Are these AB-650 exam dumps?

No. Every question is original — built on the official exam blueprint and backed by free, public, official Microsoft documentation, with every answer linked to the exact official page behind it. We never use braindumps, leaked questions, or paywalled material. If you are looking for the live exam's actual questions, we do not have them, and we would not sell them.

How long do I have access?

12 months from purchase, including all content updates during that time — certification content changes, so we keep it current rather than promising a hollow 'lifetime'. PDFs you download during that period stay yours to keep.

Can I try before buying?

Yes — 16 questions from this bank are free with a free account, in the same player you would use after purchase. Full sample questions with their explanations are also printed on this page.

What kinds of questions are included?

The bank has 351 questions across all four formats: single answer, multi-select, drag-and-drop, hotspot.

What happens when Microsoft updates the AB-650 exam?

We re-check the bank against the new Skills Measured outline and update the questions that need it, then republish. Updates during your 12 months are included at no extra cost. We date our claim against Microsoft's published outline rather than simply saying the pack was "recently updated", so you can check the correspondence yourself.

Yes, before you access what you bought. Because these are digital products delivered immediately, opening a paid question bank or downloading a purchased PDF ends the statutory 14-day withdrawal right — until you do, it is intact. We also refund genuine cases such as a technical failure we cannot fix. The full detail, including exactly what counts as access, is in our Refund Policy.

Microsoft · Associate · AB-650

AB-650 Practice Exams & Study Guide

351 original practice questions across all three AB-650 domains, built against the 27 July 2026 objectives while the exam is in beta - every answer explained and backed by official Microsoft documentation. No dumps, no recycled braindumps: the link to that documentation sits under every answer, so you can check any of it yourself.

Try 16 free questions Already own it? Start practicing

Prepares you for Administering Microsoft 365 and AI Services Exam (AB-650)Matches Microsoft's current AB-650 objectives (outline last updated 27 July 2026)Microsoft's outline →

351

original questions

103

drag-and-drop & hotspot items

100%

questions with an official source link

Everything in this pack

351 original questions, written from official Microsoft documentation
All four question formats — single answer, multi-select, drag-and-drop, hotspot
3 practice modes — Exam, Review, Domain practice
A weak-area report after every session, scored by official domain
The designed AB-650 Study Guide and Quick Recap card deck (PDF, in the bundle)
Every answer linked to the exact official page behind it
16 free to try right now — no card needed
12 months of access, including every content update we publish in that time
Runs in your browser — nothing to install, no player to configure

Coverage follows the official AB-650 blueprint

Official domain	Exam weight	Our questions
Configure and manage Microsoft 365 tenants and workloads	20–25%	86
Govern and secure Microsoft 365 tenants and workloads	40–45%	140
Manage and secure AI services in Microsoft 365	35–40%	125

Weights from Microsoft's current Skills Measured outline for AB-650, last updated 27 July 2026. Question counts follow the blueprint — never padded to hit a number.

What you'll be able to do

Work through every domain of the AB-650 blueprint, in the official weighting
Find your weak domains before the exam does — every session scores you by domain and unit
Handle all four question formats under time, including drag-and-drop and hotspot
Explain why an answer is right, not just which one it is — and check it against the official page

Judge the quality yourself

Sample question 1

Which two measures protect a tenant against the situation where an approval-required role has no approvers and no administrator holds an active privileged assignment? (Choose two.)

a.Convert every eligible assignment in the tenant back into an active assignment
b.Hold one emergency access account permanently active in Global Administrator, and keep it outside the PIM activation rules that apply to everyone else✓ correct
c.Put named approvers on every sensitive role, so no activation depends on the fallback✓ correct
d.Raise the activation maximum duration on every role to its highest value

Why B, C: (B) and (C) are the pair the PIM deployment guidance recommends together, and each closes a different half of the problem. (B) guarantees that one identity can always act: it carries Global Administrator as a standing active assignment and sits outside the activation rules everyone else follows, so there is always somebody who can approve, repair or investigate. (C) removes the dependency at its source. A role with approvers of its own never falls back on anything, so the approval chain is known in advance and does not shift with whoever happens to hold active privilege that day. (A) discards the reason for adopting PIM at all — standing access for everybody is exactly the pattern being retired. (D) alters how long an activation survives after approval, which changes nothing about a request that nobody can approve.

