Pass Your Microsoft AB-900 Exam Easy!

Microsoft AB-900 Exam Questions & Answers, Accurate & Verified By IT Experts

Instant Download, Free Fast Updates, 99.6% Pass Rate

AB-900 Premium Bundle

$74.99

Microsoft AB-900 Premium Bundle

AB-900 Premium File: 99 Questions & Answers

Last Update: Oct 06, 2026

AB-900 PDF Study Guide: 314 Pages

AB-900 Bundle gives you unlimited access to "AB-900" files. However, this does not replace the need for a .vce exam simulator. To download VCE exam simulator click here
Microsoft AB-900 Premium Bundle
Microsoft AB-900 Premium Bundle

AB-900 Premium File: 99 Questions & Answers

Last Update: Oct 06, 2026

AB-900 PDF Study Guide: 314 Pages

$74.99

AB-900 Bundle gives you unlimited access to "AB-900" files. However, this does not replace the need for a .vce exam simulator. To download your .vce exam simulator click here

Microsoft AB-900 Practice Test 28

Question 270

Auditors need the history of who altered a lifecycle label on a protected record. Which option is the BEST solution?

  1. Preserve the document under its applicable eDiscovery hold.
  2. Review available retention-label and audit history.
  3. Configure a record retention label with disposition review.
  4. Configure an appropriate retention-then-delete policy.

Explanation

Correct Answer

B:

Recorded changes support disposition accountability. This directly addresses auditable record label changes.

Incorrect Answers

A:

Legal hold supersedes ordinary user deletion within its scope. That addresses mandatory legal evidence preservation, whereas the current case requires auditable record label changes.

C:

Disposition review governs human approval before permanent deletion. That addresses reviewed record disposal, whereas the current case requires auditable record label changes.

D:

Retention preserves records for the prescribed period before deletion. It is used for deletion following mandatory preservation; this scenario calls for auditable record label changes.

Question 271

Records managers want document retention independent of the sensitivity label used for confidentiality. What should the administrator configure?

  1. Configure label rights to restrict printing for unauthorized recipients.
  2. Enforce an Exchange Online DLP policy for the sensitive type.
  3. Apply an appropriate retention label alongside content sensitivity controls.
  4. Use a supported sensitivity label with encryption and rights restrictions.

Explanation

Correct Answer

C:

Retention and sensitivity serve separate lifecycle and confidentiality purposes. This directly addresses independent retention and confidentiality classification.

Incorrect Answers

A:

Rights management can constrain permitted operations independent of file retrieval. Its purpose is limited document use after access; the specified need is independent retention and confidentiality classification.

B:

DLP evaluates the message content and recipient context. It would support policy-blocked sensitive outbound mail, not the stated independent retention and confidentiality classification.

D:

File-level encryption can enforce authorized use beyond the SharePoint site boundary. It would support persistent protection on a shared document, not the stated independent retention and confidentiality classification.

Question 272

Copilot administrators want AI-specific sensitive-data exposure reports rather than general compliance completion. Which option is the BEST solution?

  1. Use Microsoft Purview Compliance Manager assessments.
  2. Review Microsoft Secure Score.
  3. Use Purview Content explorer or classification reporting.
  4. Review Purview DSPM for AI reports.

Explanation

Correct Answer

D:

AI posture reporting focuses risks from generative AI usage and content exposure. This directly addresses AI interaction and oversharing risk visibility.

Incorrect Answers

A:

Compliance Manager ties controls and improvement actions to compliance frameworks. This helps with framework-based compliance evidence instead of the required AI interaction and oversharing risk visibility.

B:

Security score recommendations emphasize security posture rather than audit controls. The action is relevant to security control implementation priorities rather than AI interaction and oversharing risk visibility.

C:

Classification exploration identifies where matching sensitive data resides. This helps with location of classified content instead of the required AI interaction and oversharing risk visibility.

Question 273

An employee asks Copilot to summarize a confidential project file but lacks permission to that SharePoint file. Which action should the team take?

  1. Correct the underlying SharePoint access and sharing permissions.
  2. Compare each user's effective content access and available grounding context.
  3. Keep SharePoint permissions restrictive and rely on security-trimmed retrieval.
  4. Allow Copilot to ground in the user's authorized Microsoft Graph content.

Explanation

Correct Answer

C:

Copilot respects effective user access rather than granting new file rights. This directly addresses denying retrieval of an inaccessible source.

