A company has a Communication Compliance policy to detect harassment in Teams messages. The policy generates many alerts, but most are false positives from employees using sarcastic language. The compliance team wants to reduce the number of false positives while still catching genuine harassment. What should they do?

Increase the alert threshold to require more messages

Use the built-in harassment classifier instead of keyword matching

Manually review all messages and dismiss false positives

Disable the policy and rely on Insider Risk Management

A user at Northwind has been using Copilot to summarize sensitive documents and then sharing those summaries externally. The compliance team wants to detect this type of risky behavior. Which two Microsoft Purview solutions should they use together?

eDiscovery Content Search and Compliance Manager

Data Explorer and Activity Explorer

Communication Compliance and DLP Alerts

Insider Risk Management and DSPM for AI

An organization wants to monitor employee communications for policy violations such as harassment or sharing confidential information in Teams messages and emails. Which Microsoft Purview solution should they use?

Microsoft Purview Data Explorer

Microsoft Purview Communication Compliance

Microsoft Purview Insider Risk Management

Contoso Pharmaceuticals is rolling out Microsoft 365 Copilot to its research team. The compliance team is concerned that employees might use Copilot to summarize or rephrase confidential drug trial data and then share that content externally. They want a solution that detects risky user behavior patterns—such as repeated attempts to access sensitive research files and then sending large volumes of data externally—and generates alerts for investigation. Which Microsoft Purview solution should they prioritize?

Data Loss Prevention (DLP) alerts

Microsoft 365 Certified:Copilot and Agent Administration Fundamentals

Domain 2Objective 3

Identify Data Protection and Governance Risks for Microsoft 365 and Copilot AB-900 Practice Questions (Page 1)

Part of the Understand data protection and governance tasks for Microsoft 365 and Copilot domain, which accounts for 35–40% of the AB-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~7–12 in this domain), expect 2–3 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

8concepts

35–40%of the exam

Questions 1–5

1application · medium
A company has a Communication Compliance policy to detect harassment in Teams messages. The policy generates many alerts, but most are false positives from employees using sarcastic language. The compliance team wants to reduce the number of false positives while still catching genuine harassment. What should they do?
Select an answer first
2expert · hard
A company wants to identify all locations where sensitive data is stored and also understand how Copilot interactions might be exposing that data. They have limited resources and want to use a single tool that can provide both data discovery and AI activity insights. Which tool should they use?
Select an answer first
3application · medium
A user at Northwind has been using Copilot to summarize sensitive documents and then sharing those summaries externally. The compliance team wants to detect this type of risky behavior. Which two Microsoft Purview solutions should they use together?
Select an answer first
4foundation · easy
An organization wants to monitor employee communications for policy violations such as harassment or sharing confidential information in Teams messages and emails. Which Microsoft Purview solution should they use?
Select an answer first
5application · medium
Contoso Pharmaceuticals is rolling out Microsoft 365 Copilot to its research team. The compliance team is concerned that employees might use Copilot to summarize or rephrase confidential drug trial data and then share that content externally. They want a solution that detects risky user behavior patterns—such as repeated attempts to access sensitive research files and then sending large volumes of data externally—and generates alerts for investigation. Which Microsoft Purview solution should they prioritize?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AB-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AB-900” is a trademark of its owner, used for identification only.

Identify Data Protection and Governance Risks for Microsoft 365 and Copilot AB-900 Practice Questions (Page 1)

Questions 1–5

A company wants to identify all locations where sensitive data is stored and also understand how Copilot interactions might be exposing that data. They have limited resources and want to use a single tool that can provide both data discovery and AI activity insights. Which tool should they use?

A user at Northwind has been using Copilot to summarize sensitive documents and then sharing those summaries externally. The compliance team wants to detect this type of risky behavior. Which two Microsoft Purview solutions should they use together?

An organization wants to monitor employee communications for policy violations such as harassment or sharing confidential information in Teams messages and emails. Which Microsoft Purview solution should they use?

Keep studying — Understand data protection and governance tasks for Microsoft 365 and Copilot