Sample question 2

Which part of Password Protection can a Microsoft 365 administrator genuinely change for cloud accounts?

a.What the global banned password list contains
b.How many points a password needs before it is accepted
c.Whether banned-password checking runs at all
d.Two things only — the custom list's on/off switch, and the terms placed on it✓ correct

Why D: (D) is the entire control surface an administrator gets here, configured under Protection > Authentication methods > Password protection with the Authentication Policy Administrator role. Everything else about the evaluation is fixed by the service. (A) is Microsoft's to maintain, and it cannot be read, edited or switched off from any tenant. (B) is set by the service, as is the tolerance used for near matches, so neither number is a dial you can turn. (C) is not a choice for cloud accounts in the first place. The checks always run. Microsoft Entra ID offers no audit-only mode of the kind the on-premises deployment has, so enforcement is permanent.

Every explanation names why the right answer is right and what each wrong option actually refers to — that's the standard across all 351 questions. Try 16 of them free →

Look inside the AB-650 Study Guide

The real opening of Chapter 1 — how the whole guide teaches. The full guide continues like this, chapter by chapter, with original diagrams and verified questions woven in.

Chapter 1 · free excerpt

The tenant, and the identity it wears

A tenant arrives with nothing that looks like your organisation. It has a boundary, a directory, one all-powerful account, and a name ending in onmicrosoft.com that nobody would print on a business card. This chapter is the work of turning that container into somebody's Microsoft 365: the domain that replaces the default name, the branding an employee sees before and after they sign in, and the tenant-wide settings every new hire inherits without being asked. None of it is difficult. All of it is decided once and lived with for years, which is why the exam asks about it and why the order matters.

One dedicated and isolated instance of Microsoft Entra ID, with the Microsoft 365 services built on it — that is a tenant. One tenant represents one organisation's identity and its service boundary. Users, groups, mailboxes and settings live inside it, and nothing in one organisation's tenant is visible or reachable from another's unless cross-tenant access has been configured, deliberately, to permit it. Isolation is what a tenant is for. It is what lets a company promise a regulated customer that the two estates sit in separate security boundaries rather than in separate folders of one shared system.

The single most useful architectural fact is that Entra ID is the identity control plane every Microsoft 365 service trusts. Teams, SharePoint and Outlook hold no accounts of their own. Each one hands authentication to that single directory, then honours whatever identity and group memberships come back. Configure a user once and every service recognises them; disable that user and access stops everywhere at once. This is why identity dominates the rest of this guide: the directory holds the truth, and every service reads from it.

Mental model

A tenant on its own is a container. What it can do comes from a stack. The tenant is the boundary and the directory. A subscription is a product bought into it, and a tenant may hold several. A service plan is a single capability bundled inside a subscription — Copilot, say, or Teams, SharePoint, Exchange Online. A licence is what hands one person the service plans inside a subscription, and any single plan can be switched off for that person alone. That last sentence explains a whole class of otherwise baffling tickets: someone who plainly "has a licence" but is missing one feature usually has that service plan disabled inside the licence. The licence is present; one capability inside it is off.

Figure 1.1 — The dividing line is authentication. Read it top to bottom, in the order a person meets it. Everything above the line belongs to Microsoft Entra company branding. Everything below it belongs to the Microsoft 365 organization theme.

Worked example

A compliance lead brings three requests before a new team starts. Staff should be able to display pronouns on their profiles. The organisation must be able to show a regulated customer where its Microsoft 365 data is stored. And new employees should not, by default, be able to share free/busy calendar detail outside the company. Nothing here is difficult, and everything here is in a different place.

Pronoun display is about how the tenant represents its people, so it is Security & privacy. Turn the setting on and save. It takes effect across the tenant at once, with nothing to roll out person by person. Data residency is the tenant describing itself, so it is the Data Location Card on Organization profile; what it reports traces back to the geography fixed at signup. Calendar external sharing is a per-workload default, so it is Services. It is also the only one of the three needing a decision rather than a lookup. Left at its shipped value, every new employee can share externally from their first morning, whether or not policy says they should. Three requirements, three tabs, one habit: ask what kind of thing the setting is about, and the tab follows.

Excerpt ends here — the full chapter continues with the five workloads in depth, exam traps, and verified practice questions.

