A company wants to grant a group of helpdesk staff the ability to reset passwords for users in the Sales department only. They also want to require that the helpdesk staff use MFA when performing password resets. What should you configure?

Create a role-assignable group for Sales and assign the Helpdesk Administrator role to that group.

Create a custom role that allows password reset for Sales users and assign it to the helpdesk staff.

Create a Conditional Access policy that requires MFA for the helpdesk staff and assign the Password Administrator role to them.

Use administrative units to scope the Helpdesk Administrator role to the Sales department and require MFA for the helpdesk staff.

What is the primary purpose of Privileged Identity Management (PIM) in Microsoft Entra ID?

To manage user passwords and reset them when forgotten

To provide just-in-time privileged access to roles

To provide single sign-on for all applications

To synchronize on-premises directories with Microsoft Entra ID

A company is planning to implement SSO for all their cloud applications. They have a mix of applications: some support SAML, some support OpenID Connect, and some only support password-based SSO. The company wants to minimize the number of times users enter passwords while maintaining security. What should you do?

Use password-based SSO for all applications.

Configure SSO for each application using the appropriate method: SAML, OIDC, or password-based.

Use only SAML-based SSO for all applications.

Disable SSO for apps that do not support SAML.

A developer has created a custom web application that needs to authenticate users from the company's Microsoft Entra ID tenant. The application will be used only by internal employees. What should the developer do to enable authentication?

Register the application in Microsoft Entra ID and configure the appropriate authentication endpoints and permissions.

Create an enterprise application and assign users to it.

Add the application to the Microsoft 365 admin center's app launcher.

Use Azure AD B2C to configure the application.

Which action is most likely to improve your Identity Secure Score?

Enabling multi-factor authentication for all users

Changing the tenant display name

Adding more users to the tenant

Microsoft 365 Certified:Copilot and Agent Administration Fundamentals

Domain 1Objective 3

Identify the Core Security Features of Microsoft 365 Services AB-900 Practice Questions (Page 1)

Part of the Identify the core features and objects of Microsoft 365 services domain, which accounts for 30–35% of the AB-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~6–11 in this domain), expect 2–4 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

9concepts

30–35%of the exam

Questions 1–5

1application · medium
A company wants to grant a group of helpdesk staff the ability to reset passwords for users in the Sales department only. They also want to require that the helpdesk staff use MFA when performing password resets. What should you configure?
Select an answer first
2foundation · easy
What is the primary purpose of Privileged Identity Management (PIM) in Microsoft Entra ID?
Select an answer first
3expert · hard
A company is planning to implement SSO for all their cloud applications. They have a mix of applications: some support SAML, some support OpenID Connect, and some only support password-based SSO. The company wants to minimize the number of times users enter passwords while maintaining security. What should you do?
Select an answer first
4application · medium
A developer has created a custom web application that needs to authenticate users from the company's Microsoft Entra ID tenant. The application will be used only by internal employees. What should the developer do to enable authentication?
Select an answer first
5foundation · easy
Which action is most likely to improve your Identity Secure Score?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AB-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AB-900” is a trademark of its owner, used for identification only.