Incorrect Answers

A:

Copilot can surface already-accessible overshared content. It is used for eliminating an inherited oversharing root cause; this scenario calls for denying retrieval of an inaccessible source.

B:

Security trimming and individual context yield different retrieved evidence. That addresses explaining user-specific Copilot answers, whereas the current case requires denying retrieval of an inaccessible source.

D:

Graph uses accessible work context when building grounded responses. That addresses summarizing accessible mailbox content, whereas the current case requires denying retrieval of an inaccessible source.

Question 274

An employee can open an internal document via their corporate account and asks Copilot about it. What is the most appropriate implementation?

  1. Remove the contractor's unintended source permissions and overshared links.
  2. Review connector indexing and ACL mappings for its content.
  3. Ask for source verification and handle insufficient evidence explicitly.
  4. Apply normal file permissions to govern available work data.

Explanation

Correct Answer

D:

Microsoft 365 Copilot accesses work content under the user's entitled resource scope. This directly addresses ordinary user-scoped work grounding.

Incorrect Answers

A:

The relevant access risk comes from content sharing and identity authorization. It would support preventing unapproved contractor discovery, not the stated ordinary user-scoped work grounding.

B:

Correctly mapped access lists are needed for secure external content retrieval. Its purpose is connector-grounded security trimming; the specified need is ordinary user-scoped work grounding.

C:

Grounding checks help distinguish actual retrieved facts from generated claims. It would support verification against authorized evidence, not the stated ordinary user-scoped work grounding.

Question 275

A sensitive document is encrypted to a finance group and an unauthorized user asks Copilot about it. Which action should the team take?

  1. Preserve encryption and rights-based access so retrieval is limited.
  2. Permit approved retrieval subject to its label and user permissions.
  3. Configure the relevant Purview DLP or label-processing AI protection policy.
  4. Publish appropriate Purview sensitivity label policies.

Explanation

Correct Answer

A:

Encrypted label permissions constrain eligible readers and service processing. This directly addresses enforcement of protected document rights.

Incorrect Answers

B:

An informational label does not imply universal exclusion from Copilot. This helps with authorized summary of a labeled source instead of the required enforcement of protected document rights.

C:

Supported Copilot data controls can restrict processing of classified items. The action is relevant to source-specific AI processing restriction rather than enforcement of protected document rights.

D:

Labels provide consistent handling guidance for sensitive work content. This helps with end-user classification of source data instead of the required enforcement of protected document rights.

Question 276

An HR assistant shows systematically different hiring advice for equivalent candidates from different demographic groups. What is the most appropriate implementation?

  1. Incorporate inclusiveness and accessibility requirements into the experience.
  2. Evaluate fairness and mitigate biased model outcomes.
  3. Document transparent model behavior and provide meaningful explanation.
  4. Test reliability and safety under edge cases and failures.

Explanation

Correct Answer

B:

Responsible AI fairness focuses on unjustified disparate treatment. This directly addresses nondiscriminatory model behavior.

Incorrect Answers

A:

Inclusive design helps avoid excluding people because of disabilities or circumstances. That addresses usable AI experience across abilities, whereas the current case requires nondiscriminatory model behavior.

C:

Transparency helps users understand AI use, evidence and limitations. That addresses intelligible AI decision context, whereas the current case requires nondiscriminatory model behavior.

D:

Robustness evaluation reduces harmful surprises and inconsistent operation. It is used for dependable operation under atypical inputs; this scenario calls for nondiscriminatory model behavior.

Question 277

A finance agent proposes a payment that exceeds the company's mandatory manager approval threshold. Which action should the team take?

  1. Minimize personal-data access and apply privacy/security controls.
  2. Assign accountable owners and a defined escalation process.
  3. Require a human authorization before the irreversible payment.
  4. Inspect linked source evidence and verify the claim before relying on it.

Explanation

Correct Answer

C:

Accountability retains control of high-impact actions with authorized decision-makers. This directly addresses human oversight of consequential action.

Incorrect Answers

A:

Privacy principles reduce unnecessary processing and disclosure. Its purpose is protection of sensitive personal information; the specified need is human oversight of consequential action.

B:

Accountability identifies responsible humans for monitoring and correction. It would support clear ownership of AI failures, not the stated human oversight of consequential action.

