A user is able to sign in to Microsoft 365 but cannot access a specific Teams team. The user's account is active and licensed. What should the administrator check first?

The user's device compliance status.

The user's membership in the team and the team's permission settings.

The user's MFA registration status.

The user's password expiration date.

What is the primary purpose of Microsoft Defender for Office 365?

To protect email and collaboration tools from malicious threats

To manage user identities and access permissions

To provide data loss prevention policies for sensitive information

To monitor and manage device compliance

Which principle is a core tenet of the Zero Trust security model?

Assume breach and verify every access request

Rely on a single perimeter firewall for security

Implicit trust for users inside the corporate network

Trust all devices that are domain-joined

An organization wants to implement passwordless authentication but has a significant number of users who use legacy applications that do not support modern authentication. They also have a strict security policy that requires MFA for all users. What is the best approach to meet both requirements?

Upgrade or replace legacy applications to support modern authentication, then enable passwordless methods for all users.

Enable passwordless for modern apps and use app passwords for legacy apps, while enforcing MFA for all users.

Disable MFA for users of legacy applications to allow them to use passwordless methods.

Use SMS-based verification for legacy apps and passwordless for modern apps.

Microsoft 365 Certified:Copilot and Agent Administration Fundamentals

Domain 1Objective 2

Understand the Microsoft 365 Security Principles AB-900 Practice Questions (Page 7)

Part of the Identify the core features and objects of Microsoft 365 services domain, which accounts for 30–35% of the AB-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~6–11 in this domain), expect 2–4 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

6concepts

30–35%of the exam

Questions 31–35

31application · medium
A user is able to sign in to Microsoft 365 but cannot access a specific Teams team. The user's account is active and licensed. What should the administrator check first?
Select an answer first
32foundation · easy
What is the primary purpose of Microsoft Defender for Office 365?
Select an answer first
33foundation · easy
Which of the following is an example of a passwordless authentication method available in Microsoft 365?
Select an answer first
34foundation · easy
Which principle is a core tenet of the Zero Trust security model?
Select an answer first
35expert · hard
An organization wants to implement passwordless authentication but has a significant number of users who use legacy applications that do not support modern authentication. They also have a strict security policy that requires MFA for all users. What is the best approach to meet both requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AB-900

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AB-900” is a trademark of its owner, used for identification only.