A company is using Microsoft Defender XDR and wants to improve their threat protection. They have noticed that some phishing emails are not being detected. They want to use threat intelligence to improve detection. What is the most effective way to do this?

Enable Safe Links and Safe Attachments.

Increase the frequency of user training.

Manually add the sender domains to the blocked senders list.

Submit the phishing emails to Microsoft for analysis and use the resulting indicators to create policies.

An organization wants to enforce MFA for all users, but they have a group of users who use a legacy email client that does not support modern authentication. They also want to maintain a Zero Trust posture. What is the best approach?

Allow app passwords for the legacy client, but require MFA for all other access.

Use Conditional Access to block legacy authentication and require MFA for all access.

Disable the legacy email client and require users to use Outlook on the web.

Use a hybrid solution such as Azure AD Application Proxy to provide MFA for the legacy client.

A company is implementing Zero Trust and wants to ensure that even if a user's account is compromised, the attacker cannot move laterally to other resources. They have already implemented MFA and Conditional Access. What additional measure should they implement to limit lateral movement?

Use Privileged Identity Management (PIM) to provide just-in-time access to privileged roles.

Increase the frequency of password changes.

Implement single sign-on (SSO) to reduce the number of passwords.

Disable user accounts that are not used for 30 days.

An organization wants to reduce reliance on passwords and improve security for its Microsoft 365 users. The security team is considering passwordless authentication methods. They need a solution that works for both mobile users and desktop users without requiring additional hardware tokens. Which authentication method should they implement?

Microsoft Authenticator with phone sign-in (passwordless).

FIDO2 security keys for all users.

Windows Hello for Business with biometric and PIN sign-in on corporate devices.

Smart cards with certificate-based authentication.

Microsoft 365 Certified:Copilot and Agent Administration Fundamentals

Domain 1Objective 2

Understand the Microsoft 365 Security Principles AB-900 Practice Questions (Page 1)

Part of the Identify the core features and objects of Microsoft 365 services domain, which accounts for 30–35% of the AB-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~6–11 in this domain), expect 2–4 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

6concepts

30–35%of the exam

Questions 1–5

1application · medium
A company wants to implement passwordless authentication for its Microsoft 365 users to improve security and user experience. They have already deployed Windows Hello for Business. Which additional method should they enable to allow users to sign in without a password on mobile devices?
Select an answer first
2expert · hard
A company is using Microsoft Defender XDR and wants to improve their threat protection. They have noticed that some phishing emails are not being detected. They want to use threat intelligence to improve detection. What is the most effective way to do this?
Select an answer first
3expert · hard
An organization wants to enforce MFA for all users, but they have a group of users who use a legacy email client that does not support modern authentication. They also want to maintain a Zero Trust posture. What is the best approach?
Select an answer first
4expert · hard
A company is implementing Zero Trust and wants to ensure that even if a user's account is compromised, the attacker cannot move laterally to other resources. They have already implemented MFA and Conditional Access. What additional measure should they implement to limit lateral movement?
Select an answer first
5application · medium
An organization wants to reduce reliance on passwords and improve security for its Microsoft 365 users. The security team is considering passwordless authentication methods. They need a solution that works for both mobile users and desktop users without requiring additional hardware tokens. Which authentication method should they implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AB-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AB-900” is a trademark of its owner, used for identification only.

Understand the Microsoft 365 Security Principles AB-900 Practice Questions (Page 1)

Questions 1–5

A company wants to implement passwordless authentication for its Microsoft 365 users to improve security and user experience. They have already deployed Windows Hello for Business. Which additional method should they enable to allow users to sign in without a password on mobile devices?

A company is using Microsoft Defender XDR and wants to improve their threat protection. They have noticed that some phishing emails are not being detected. They want to use threat intelligence to improve detection. What is the most effective way to do this?

An organization wants to enforce MFA for all users, but they have a group of users who use a legacy email client that does not support modern authentication. They also want to maintain a Zero Trust posture. What is the best approach?

A company is implementing Zero Trust and wants to ensure that even if a user's account is compromised, the attacker cannot move laterally to other resources. They have already implemented MFA and Conditional Access. What additional measure should they implement to limit lateral movement?

Keep studying — Identify the core features and objects of Microsoft 365 services