What does restricted access control in SharePoint allow administrators to do?

Automatically delete content that is shared externally

Prevent all users from accessing the site

Allow only external users to access the site

Restrict access to a site to only users who are members of a specific security group

A law firm has a SharePoint site containing confidential client documents. They want to ensure that only members of the 'Legal Team' security group can access the site, even if someone tries to share it with others. They have SharePoint Advanced Management. What should they configure?

Create a sharing policy that blocks external users

Restricted access control with the Legal Team group

Set the site's external sharing to 'Anyone with the link'

Enable default link type to 'Internal'

A company wants to use restricted access control to protect a site, but they are concerned that it might block legitimate users who are not in the allowed group. They want to ensure that only the allowed group can access the site, but they also want to avoid disruption. What should they do?

Enable restricted access control and then add users as needed

Use a sensitivity label instead of restricted access control

Add all legitimate users to the allowed security group before enabling restricted access control

Disable external sharing and rely on internal sharing

An organization wants to proactively identify SharePoint sites that are shared with external users and have not been accessed in 90 days. They want a report that lists such sites. What should they use?

Audit log search for file accesses

An administrator receives a report that a SharePoint site is shared with an unusually high number of external users. They need to investigate the sharing activity and identify who shared the site and when. Which two tools should they use together?

Restricted access control and sensitivity labels

Data Access Governance report and audit log

SharePoint Admin Center site permissions and sharing settings

Microsoft Entra sign-in logs and conditional access

Microsoft 365 Certified:Copilot and Agent Administration Fundamentals

Domain 2Objective 4

Identify and Monitor Oversharing in SharePoint in Microsoft 365 AB-900 Practice Questions (Page 4)

Part of the Understand data protection and governance tasks for Microsoft 365 and Copilot domain, which accounts for 35–40% of the AB-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~7–12 in this domain), expect 2–3 from this objective — we provide 23 practice questions to prepare you well beyond it. (estimate)

23questions here

5free pages

4concepts

35–40%of the exam

Questions 16–20

16foundation · easy
What does restricted access control in SharePoint allow administrators to do?
Select an answer first
17application · medium
A law firm has a SharePoint site containing confidential client documents. They want to ensure that only members of the 'Legal Team' security group can access the site, even if someone tries to share it with others. They have SharePoint Advanced Management. What should they configure?
Select an answer first
18expert · hard
A company wants to use restricted access control to protect a site, but they are concerned that it might block legitimate users who are not in the allowed group. They want to ensure that only the allowed group can access the site, but they also want to avoid disruption. What should they do?
Select an answer first
19application · medium
An organization wants to proactively identify SharePoint sites that are shared with external users and have not been accessed in 90 days. They want a report that lists such sites. What should they use?
Select an answer first
20application · medium
An administrator receives a report that a SharePoint site is shared with an unusually high number of external users. They need to investigate the sharing activity and identify who shared the site and when. Which two tools should they use together?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AB-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AB-900” is a trademark of its owner, used for identification only.