Microsoft AB-900 - Microsoft 365 Copilot and Agent Administration Fundamentals

The correct selections are Information Protection and Data Loss Prevention . Microsoft documents that Microsoft Purview Information Protection helps organizations discover, classify, protect, and govern sensitive information wherever it lives or travels . Microsoft also describes Information Protection as the Purview solution for data classification, sensitivity labels, and encryption , including scenarios across Microsoft 365, on-premises repositories, cloud stores, and even third-party apps through supported extensions. That makes it the correct choice for the requirement to discover and classify sensitive data across multiple platforms .

For the second requirement, Microsoft states that Microsoft Purview Data Loss Prevention (DLP) helps prevent the unintentional sharing of sensitive items and can block users from prohibited activities , including inappropriate external sharing through services such as SharePoint, OneDrive, Teams, and email. Microsoft specifically documents DLP scenarios for preventing sensitive items from being shared with external users , which matches the requirement to block users from sharing intellectual property externally.

The correct answer is adding a public DNS record . Microsoft documents that when you add a custom domain to Microsoft 365, you must first prove ownership of that domain before Microsoft 365 can use it for services such as Exchange Online, SharePoint, and user sign-ins. The standard verification method described by Microsoft is to add a DNS record at your domain registrar or DNS hosting provider. Microsoft commonly uses a TXT record for verification, although in some cases an MX record can also be used depending on the setup flow. This is why “adding a public DNS record” is the right completion for the sentence.

The other choices are not the standard Microsoft 365 domain verification process. Microsoft’s admin guidance does not use confirming your business address , uploading a certificate , or uploading a webpage as the normal method for proving ownership of a domain in Microsoft 365. Domain verification is specifically tied to DNS because DNS is the authoritative public system used to prove control over the domain name.

A Communication Compliance policy can detect inappropriate text in Microsoft Teams messages. Answer: Yes

A Communication Compliance policy can detect offensive language in Microsoft 365 Copilot prompts. Answer: Yes

A Communication Compliance policy can be used to retain email messages for 10 years. Answer: No

The correct selections are Yes, Yes, No . Microsoft documents that Microsoft Purview Communication Compliance can detect potentially inappropriate messages in supported communication channels, including Microsoft Teams and email . Microsoft also states that reviewers can investigate communications in Microsoft 365 Copilot and Microsoft 365 Copilot Chat , which means Communication Compliance policies can evaluate Copilot prompts and responses for risky or offensive content.

This makes statement 1 Yes , because inappropriate text in Teams messages is a standard Communication Compliance scenario. Statement 2 is also Yes , because Microsoft explicitly includes Microsoft 365 Copilot and Microsoft 365 Copilot Chat among the supported communication sources for policy review and investigation.

Statement 3 is No because retaining email for a fixed period such as 10 years is handled by Microsoft Purview Data Lifecycle Management through retention policies or retention labels, not by Communication Compliance. Communication Compliance is for monitoring and investigating risky communications, not for long-term retention enforcement.

The correct answer is accountability . Microsoft’s Responsible AI framework is built on six principles: fairness , reliability and safety , privacy and security , inclusiveness , transparency , and accountability . Microsoft describes accountability as the principle that people who design and deploy AI systems must remain responsible for how those systems operate and for the impacts they create. A key part of that principle is ensuring there is human oversight so humans remain in control of decisions and system behavior.

The other options do not match the wording in the sentence as closely. Transparency focuses on helping people understand how AI systems work and why they produce certain outcomes. Privacy and security is about protecting data and securing systems. Reliability and safety is about dependable and safe operation. Inclusiveness is about designing AI that empowers and includes people broadly. The principle tied to oversight, responsibility, and keeping humans in control is accountability .

In Microsoft 365 Copilot, you should use the Researcher agent to perform multi-step reasoning over unstructured data.

The correct answer is the Researcher agent . Microsoft describes Researcher in Microsoft 365 Copilot as an agent for complex, multi-step research that can reason across information sources and synthesize findings into structured outputs. That aligns with the phrase multi-step reasoning in the question. Microsoft’s guidance also contrasts Researcher with Analyst , which is aimed more at data analysis and spreadsheet-oriented tasks.

The other options are less suitable. Chat is general-purpose and not the specialized tool Microsoft positions for deeper multi-step research workflows. A notebook is used to organize materials and chats, not as the main reasoning engine for this scenario. The Analyst agent is better suited to structured data analysis, trends, and calculations rather than broad reasoning over unstructured data such as documents, notes, and mixed content. Based on Microsoft’s product positioning, the best fit for multi-step reasoning over unstructured information is the Researcher agent .

