History
Exam Details
Key information about Administering Microsoft 365 and AI Services (AB-650)
- Multiple choice
- Ordering
- Matching
Microsoft 365 and AI services administrators, collaborating with architects and other administrators, with experience in Microsoft 365 workloads, Microsoft Entra ID, Defender XDR, and Microsoft Graph PowerShell.
Exam Topics & Skills Assessed
Skills measured (from the official study guide)
Domain 1: Configure and manage Microsoft 365 tenants and workloads
Subdomain 1.1: Configure and manage a Microsoft 365 tenant
Configure branding in a Microsoft 365 tenant, including logo, company URL, themes, and backgrounds
- Implement and manage domains - Configure and manage organizational settings, including security and privacy settings and the organization profile - Manage and monitor Microsoft 365 licenses, including group-based licensing and pay-as-you-go - Manage and monitor licenses for AI services, including Microsoft 365 Copilot, Microsoft Agent 365, and Microsoft Copilot Studio - Configure and use Microsoft 365 Backup, including setup, restore, and monitor - Configure and review network connectivity insights - Monitor the health of Microsoft 365 services by using Service health, including notification configuration
Subdomain 1.2: Manage Microsoft 365 workloads
Create and manage mailboxes, including shared mailboxes
- Create and manage teams in Microsoft Teams, including channels, owners, and members - Configure settings for Copilot in Teams meetings, including transcription - Create and manage SharePoint sites, including permissions - Configure SharePoint and OneDrive for Copilot, including SharePoint Advanced Management, Microsoft Search in SharePoint, and site exclusions
Domain 2: Govern and secure Microsoft 365 tenants and workloads
Subdomain 2.1: Manage identities in Microsoft Entra
Create and manage Microsoft 365 users
- Manage guest users and external access settings - Create and manage groups, including Microsoft 365 groups - Manage roles for Microsoft 365, including Microsoft Entra Privileged Identity Management (PIM) - Create and manage administrative units - Create and manage contacts - Perform bulk management, including Microsoft Graph PowerShell
Subdomain 2.2: Implement and manage authentication and access in Microsoft Entra
Configure and manage authentication methods
- Implement and manage Microsoft Entra Password Protection - Configure self-service password reset (SSPR) - Investigate and resolve authentication issues - Implement and manage Microsoft Entra Conditional Access policies, including Microsoft Entra ID Protection and multifactor authentication
Subdomain 2.3: Secure Microsoft 365 workloads
Manage alerts in Microsoft Defender for Office 365
- Configure threat policies and rules in Defender for Office 365 - Investigate and respond to email and collaboration threats by using Defender for Office 365 - Configure and manage attack simulations, including training campaigns
Subdomain 2.4: Protect data in Microsoft 365 by using Microsoft Purview
Identify requirements for Microsoft Purview Data Loss Prevention (DLP) policies, including those for Exchange, SharePoint, OneDrive, Teams, endpoints, and Copilot
- Identify requirements for information protection, including sensitive information types, sensitivity labels, and sensitivity label policies - Identify requirements for data lifecycle management, including retention labels, retention label policies, and retention policies - Review and respond to DLP alerts for Microsoft 365 and AI services - Monitor and secure AI activity by using Microsoft Purview Data Security Posture Management (DSPM)
Domain 3: Manage and secure AI services in Microsoft 365
Subdomain 3.1: Enable and manage Microsoft 365 Copilot
Assess tenant readiness for Copilot, including in-app experiences
- Identify and resolve data readiness issues for Copilot, including data leaks, data oversharing, and data compliance - Manage web search for Copilot and Microsoft 365 Copilot Chat - Configure Microsoft 365 Copilot Search - Configure Copilot settings for a tenant, including self-service purchases, Copilot in admin centers, release preferences, AI disclaimer, and video and image generation - Manage Copilot user experiences - Manage Microsoft 365 Copilot Cowork - Manage third-party AI providers - Configure Copilot connectors
Subdomain 3.2: Implement and manage agents in Microsoft 365 and Agent 365
Manage the lifecycle workflows for agent identities by using Microsoft Entra Agent ID
- Secure agent access, including access packages and conditional access - Manage agent owners - Configure agent settings, including allowed agent types, sharing, templates, and user access - Discover and manage Microsoft and third-party agents in the agent registry - Review requests and publish or reject agents in the agent registry - Install, block, or control access to agents in the agent registry, including uploading custom agents - Manage tools in Agent 365
Subdomain 3.3: Secure and govern agents by using Agent 365
Monitor agent activity by using Agent 365
- Protect sensitive data by using Agent 365 - Evaluate compliance gaps by using Agent 365
Subdomain 3.4: Monitor AI services in Microsoft 365
Manage and monitor costs for AI services in Microsoft 365
- Monitor usage reports for Copilot in the Microsoft 365 admin center, including workload-level adoption details - Monitor usage and adoption for AI services in Microsoft 365 by using the Copilot Control System - Monitor service health by using the Copilot Control System
Techniques & products