AB-900 Exam dumps PDF | Exam-Dumps.net (Page: 2)

QUESTION: 9

HOTSPOT

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Note: Each correct selection is worth one point.

Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: Yes
Yes - Microsoft Defender for Office 365 provides protection from phishing and malware attacks.

Microsoft Defender for Office 365 (Plan 1 & 2) provides comprehensive, cloud-based protection against advanced, zero-day threats in emails, links, and collaboration tools like SharePoint and Teams. It uses AI- driven analysis to block phishing, ransomware, and malware, and includes features like Zero-hour Auto Purge (ZAP), attack simulation training, and detailed threat reporting.

Box 2: Yes
Yes - Microsoft Defender for Identity monitor identities in Active Directory domains.

Microsoft Defender for Identity (MDI) is a cloud-based security solution that monitors on-premises Active Directory (AD) environments using sensors installed directly on domain controllers. It detects advanced threats, compromised identities, and malicious insider actions by analyzing user behavior, network traffic, and AD queries.

Box 3: No
No - Microsoft Defender for Vulnerability Management provides protection for software as a service (SaaS) applications.

While Microsoft Defender for Vulnerability Management is a powerful tool, it does not directly provide protection for software as a service (SaaS) applications. Instead, its primary focus is on identifying and remediating vulnerabilities across endpoints (Windows, macOS, Linux, Android, iOS), network devices, and cloud workloads.

Protection specifically for SaaS applications is provided by a different solution, Microsoft Defender for Cloud Apps.

Reference:

https://learn.microsoft.com/en-us/defender-office-365/anti-malware-protection-about https://learn.microsoft.com/en-us/defender-for-identity/what-is https://learn.microsoft.com/en-us/defender-vulnerability-management/defender-vulnerability-management

Reveal Solution Next Question

QUESTION: 10

HOTSPOT

Your organization has a Microsoft 365 subscription that contains a Microsoft SharePoint site named Site1. The permissions for Site1 are configured as shown in the following exhibit.

You create a new user named User1 in the subscription.

Use the drop-down menus to select the answer choice that completes the statement based on the information presented in the graphic.

Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Box: a site member of
User1 is ______________ Site1.

When a new user is added to the Microsoft 365 subscription, they will automatically have access to this SharePoint site with the specified permissions.

Because the site is configured with the built-in group "Everyone except external users" granted Edit permissions, the following occurs:
Automatic Group Membership: Every new internal user added to the tenant is automatically included in the "Everyone except external users" group.

Inherited Permissions: Since this group already has Edit permissions on the site, the new user inherits those rights immediately upon account creation without requiring manual intervention from a site owner.

Access Method: The user can access the site as soon as they have the URL; they do not need to be invited individually.

Reference:

https://andrewwarland.wordpress.com/2025/05/13/allowing-everyone-except-external-users-to-access-private- group-based-sites

Reveal Solution Next Question

QUESTION: 11

Your organization has a Microsoft 365 subscription.

You create a security group named Group1 and assign a Microsoft 365 E3 license to the group.

You discover that a user named User1 does NOT have access to the Microsoft 365 E3 features.

You need to ensure that User1 can access all the Microsoft 365 E3 features.

Which two actions can you perform? Each correct answer presents a complete solution.

Note: Each correct selection is worth one point.

Add User1 to Group1.
Assign a Conditional Access policy to Group1.
Assign a Conditional Access policy to User1.
Assign a license to User1.

Answer(s): A,D

Explanation:

You can license a user with Microsoft 365 E3 either by adding them to a licensed security group or by direct assignment in the Microsoft 365 admin center. Group-based licensing automatically assigns licenses to members, which is ideal for automation, while direct assignment is better for individual, immediate, or one-off licensing needs.

Reference:

https://learn.microsoft.com/en-us/microsoft-365/enterprise/assign-licenses-to-user-accounts

Reveal Solution Next Question

QUESTION: 12

HOTSPOT

Select the answer that correctly completes the sentence.

Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Box: site
From the SharePoint admin center, you can create a __________.

You can create a new SharePoint site directly from the SharePoint admin center by navigating to Active sites and selecting Create. Admins can choose to create either a Team site (for collaboration, connected to a Microsoft 365 group) or a Communication site (for broadcasting information).

Reference:

https://learn.microsoft.com/en-us/sharepoint/create-site-collection

Reveal Solution Next Question

QUESTION: 13

HOTSPOT

Select the answer that correctly completes the sentence.

Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Box: manage a Teams Rooms device
From the Microsoft Teams admin center, you can ________________.

From the Microsoft Teams admin center, you can perform a variety of management and monitoring tasks for Teams Rooms devices. While the Teams Rooms Pro Management portal offers more advanced analytics and remediation, the Teams admin center provides essential administrative controls for both Windows and Android-based systems.