To use Microsoft 365 Copilot Chat to reason over web data, you need a Microsoft 365 Copilot license. Answer: No

To use the Researcher agent in Microsoft 365 Copilot, you need a Microsoft 365 Copilot license. Answer: Yes

To add an agent in the Microsoft 365 Copilot app, you need a Microsoft 365 Copilot license. Answer: No

The correct selections are No, Yes, No . Microsoft documents that Microsoft 365 Copilot Chat is available at no additional cost for eligible Entra account users with qualifying Microsoft 365 licenses, and that it includes secure AI chat grounded in the web . That means a separate Microsoft 365 Copilot add-on license is not required just to use Copilot Chat over web data.

Statement 2 is Yes because Microsoft states that Researcher is part of the core default experience for Microsoft 365 Copilot licensed users . In other words, access to the Researcher agent requires the Microsoft 365 Copilot license.

Statement 3 is No because Microsoft documents that users can access agents and create them in the Microsoft 365 Copilot app through Copilot Chat, and Microsoft 365 service descriptions state that web-grounded agents are available at no extra cost for commercial users with a qualifying Microsoft 365 license. A Copilot add-on license is required for certain advanced capabilities, but not simply to add an agent in the app in general.

The correct answer is D. the Analyst agent in Microsoft 365 Copilot . Microsoft Learn training for Microsoft 365 Copilot specifically distinguishes the Analyst agent as the tool for gathering insights from data and enhancing data presentations. Microsoft’s guidance also notes in the Researcher FAQ that when the task is spreadsheet-related , Analyst agent is better suited for Microsoft Excel related tasks . This makes Analyst the best choice for a quarterly sales reporting scenario that involves detecting performance trends , surfacing anomalies , and producing visual insights from multiple datasets.

The other options are less suitable. Researcher is intended for complex multi-step research and source-cited reports across web and work content, not specialized data analysis across files. Microsoft 365 Copilot Search is for finding information, not for deep quantitative analysis and anomaly summarization. Copilot in Excel is powerful for workbook-level analysis, but the question emphasizes broader insight generation across multiple files and asks for the best Copilot experience for trends, visuals, and anomaly summaries. Microsoft positions Analyst as the dedicated agent for that kind of data-analysis workflow.

Communications Compliance uses OCR (optical character recognition) and machine learning to detect offensive or risky text inside images , including those in SharePoint and OneDrive.

By default, Communications Compliance pseudonymizes user identities to reduce investigator bias. Admins can later deanonymize if needed.

It does not add disclaimers. It silently monitors communications and flags policy violations; disclaimers are handled by Exchange transport rules, not Communications Compliance.

The correct answer is Require multifactor authentication for administrative roles . In the exhibit, each recommendation shows its available Secure Score points . The listed values are 1/1 for Use least privileged administrative roles , 8/8 for Do not expire passwords , 0.73/8 for Enable policy to block legacy authentication , and 0/10 for Require multifactor authentication for administrative roles . Because 10 points is the highest value among the options shown, resolving that recommendation would improve the Identity Secure Score the most.

Microsoft Learn explains that Identity Secure Score in Microsoft Entra is based on Microsoft security recommendations, and each recommendation contributes a specific number of points depending on its impact and implementation state. Recommendations related to administrator protection are especially important because privileged accounts are high-value attack targets. Microsoft also emphasizes multifactor authentication for admin roles as a core identity security best practice. Therefore, both from the screenshot and from Microsoft’s identity guidance, the recommendation with the greatest score improvement is Require multifactor authentication for administrative roles .

time-bound role activation

The correct answer is time-bound role activation . Microsoft Learn explains that Microsoft Entra Privileged Identity Management (PIM) allows users to be made eligible for privileged roles and then activate those roles only when needed. Microsoft also states that once activated, the role is active for a preconfigured period of time , after which the privileged access expires automatically. This is the core just-in-time and time-limited access model that PIM is designed to provide. ( learn.microsoft.com )

The other options do not match Microsoft’s definition of PIM. It is not primarily described as providing restricted access to Microsoft 365 services , the lifecycle management of users , or the management of enterprise applications . Those areas relate more closely to other Microsoft Entra and Microsoft 365 governance capabilities. Microsoft specifically positions PIM as a service to manage, control, and monitor access to important resources by using eligible assignments , approval workflows , MFA if required , and temporary role activation . Therefore, the phrase that correctly completes the sentence is time-bound role activation . ( learn.microsoft.com )