CertSafari

    Free Practice Questions for Administering Microsoft 365 and AI Services (AB-650) Certification

    🔄 Last checked for updates September 4th, 2026

    Study with 365 exam-style practice questions designed to help you prepare for the Administering Microsoft 365 and AI Services (AB-650).

    Exam experiencesNew

    Pass and fail outcomes from candidates who prepared here — advice, scores, and prep time.

    View exam experiences

    Start Practicing

    All Domains

    Practice with randomly mixed questions from all topics

    Question MixAll Topics
    FormatRandom Order

    Domain Mode

    Practice questions from a specific topic area

    Quiz History

    Exam Details

    Key information about Administering Microsoft 365 and AI Services (AB-650)

    Official study guide

    View

    Question formats CertSafari offers
    • Multiple choice
    • Ordering
    • Matching
    target audience:

    Microsoft 365 and AI services administrators, collaborating with architects and other administrators, with experience in Microsoft 365 workloads, Microsoft Entra ID, Defender XDR, and Microsoft Graph PowerShell.

    Exam Topics & Skills Assessed

    Skills measured (from the official study guide)

    Domain 1: Configure and manage Microsoft 365 tenants and workloads

    Subdomain 1.1: Configure and manage a Microsoft 365 tenant

    Configure branding in a Microsoft 365 tenant, including logo, company URL, themes, and backgrounds

    - Implement and manage domains - Configure and manage organizational settings, including security and privacy settings and the organization profile - Manage and monitor Microsoft 365 licenses, including group-based licensing and pay-as-you-go - Manage and monitor licenses for AI services, including Microsoft 365 Copilot, Microsoft Agent 365, and Microsoft Copilot Studio - Configure and use Microsoft 365 Backup, including setup, restore, and monitor - Configure and review network connectivity insights - Monitor the health of Microsoft 365 services by using Service health, including notification configuration

    Subdomain 1.2: Manage Microsoft 365 workloads

    Create and manage mailboxes, including shared mailboxes

    - Create and manage teams in Microsoft Teams, including channels, owners, and members - Configure settings for Copilot in Teams meetings, including transcription - Create and manage SharePoint sites, including permissions - Configure SharePoint and OneDrive for Copilot, including SharePoint Advanced Management, Microsoft Search in SharePoint, and site exclusions

    Domain 2: Govern and secure Microsoft 365 tenants and workloads

    Subdomain 2.1: Manage identities in Microsoft Entra

    Create and manage Microsoft 365 users

    - Manage guest users and external access settings - Create and manage groups, including Microsoft 365 groups - Manage roles for Microsoft 365, including Microsoft Entra Privileged Identity Management (PIM) - Create and manage administrative units - Create and manage contacts - Perform bulk management, including Microsoft Graph PowerShell

    Subdomain 2.2: Implement and manage authentication and access in Microsoft Entra

    Configure and manage authentication methods

    - Implement and manage Microsoft Entra Password Protection - Configure self-service password reset (SSPR) - Investigate and resolve authentication issues - Implement and manage Microsoft Entra Conditional Access policies, including Microsoft Entra ID Protection and multifactor authentication

    Subdomain 2.3: Secure Microsoft 365 workloads

    Manage alerts in Microsoft Defender for Office 365

    - Configure threat policies and rules in Defender for Office 365 - Investigate and respond to email and collaboration threats by using Defender for Office 365 - Configure and manage attack simulations, including training campaigns

    Subdomain 2.4: Protect data in Microsoft 365 by using Microsoft Purview

    Identify requirements for Microsoft Purview Data Loss Prevention (DLP) policies, including those for Exchange, SharePoint, OneDrive, Teams, endpoints, and Copilot

    - Identify requirements for information protection, including sensitive information types, sensitivity labels, and sensitivity label policies - Identify requirements for data lifecycle management, including retention labels, retention label policies, and retention policies - Review and respond to DLP alerts for Microsoft 365 and AI services - Monitor and secure AI activity by using Microsoft Purview Data Security Posture Management (DSPM)

    Domain 3: Manage and secure AI services in Microsoft 365

    Subdomain 3.1: Enable and manage Microsoft 365 Copilot

    Assess tenant readiness for Copilot, including in-app experiences

    - Identify and resolve data readiness issues for Copilot, including data leaks, data oversharing, and data compliance - Manage web search for Copilot and Microsoft 365 Copilot Chat - Configure Microsoft 365 Copilot Search - Configure Copilot settings for a tenant, including self-service purchases, Copilot in admin centers, release preferences, AI disclaimer, and video and image generation - Manage Copilot user experiences - Manage Microsoft 365 Copilot Cowork - Manage third-party AI providers - Configure Copilot connectors

    Subdomain 3.2: Implement and manage agents in Microsoft 365 and Agent 365

    Manage the lifecycle workflows for agent identities by using Microsoft Entra Agent ID

    - Secure agent access, including access packages and conditional access - Manage agent owners - Configure agent settings, including allowed agent types, sharing, templates, and user access - Discover and manage Microsoft and third-party agents in the agent registry - Review requests and publish or reject agents in the agent registry - Install, block, or control access to agents in the agent registry, including uploading custom agents - Manage tools in Agent 365

    Subdomain 3.3: Secure and govern agents by using Agent 365

    Monitor agent activity by using Agent 365

    - Protect sensitive data by using Agent 365 - Evaluate compliance gaps by using Agent 365

    Subdomain 3.4: Monitor AI services in Microsoft 365

    Manage and monitor costs for AI services in Microsoft 365

    - Monitor usage reports for Copilot in the Microsoft 365 admin center, including workload-level adoption details - Monitor usage and adoption for AI services in Microsoft 365 by using the Copilot Control System - Monitor service health by using the Copilot Control System

    Techniques & products

    Microsoft 365
    Microsoft 365 Copilot
    Microsoft Entra
    Microsoft Teams
    SharePoint
    OneDrive
    Microsoft Purview
    Microsoft Defender for Office 365
    Agent 365
    Microsoft Entra Agent ID
    Microsoft Graph PowerShell
    Microsoft Entra Privileged Identity Management (PIM)
    Microsoft Entra Password Protection
    Self-Service Password Reset (SSPR)
    Microsoft Entra Conditional Access
    Microsoft Entra ID Protection
    Multifactor authentication
    Microsoft Purview Data Loss Prevention (DLP)
    Microsoft Purview Data Security Posture Management (DSPM)
    Copilot Control System
    Microsoft Agent 365
    Microsoft Copilot Studio
    SharePoint Advanced Management
    Microsoft Search in SharePoint
    Microsoft 365 Backup

    CertSafari is not affiliated with, endorsed by, or officially connected to Microsoft Corporation. Full disclaimer