D:

Evidence checking supports responsible use of generated assertions. It would support verified high-stakes summary accuracy, not the stated human oversight of consequential action.

Question 278

A retrieved web page instructs Copilot to ignore its safeguards and export an unrelated internal file. What is the most appropriate implementation?

  1. Limit task scope and ensure data is not treated as higher-priority commands.
  2. Reduce backend tool rights and require authenticated authorization.
  3. Review supported AI activity and safety telemetry for suspicious interactions.
  4. Treat retrieved page instructions as untrusted data and enforce tool permissions.

Explanation

Correct Answer

D:

Source text must not override trusted policy or backend authorization. This directly addresses resistance to malicious source instructions.

Incorrect Answers

A:

Boundaries between content and instructions mitigate prompt-injection effects. This helps with safe handling of adversarial document text instead of the required resistance to malicious source instructions.

B:

Prompt wording alone cannot secure a powerful tool connection. The action is relevant to enforceable permission checks for agent actions rather than resistance to malicious source instructions.

C:

Monitoring enables investigation of attempts to misuse the assistant. This helps with evidence of AI abuse attempts instead of the required resistance to malicious source instructions.

Question 279

Legal has imposed a preservation hold on relevant corporate documents that may be used in Copilot answers. Which action should the team take?

  1. Maintain the applicable eDiscovery hold on the source records.
  2. Configure applicable Purview retention controls for Copilot interactions.
  3. Apply approved data lifecycle deletion policies and access rights.
  4. Use Purview eDiscovery search for supported AI interactions.

Explanation

Correct Answer

A:

A Copilot summary does not remove legal preservation requirements on underlying content. This directly addresses ongoing legal preservation of source evidence.

Incorrect Answers

B:

Retention policies govern covered interaction records for required periods. That addresses mandated AI conversation retention, whereas the current case requires ongoing legal preservation of source evidence.

C:

Content lifecycle operates on source records independent of Copilot summaries. It is used for policy-based deletion of expired source content; this scenario calls for ongoing legal preservation of source evidence.

D:

Case-based content search preserves and locates relevant AI records. That addresses discovery of AI interaction evidence, whereas the current case requires ongoing legal preservation of source evidence.

Question 280

A sales employee asks about today's live customer balance but Copilot only retrieves last week's exported worksheet. What is the most appropriate implementation?

  1. Require an explicit insufficient-evidence response and source validation.
  2. Use an authorized live business data connection for current values.
  3. Govern and identify the approved canonical policy source.
  4. Supply or verify source citations from authorized retrieved content.

Explanation

Correct Answer

B:

Static documents may not represent rapidly changing transactional state. This directly addresses current operational data rather than stale export.

Incorrect Answers

A:

Grounding uncertainty prevents fabricated specific claims. It would support safe answer when evidence is absent, not the stated current operational data rather than stale export.

C:

Source stewardship reduces grounding in obsolete versions. It would support a current authoritative document reference, not the stated current operational data rather than stale export.

D:

Citations allow checking statements against evidence. Its purpose is traceable grounded policy statement; the specified need is current operational data rather than stale export.


Microsoft 365 Copilot and Agent Administration Fundamentals (AB-900) Practice Tests

Purchase Individually

AB-900 Premium File

Premium File
AB-900 Premium File
99 Q&A
$76.99$69.99

AB-900 Study Guide

Study Guide
AB-900 Study Guide
314 PDF Pages
$27.49$24.99

Site Search:

 

VISA, MasterCard, AmericanExpress, UnionPay

SPECIAL OFFER: GET 10% OFF

ExamCollection Premium

ExamCollection Premium Files

Pass your Exam with ExamCollection's PREMIUM files!

  • ExamCollection Certified Safe Files
  • Guaranteed to have ACTUAL Exam Questions
  • Up-to-Date Exam Study Material - Verified by Experts
  • Instant Downloads
Enter Your Email Address to Receive Your 10% Off Discount Code
A Confirmation Link will be sent to this email address to verify your login
We value your privacy. We will not rent or sell your email address

SPECIAL OFFER: GET 10% OFF

Use Discount Code:

MIN10OFF

A confirmation link was sent to your e-mail.
Please check your mailbox for a message from support@examcollection.com and follow the directions.

Next

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your e-mail address below to get started with our interactive software demo of your free trial.

Free Demo Limits: In the demo version you will be able to access only first 5 questions from exam.