Incorrect:
* can assign a Teams license to a user
You manage and assign Microsoft Teams product licenses primarily through the Microsoft 365 admin center or via PowerShell, rather than the Microsoft Teams admin center.

* deploy the Teams client
From the Microsoft Teams admin center, you cannot directly deploy the Teams desktop client itself. Instead, you use it to manage Teams apps and update policies.

* prevent users from creating teams
Preventing users from creating Microsoft Teams is primarily managed by restricting the ability to create underlying Microsoft 365 Groups via PowerShell in the Entra ID (Azure AD) admin center, not directly in the Teams admin center UI.

Reference:

https://techcommunity.microsoft.com/blog/microsoftteamsblog/one-place-to-manage-all-your-teams- devices/1527766

Reveal Solution Next Question

QUESTION: 14

Your organization has a Microsoft 365 subscription.

You need to investigate security incidents and alerts raised from the Windows 11 devices in your organization.

What should you use?

Microsoft Entra ID Protection
Microsoft Defender for Identity
Microsoft Purview Insider Risk Management
Microsoft Defender for Endpoint

Answer(s): D

Explanation:

Microsoft Defender for Endpoint in Microsoft 365 allows security teams to investigate, analyze, and remediate security incidents on Windows 11 devices via the Microsoft Defender portal (security.microsoft.com). It provides a unified experience to view device timelines, threat intelligence, and alerts, enabling automatic or manual response to threats like malware and phishing.

Reference:

https://learn.microsoft.com/en-us/defender-xdr/investigate-incidents

Reveal Solution Next Question

QUESTION: 15

You have a Microsoft SharePoint site as shown in the following exhibit.

You need to view the settings of SLabel1.

What should you use?

the Microsoft Defender portal
the SharePoint admin center
the Microsoft 365 admin center
the Microsoft Purview portal

Answer(s): D

Explanation:

To examine or modify the settings of a specific sensitivity label, you must use the Microsoft Purview portal.
While you can see which labels are applied to sites or files within the SharePoint admin center or document libraries, the actual configuration, definition, and security settings for the sensitivity label itself are managed exclusively in the Microsoft Purview portal.
Where to go:
Navigate to: Microsoft Purview portal
Go to: Solutions > Information Protection
Select: Labels (or "Sensitivity labels")

Reference:

https://learn.microsoft.com/en-us/purview/sensitivity-labels-teams-groups-sites

Reveal Solution Next Question

QUESTION: 16

Your organization has a Microsoft 365 subscription.

All users have Microsoft 365 Copilot licenses.

You need to identify where sensitive content is being used during Copilot interactions, analyze the content usage patterns, and provide recommendations on applying the appropriate protections.

What should you use?

Microsoft Viva Insights
the Microsoft Purview DSPM for AI solution
Microsoft Security Copilot
the Microsoft Purview Insider Risk Management solution

Answer(s): B

Explanation:

To locate sensitive content used by Microsoft 365 Copilot, analyze its usage patterns, and receive actionable protection recommendations, you should use Microsoft Purview, specifically the Data Security Posture Management (DSPM) for AI dashboard.
The Primary Tool: DSPM for AI
The Data Security Posture Management (DSPM) for AI (available within the Microsoft Purview portal) is the central hub for managing AI-related data risks. It is specifically designed to provide visibility into how Copilot and other AI applications interact with your organizational data.
Locating Sensitive Content: The dashboard identifies and surfaces sensitive data (using sensitivity labels and sensitive information types) that Copilot could potentially access or use in its prompts and responses.
Analyzing Usage Patterns: It provides insights and reports on AI activity, allowing you to see which users are interacting with Copilot, what type of content is being referenced, and whether those interactions involve sensitive data.
Actionable Recommendations: DSPM for AI provides "one-click" policy recommendations. These guided workflows help you apply the appropriate protections directly from the insights discovered, such as:
Protecting items with sensitivity labels from Copilot processing.
Detecting risky AI interactions (such as prompt injection or unauthorized access).
Implementing Data Loss Prevention (DLP) rules.

Reference:

https://learn.microsoft.com/en-us/purview/ai-m365-copilot-considerations

Reveal Solution Next Question

Microsoft AB-900 Exam (page: 2) Microsoft 365 Copilot and Agent Administration Fundamentals Updated on: 24-Mar-2026

QUESTION: 9

Explanation:

Reference:

QUESTION: 10

Explanation:

Reference:

QUESTION: 11

Explanation:

Reference:

QUESTION: 12

Explanation:

Reference:

QUESTION: 13

Explanation:

Reference:

QUESTION: 14

Explanation:

Reference:

QUESTION: 15

Explanation:

Reference:

QUESTION: 16

Explanation:

Reference:

Microsoft AB-900 Exam (page: 2)
Microsoft 365 Copilot and Agent Administration Fundamentals
Updated on: 24-Mar-2026