Pass Your Microsoft AB-900 Exam Easy!

Microsoft AB-900 Exam Questions & Answers, Accurate & Verified By IT Experts

Instant Download, Free Fast Updates, 99.6% Pass Rate

AB-900 Premium Bundle

$74.99

Microsoft AB-900 Premium Bundle

AB-900 Premium File: 99 Questions & Answers

Last Update: Oct 06, 2026

AB-900 PDF Study Guide: 314 Pages

AB-900 Bundle gives you unlimited access to "AB-900" files. However, this does not replace the need for a .vce exam simulator. To download VCE exam simulator click here
Microsoft AB-900 Premium Bundle
Microsoft AB-900 Premium Bundle

AB-900 Premium File: 99 Questions & Answers

Last Update: Oct 06, 2026

AB-900 PDF Study Guide: 314 Pages

$74.99

AB-900 Bundle gives you unlimited access to "AB-900" files. However, this does not replace the need for a .vce exam simulator. To download your .vce exam simulator click here

Microsoft AB-900 Practice Test 23

Question 220

A manufacturer wants to discover documents about confidential product formulas written in varied natural language. What should the administrator configure?

  1. Use an appropriate Microsoft Purview sensitive information type.
  2. Use an appropriately trained Microsoft Purview trainable classifier.
  3. Use document fingerprinting where supported.
  4. Use supported exact data match classification.

Explanation

Correct Answer

B:

Trainable classifiers identify content by learned characteristics beyond fixed regular expressions. This directly addresses unstructured proprietary subject classification.

Incorrect Answers

A:

Sensitive information types detect structured patterns and corroborating evidence. It would support detection of structured payment card data, not the stated unstructured proprietary subject classification.

C:

Fingerprints match document structures against an approved exemplar. It would support classification of a known document form, not the stated unstructured proprietary subject classification.

D:

Exact data match uses hashed reference values for high-confidence sensitive data discovery. Its purpose is matching known sensitive identifiers; the specified need is unstructured proprietary subject classification.

Question 221

The company wants to stop inappropriate external sharing of protected files stored in SharePoint. Which option is the BEST solution?

  1. Configure Purview DLP rules scoped to Teams chat and channel messages.
  2. Configure a Purview DLP policy for Exchange Online email.
  3. Configure a Purview DLP policy for SharePoint and OneDrive locations.
  4. Configure Microsoft Purview Endpoint DLP for the managed device.

Explanation

Correct Answer

C:

Cloud file DLP can detect sensitive content and restrict sharing actions where supported. This directly addresses classified cloud-file sharing enforcement.

Incorrect Answers

A:

Teams DLP evaluates supported messaging content against sensitive data rules. The action is relevant to sensitive data in team conversations rather than classified cloud-file sharing enforcement.

B:

Exchange DLP evaluates matching content during mail transport and applies configured actions. This helps with sensitive outbound mail control instead of the required classified cloud-file sharing enforcement.

D:

Endpoint DLP controls supported device actions against protected content. This helps with local removable-media exfiltration control instead of the required classified cloud-file sharing enforcement.

Question 222

A newly authored DLP policy could block important work and security wants its likely matches first. What should the administrator configure?

  1. Evaluate policy priority, supported conditions, and resulting DLP action.
  2. Review Purview DLP alerts and configure the response workflow.
  3. Configure DLP policy tips and permitted override justification.
  4. Use DLP simulation or testing before enforcement.

Explanation

Correct Answer

D:

Test mode measures candidate matches without necessarily enforcing blocks. This directly addresses safe predeployment DLP evaluation.

Incorrect Answers

A:

Rule precedence and effective actions determine observed protection behavior. That addresses diagnosis of conflicting DLP outcomes, whereas the current case requires safe predeployment DLP evaluation.

B:

DLP alerts provide matched-rule context for investigation and follow-up. It is used for actionable sensitive-data incident triage; this scenario calls for safe predeployment DLP evaluation.

C:

Policy tips make controls visible while approved overrides can be recorded. That addresses guided exception to a DLP rule, whereas the current case requires safe predeployment DLP evaluation.

Question 223

A regulator requires individual contracts to carry different document-specific retention periods. Which option is the BEST solution?

