An organization has a SharePoint site that contains legal documents. The legal team wants to ensure that only members of the 'Legal Team' security group can access the site, even if the site is shared with other users. Which action should the administrator take?

Create a sharing policy that blocks external users.

Run a Data Access Governance report to identify current access.

Enable restricted access control and assign the 'Legal Team' group.

Apply a sensitivity label that requires encryption.

An administrator runs the data access governance report and sees a site with a high number of external sharing links. What is the most appropriate next step?

Disable external sharing for the entire organization

Delete the site immediately to stop sharing

Ignore the report because it only shows historical data

Review the site's sharing links and revoke any that are unnecessary

A company wants to prevent users from sharing a specific SharePoint site with anyone outside the organization, but they still need to allow internal sharing. They have SharePoint Advanced Management available. What should they configure?

Create a sensitivity label with encryption

Set the site's external sharing to 'Existing guests'

Restricted access control on the site

Disable the Everyone except external users group

A company wants to prevent users from sharing a specific SharePoint site with external partners. The site contains proprietary research data. Which SharePoint Advanced Management feature should the administrator use?

Set the site's external sharing setting to 'Only people in your organization'.

Apply a sensitivity label with encryption.

Restricted access control for the site.

Run a Data Access Governance report to monitor sharing.

Microsoft 365 Certified:Copilot and Agent Administration Fundamentals

Domain 2Objective 4

Identify and Monitor Oversharing in SharePoint in Microsoft 365 AB-900 Practice Questions (Page 1)

Part of the Understand data protection and governance tasks for Microsoft 365 and Copilot domain, which accounts for 35–40% of the AB-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~7–12 in this domain), expect 2–3 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

4concepts

35–40%of the exam

Questions 1–5

1application · medium
An organization has a SharePoint site that contains legal documents. The legal team wants to ensure that only members of the 'Legal Team' security group can access the site, even if the site is shared with other users. Which action should the administrator take?
Select an answer first
2foundation · easy
An administrator runs the data access governance report and sees a site with a high number of external sharing links. What is the most appropriate next step?
Select an answer first
3application · medium
A company wants to prevent users from sharing a specific SharePoint site with anyone outside the organization, but they still need to allow internal sharing. They have SharePoint Advanced Management available. What should they configure?
Select an answer first
4foundation · easy
Which feature is part of SharePoint Advanced Management?
Select an answer first
5application · medium
A company wants to prevent users from sharing a specific SharePoint site with external partners. The site contains proprietary research data. Which SharePoint Advanced Management feature should the administrator use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AB-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AB-900” is a trademark of its owner, used for identification only.