A company has a SharePoint site containing highly confidential project files. The security team wants to restrict access to these files to only users who are members of a specific security group, even if the site is shared more broadly. Which SharePoint Advanced Management feature should the administrator configure?

Conditional Access policy in Microsoft Entra ID.

Data Access Governance report for the site.

Restricted access control for the site.

Sensitivity label with encryption.

An admin needs to create a monthly report of all SharePoint sites that are shared externally and have had no activity in the last 30 days. They want to automate this process. What should they do?

Use the Data Access Governance report and export the data to a CSV for further analysis

Enable restricted access control on all sites

Use SharePoint Admin Center site usage reports

Use audit log search to find sites with no activity

An admin is troubleshooting an oversharing issue where a site appears to be shared externally, but the Data Access Governance report does not show it. What should they do?

Enable restricted access control on the site

Check the site's permissions manually

Check the audit log for sharing events and verify the site's external sharing settings

Run the Data Access Governance report again after 24 hours

A SharePoint administrator needs to prevent users from sharing a site with external partners. The site contains confidential legal documents. Which configuration should the administrator apply?

Apply a sensitivity label with encryption.

Enable restricted access control for the site.

Set the site's external sharing setting to 'Only people in your organization'.

Run a Data Access Governance report to monitor sharing.

What does the data access governance report in SharePoint primarily help administrators monitor?

Site performance and page load times

User login frequency and authentication methods

Sharing activity and potential oversharing of content

Storage usage and quota consumption across sites

Microsoft 365 Certified:Copilot and Agent Administration Fundamentals

Domain 2Objective 4

Identify and Monitor Oversharing in SharePoint in Microsoft 365 AB-900 Practice Questions (Page 3)

Part of the Understand data protection and governance tasks for Microsoft 365 and Copilot domain, which accounts for 35–40% of the AB-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~7–12 in this domain), expect 2–3 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

4concepts

35–40%of the exam

Questions 11–15

11application · medium
A company has a SharePoint site containing highly confidential project files. The security team wants to restrict access to these files to only users who are members of a specific security group, even if the site is shared more broadly. Which SharePoint Advanced Management feature should the administrator configure?
Select an answer first
12expert · hard
An admin needs to create a monthly report of all SharePoint sites that are shared externally and have had no activity in the last 30 days. They want to automate this process. What should they do?
Select an answer first
13expert · hard
An admin is troubleshooting an oversharing issue where a site appears to be shared externally, but the Data Access Governance report does not show it. What should they do?
Select an answer first
14application · medium
A SharePoint administrator needs to prevent users from sharing a site with external partners. The site contains confidential legal documents. Which configuration should the administrator apply?
Select an answer first
15foundation · easy
What does the data access governance report in SharePoint primarily help administrators monitor?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AB-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AB-900” is a trademark of its owner, used for identification only.