  1. Apply a Purview retention label appropriate to each contract type.
  2. Use a supported retention label configured for record management.
  3. Configure an appropriate retain-then-delete lifecycle rule.
  4. Create a location-scoped Purview retention policy.

Explanation

Correct Answer

A:

Retention labels classify items into lifecycle rules independently of location-wide policies. This directly addresses item-level contract retention.

Incorrect Answers

B:

Record declaration adds governed protections and disposition handling. It would support protected declared business record, not the stated item-level contract retention.

C:

Retain-then-delete keeps content for a minimum period and disposes afterward. Its purpose is scheduled preservation followed by disposal; the specified need is item-level contract retention.

D:

Retention policies apply broad retention behavior to supported workloads. It would support location-wide mail retention, not the stated item-level contract retention.

Question 224

Legal places a custodian's mailbox under hold during litigation. What should the administrator configure?

  1. Respect preservation precedence and retain the file while an applicable retain rule remains.
  2. Apply the appropriate eDiscovery hold to preserve responsive content.
  3. Configure disposition review within the applicable retention label.
  4. Inspect the item's retention label and relevant audit/history records.

Explanation

Correct Answer

B:

Holds preserve covered data against ordinary deletion during legal matters. This directly addresses litigation-driven content preservation.

Incorrect Answers

A:

Retention wins over deletion while legally required preservation is active. This helps with conflict-safe content preservation instead of the required litigation-driven content preservation.

C:

Disposition review provides accountable approval before managed record destruction. This helps with controlled final deletion of records instead of the required litigation-driven content preservation.

D:

Lifecycle metadata and audit trail explain governance state. The action is relevant to evidence of record lifecycle assignment rather than litigation-driven content preservation.

Question 225

The privacy officer wants to avoid exposing employee identities during initial insider-risk triage. Which option is the BEST solution?

  1. Resolve and record the case disposition with supporting evidence.
  2. Investigate a relevant Purview Insider Risk Management case.
  3. Use supported pseudonymization and role-based reviewer controls.
  4. Select appropriate Insider Risk indicators and policy conditions.

Explanation

Correct Answer

C:

Insider risk privacy controls limit identity visibility until justified. This directly addresses privacy-aware insider-risk review.

Incorrect Answers

A:

Case workflows preserve the investigation outcome and reasoning. It is used for accountable insider-risk case closure; this scenario calls for privacy-aware insider-risk review.

B:

Insider risk combines configured indicators to identify risky internal behavior. That addresses investigation of concerning employee data activity, whereas the current case requires privacy-aware insider-risk review.

D:

Indicator policies help detect defined risky employee activity patterns. That addresses policy for suspicious user exfiltration, whereas the current case requires privacy-aware insider-risk review.

Question 226

A reviewer must see only message alerts assigned to their investigation role. What should the administrator configure?

  1. Refine Communication Compliance classifiers and scoped policy conditions.
  2. Record the review and remediation decision in the Communication Compliance workflow.
  3. Configure Microsoft Purview Communication Compliance policy.
  4. Use scoped Communication Compliance reviewer permissions.

Explanation

Correct Answer

D:

Reviewer roles control visibility of flagged communications. This directly addresses restricted sensitive-message review.

Incorrect Answers

A:

Better conditions reduce irrelevant flagging while retaining risk signals. It would support tuned misconduct detection quality, not the stated restricted sensitive-message review.

B:

Review workflows provide auditable case handling for flagged messages. Its purpose is documented response to harmful communication; the specified need is restricted sensitive-message review.

C:

Communication Compliance monitors supported communications for conduct and policy violations. It would support workplace communication policy review, not the stated restricted sensitive-message review.

Question 227

An audit team needs to review whether staff prompts included protected data sent to supported AI apps. Which option is the BEST solution?

  1. Investigate appropriate AI activity records in Purview activity explorer.
  2. Run or review a DSPM data-risk assessment for oversharing.
  3. Configure the applicable Purview sensitive-data AI processing policy.
  4. Use Microsoft Purview DSPM for AI reporting and insights.

Explanation

Correct Answer

A:

AI activity records expose supported interaction metadata and DLP events. This directly addresses specific AI interaction activity evidence.

Incorrect Answers

B:

DSPM assessments highlight sensitive-data exposure patterns relevant to AI usage. This helps with Copilot-focused oversharing risk assessment instead of the required specific AI interaction activity evidence.

