A security team wants to proactively identify emerging threats targeting their industry. They want to use threat intelligence to adjust their security policies in Microsoft 365. Which feature should they use?

Microsoft Purview compliance portal

Microsoft Defender for Office 365's Threat Explorer

A company is implementing a Zero Trust security model for its Microsoft 365 tenant. The security team wants to ensure that every access request to Exchange Online is verified explicitly, regardless of the user's location or device. They also want to enforce multi-factor authentication for all users. Which combination of actions should the administrator take to align with Zero Trust principles?

Configure a VPN requirement for all remote users and rely on the corporate network perimeter for security.

Enable Azure AD Seamless Single Sign-On to reduce authentication prompts for users on domain-joined devices.

Enable Conditional Access policies that require MFA for all users and treat every sign-in as untrusted until verified.

Use Security Groups to grant access to Exchange Online only to users in the IT department.

A security team has detected a sophisticated phishing campaign that uses newly registered domains to avoid detection. They want to proactively block these threats before they reach users. Which approach should they take?

Manually add each newly registered domain to the block list in Defender for Office 365.

Use Microsoft Defender XDR to automatically block all emails from domains that are less than 30 days old.

Enable the 'impersonation protection' and 'domain spoofing' policies in Microsoft Defender for Office 365.

Disable email delivery from external senders to prevent phishing.

A user in your organization is trying to access a sensitive SharePoint site but is denied access. The user's account is active and they have the correct license. What is the most likely reason for the denial, and what should you check first?

The user does not have the appropriate permissions in SharePoint; check the site's permission settings.

The user's device is not compliant; require device enrollment.

The user's IP address is blocked by a Conditional Access policy; review sign-in logs.

The user's password has expired; reset the password.

Microsoft 365 Certified:Copilot and Agent Administration Fundamentals

Domain 1Objective 2

Understand the Microsoft 365 Security Principles AB-900 Practice Questions (Page 2)

Part of the Identify the core features and objects of Microsoft 365 services domain, which accounts for 30–35% of the AB-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~6–11 in this domain), expect 2–4 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

6concepts

30–35%of the exam

Questions 6–10

6application · medium
A security team wants to proactively identify emerging threats targeting their industry. They want to use threat intelligence to adjust their security policies in Microsoft 365. Which feature should they use?
Select an answer first
7application · medium
A company is implementing a Zero Trust security model for its Microsoft 365 tenant. The security team wants to ensure that every access request to Exchange Online is verified explicitly, regardless of the user's location or device. They also want to enforce multi-factor authentication for all users. Which combination of actions should the administrator take to align with Zero Trust principles?
Select an answer first
8application · medium
A company wants to reduce the reliance on passwords and improve security for its Microsoft 365 users. They have deployed Windows Hello for Business and want to enable a passwordless experience for all users. Which additional authentication method should they configure to support this goal?
Select an answer first
9expert · hard
A security team has detected a sophisticated phishing campaign that uses newly registered domains to avoid detection. They want to proactively block these threats before they reach users. Which approach should they take?
Select an answer first
10application · medium
A user in your organization is trying to access a sensitive SharePoint site but is denied access. The user's account is active and they have the correct license. What is the most likely reason for the denial, and what should you check first?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AB-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AB-900” is a trademark of its owner, used for identification only.

Understand the Microsoft 365 Security Principles AB-900 Practice Questions (Page 2)

Questions 6–10

A security team wants to proactively identify emerging threats targeting their industry. They want to use threat intelligence to adjust their security policies in Microsoft 365. Which feature should they use?

A company wants to reduce the reliance on passwords and improve security for its Microsoft 365 users. They have deployed Windows Hello for Business and want to enable a passwordless experience for all users. Which additional authentication method should they configure to support this goal?

A security team has detected a sophisticated phishing campaign that uses newly registered domains to avoid detection. They want to proactively block these threats before they reach users. Which approach should they take?

A user in your organization is trying to access a sensitive SharePoint site but is denied access. The user's account is active and they have the correct license. What is the most likely reason for the denial, and what should you check first?

Keep studying — Identify the core features and objects of Microsoft 365 services