Microsoft 365 Certified:Copilot and Agent Administration Fundamentals
Domain 2Objective 3
Identify Data Protection and Governance Risks for Microsoft 365 and Copilot AB-900 Practice Questions (Page 2)
Part of the Understand data protection and governance tasks for Microsoft 365 and Copilot domain, which accounts for 35–40% of the AB-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~7–12 in this domain), expect 2–3 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)
32questions here
7free pages
8concepts
35–40%of the exam
Questions 6–10
- 6
A security administrator receives an alert that a user attempted to share a file containing credit card numbers outside the organization. Which Microsoft Purview solution generated this alert?
Select an answer first - 7
An employee in the finance department has been flagged by Insider Risk Management for downloading a large number of files from a restricted SharePoint site. The compliance team wants to see the specific activities the employee performed, such as which files were downloaded and when, to determine if this is a real risk. Which tool should they use to get this detailed activity log?
Select an answer first - 8
A user at Fabrikam has been flagged by Insider Risk Management for unusual data access. The compliance officer wants to know if the user has also sent sensitive data outside the organization. Which Microsoft Purview solution should the officer use to get a consolidated view of the user's risky activities and any associated DLP alerts?
Select an answer first - 9
An organization wants to locate all files containing personally identifiable information (PII) across SharePoint Online and OneDrive for Business. They also need to export a list of these files for a records review. Which two Microsoft Purview tools should they use?
Select an answer first - 10
A security team is investigating a potential data breach. They have a DLP alert showing a user downloaded a large volume of files. They need to determine if the user's behavior is part of a broader pattern of insider risk. Which two tools should they use to correlate the DLP alert with user behavior patterns?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AB-900” is a trademark of its owner, used for identification only.