C:

Supported Purview protections can restrict handling of labeled sensitive data by Copilot. The action is relevant to policy-governed processing of labeled files rather than specific AI interaction activity evidence.

D:

DSPM for AI surfaces AI activity, exposure indicators, and recommended controls. This helps with organization-wide AI data-security visibility instead of the required specific AI interaction activity evidence.

Question 228

A new team site must receive container-level access defaults based on its classification. What should the administrator configure?

  1. Apply a file-content sensitivity label to the presentation.
  2. Apply a supported container sensitivity label to the SharePoint site.
  3. Configure a supported default content label in the label policy.
  4. Inspect the published sensitivity label policy and label ordering.

Explanation

Correct Answer

B:

Container labels govern supported site and group configuration settings. This directly addresses site-level classification policy.

Incorrect Answers

A:

Content labels classify individual documents and may protect the file. That addresses file-level confidentiality, whereas the current case requires site-level classification policy.

C:

Default labeling provides a starting classification for eligible new files. That addresses baseline classification of new files, whereas the current case requires site-level classification policy.

D:

Publishing configuration controls available labels and user presentation. It is used for published label catalog for users; this scenario calls for site-level classification policy.

Question 229

Legal must locate responsive documents and messages for a litigation matter. Which option is the BEST solution?

  1. Inspect the corresponding Purview DLP activity and alert details.
  2. Search supported Microsoft Purview Audit events.
  3. Create an eDiscovery case and perform a scoped content search.
  4. Apply an appropriate hold from Purview eDiscovery.

Explanation

Correct Answer

C:

eDiscovery supports case-based identification and collection of evidence. This directly addresses litigation search across supported content.

Incorrect Answers

A:

DLP telemetry records policy match and enforcement. Its purpose is source of a sensitive mail protection action; the specified need is litigation search across supported content.

B:

Audit records document supported user and administrative operations. It would support file deletion activity evidence, not the stated litigation search across supported content.

D:

Holds preserve relevant items during a legal matter. It would support preservation of responsive mailbox data, not the stated litigation search across supported content.

Question 230

Security wants activity timelines for label changes, sensitivity detections, and DLP rule matches. What should the administrator configure?

  1. Review the appropriate Insider Risk Management case.
  2. Use scoped Purview eDiscovery content search.
  3. Use Purview Content explorer with appropriate permissions.
  4. Use Purview Activity explorer and its event filters.

Explanation

Correct Answer

D:

Activity explorer tracks classified-content activities over time. This directly addresses action-centered sensitive-data event history.

Incorrect Answers

A:

Insider Risk cases include relevant configured behavioral risk signals. This helps with employee behavioral risk investigation instead of the required action-centered sensitive-data event history.

B:

eDiscovery search targets responsive content for legal review. The action is relevant to search and collect case-specific email evidence rather than action-centered sensitive-data event history.

C:

Content explorer summarizes classified content across supported locations. This helps with inventory of content matching a sensitive type instead of the required action-centered sensitive-data event history.


Microsoft 365 Copilot and Agent Administration Fundamentals (AB-900) Practice Tests

Purchase Individually

AB-900 Premium File

Premium File
AB-900 Premium File
99 Q&A
$76.99$69.99

AB-900 Study Guide

Study Guide
AB-900 Study Guide
314 PDF Pages
$27.49$24.99

Site Search:

 

VISA, MasterCard, AmericanExpress, UnionPay

SPECIAL OFFER: GET 10% OFF

ExamCollection Premium

ExamCollection Premium Files

Pass your Exam with ExamCollection's PREMIUM files!

  • ExamCollection Certified Safe Files
  • Guaranteed to have ACTUAL Exam Questions
  • Up-to-Date Exam Study Material - Verified by Experts
  • Instant Downloads
Enter Your Email Address to Receive Your 10% Off Discount Code
A Confirmation Link will be sent to this email address to verify your login
We value your privacy. We will not rent or sell your email address

SPECIAL OFFER: GET 10% OFF

Use Discount Code:

MIN10OFF

A confirmation link was sent to your e-mail.
Please check your mailbox for a message from support@examcollection.com and follow the directions.

Next

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your e-mail address below to get started with our interactive software demo of your free trial.

Free Demo Limits: In the demo version you will be able to access only first 5 questions from exam.