Microsoft AB Exam Series
Four guides. Zero fluff. Everything you need to pass each AI & Business certification from fundamentals to expert.
Certification Path
AB-900 · Fundamentals
Copilot & Agent Administration Fundamentals
Validates your ability to configure, secure, and govern Microsoft 365 Copilot and AI agents. The hardest fundamentals exam Microsoft has ever produced.
Passing Score
700
Questions
40-60
Duration
45 min
Study Time
2-4 wks
Cost
$99
Where to focus your time
What you'll be tested on
Four weeks to clarity
What exam veterans say
Purview is king
Exam veterans report Purview questions are extremely prominent. If you can only study one thing deeply, make it Purview.
Breadth over depth
The exam covers many topics at surface level. Know what each product does, where to manage it, and when to apply controls.
SC-900 overlap
Studying SC-900 material - especially Purview & Defender sections - is arguably more important than MS-900 for this exam.
No code required
No PowerShell scripts or step-by-step configurations. Focus on understanding concepts, not hands-on CLI work.
Where people get tripped up
Purview product name confusion
Microsoft Purview has over a dozen sub-products (Information Protection, DLP, Insider Risk, Communication Compliance, DSPM for AI, eDiscovery, Data Lifecycle Management). The exam expects you to know which sub-product handles which scenario. "Purview" alone is never the answer - you need the specific capability.
SharePoint oversharing vs. DLP
When the question describes sensitive data being accessible too broadly in SharePoint, the answer is usually Data Access Governance reports or SharePoint Advanced Management - not DLP. DLP prevents data from leaving the org. Oversharing is an internal permissions problem.
Defender XDR vs. Entra ID scope
Questions about suspicious sign-ins and risky users belong to Entra ID (Identity Protection, Conditional Access). Questions about threat detection across email, endpoints, and apps belong to Defender XDR. The exam will describe scenarios that could plausibly go either way - read carefully for whether the threat is identity-based or multi-signal.
Copilot licensing trap
The exam distinguishes between Microsoft 365 Copilot (monthly per-user license) and pay-as-you-go agent consumption. Questions about cost management often hinge on whether the scenario describes a licensed Copilot user or an agent running on consumption billing.
PIM vs. Conditional Access
Privileged Identity Management (PIM) is for just-in-time role activation - admin needs temporary elevated access. Conditional Access is for policy enforcement - block or require MFA based on conditions. If the question says "temporarily elevate," it's PIM. If it says "require MFA when accessing from outside the network," it's Conditional Access.
Key concepts at a glance
Purview Capabilities
Admin Centers
Security Concepts
Test your knowledge
Your organization has deployed Microsoft 365 Copilot. A manager reports that Copilot is returning content from a confidential HR SharePoint site in responses to regular employees.
What is the most likely root cause?
An admin needs to prevent users from sharing documents labeled "Highly Confidential" via email to external recipients.
Which Microsoft Purview capability should they configure?
Your security team wants to monitor how Copilot is being used across the organization - specifically which users are using it, how often, and what types of prompts are being submitted.
Where should they look first?
A new IT admin needs to temporarily have Global Administrator privileges to perform a one-time tenant configuration change. The security team wants to minimize standing admin access.
Which feature should they use?
Everything you need
Ready to get your environment under control?
Tell us about your Power Platform challenges. We'll help you figure out the best path forward.