Microsoft 365 Certified:Copilot and Agent Administration Fundamentals
Domain 2Objective 3
Identify Data Protection and Governance Risks for Microsoft 365 and Copilot AB-900 Practice Questions (Page 6)
Part of the Understand data protection and governance tasks for Microsoft 365 and Copilot domain, which accounts for 35–40% of the AB-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~7–12 in this domain), expect 2–3 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)
32questions here
7free pages
8concepts
35–40%of the exam
Questions 26–30
- 26
A legal firm uses Microsoft 365 Copilot to draft legal documents. The compliance team wants to ensure that Copilot interactions do not expose client confidential information. They want to see a summary of AI activity, including which users are using Copilot most and whether any sensitive data types are being processed. Which tool should they use?
Select an answer first - 27
A legal team needs to search for all emails and documents related to a specific client matter to prepare for a lawsuit. Which Microsoft Purview tool should they use to perform this search?
Select an answer first - 28
A legal team needs to find all emails and documents that contain a specific employee's name and the phrase 'confidential' for a lawsuit. They also want to know which users accessed these documents after the legal hold was placed. Which two tools should they use together?
Select an answer first - 29
A company wants to improve its compliance score for a specific regulation. They have identified sensitive data in their environment and have DLP policies in place. They need to see which improvement actions will have the most impact on their compliance score. Which two tools should they use?
Select an answer first - 30
A manager at Contoso receives a Communication Compliance alert about a potentially offensive message sent via Teams. The manager needs to determine if the message also contained confidential data that should have triggered a DLP policy. Which two tools should the manager use to investigate?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AB-900” is a trademark of its owner, used for identification only.