Quick Recap — two of the AB-650 cards

A landscape card deck for last-mile review, ending in a Cram Sheet. One chapter card and one of the four Cram Sheet cards:

Chapter card

What a tenant is, and where it lives

A tenant = one Microsoft Entra ID instance of your own, walled off from every other, plus the Microsoft 365 services running on it. Users, groups, mailboxes, settings inside that boundary — invisible to another tenant unless cross-tenant access is deliberately configured. Entra ID = the identity control plane; Teams, SharePoint, Outlook hold no accounts. Configure once, known everywhere · disable, access stops everywhere at once. Signup country fixes the default geography; Multi-Geo and Advanced Data Residency add regions above it, never relocate it — compliance and contract for a regulated customer.

Cram sheet · 1 of 4

Numbers worth carrying in: passwords, sites, patterns

5 points: password pass mark; a matched term scores 1, not a veto (Ch 5)
1,000: custom banned-term list cap; terms 4—16 characters (Ch 5)
10 groups: Restricted Access Control, per site (Ch 8)
100 sites: Restricted SharePoint Search tenant allow-list; hub-associated sites are free of it (Ch 8)
300 characters: the proximity window a sensitive information type measures (Ch 9)

What the designed PDFs look like

Real pages from the files you download — the polish is part of what you're paying for.

Simple pricing, 12 months of access

Practice Exams

$10.90launch price · 12-month access

✓ 351 original questions across all 3 official domains
✓ All four question formats: single, multi-select, drag-and-drop, hotspot
✓ Exam, Review and Section modes with a weak-area report
✓ Every answer explained and linked to the official Microsoft page behind it

Best value — save $3.90

Complete Bundle

$13.90launch price · 12-month access

✓ Everything in Practice Exams
✓ The designed AB-650 Study Guide (PDF), taught in learning order
✓ The Quick Recap card deck for last-mile review
✓ One purchase, complete preparation
See what's inside ↓

Study Guide + Quick Recap

$6.90launch price · 12-month access

✓ Designed AB-650 Study Guide (PDF) with original diagrams
✓ Quick Recap card deck ending in a cram sheet
✓ Plain-English teaching around precise exam terms
See what's inside ↓

Secure checkout by Stripe · VAT handled · instant access

Introductory launch pricing. The regular price applies after our launch window. Prices shown in USD; local currency and tax shown at checkout.

Who this is for

Anyone sitting AB-650 for the first time and wanting the blueprint covered, not sampled
Retakers who need to find the gap that cost them, rather than re-reading everything
Practitioners stepping up from fundamentals to a role-based certification
Anyone who wants to check an answer against the official documentation instead of trusting it

Who it isn't for

Anyone looking for the live exam's actual questions. We don't have them, and nobody should be selling them to you — using them puts your certification at risk and teaches you nothing.
Anyone who wants to pass without understanding the material. Every answer here comes with the reasoning and the source, which is slower than memorising and the entire point.

Questions people ask before buying

Are these AB-650 exam dumps?: No. Every question is original — built on the official exam blueprint and backed by free, public, official Microsoft documentation, with every answer linked to the exact official page behind it. We never use braindumps, leaked questions, or paywalled material. If you are looking for the live exam's actual questions, we do not have them, and we would not sell them.
How long do I have access?: 12 months from purchase, including all content updates during that time — certification content changes, so we keep it current rather than promising a hollow 'lifetime'. PDFs you download during that period stay yours to keep.
Can I try before buying?: Yes — 16 questions from this bank are free with a free account, in the same player you would use after purchase. Full sample questions with their explanations are also printed on this page.
What kinds of questions are included?: The bank has 351 questions across all four formats: single answer, multi-select, drag-and-drop, hotspot.
What happens when Microsoft updates the AB-650 exam?: We re-check the bank against the new Skills Measured outline and update the questions that need it, then republish. Updates during your 12 months are included at no extra cost. We date our claim against Microsoft's published outline rather than simply saying the pack was "recently updated", so you can check the correspondence yourself.
Can I get a refund?: Yes, before you access what you bought. Because these are digital products delivered immediately, opening a paid question bank or downloading a purchased PDF ends the statutory 14-day withdrawal right — until you do, it is intact. We also refund genuine cases such as a technical failure we cannot fix. The full detail, including exactly what counts as access, is in our Refund Policy.

Full detail: Refund Policy · Terms · How we build content

The no-dumps promise

Braindump sites recycle stolen exam content — using them risks your certification and teaches you nothing. Every ciply.io question is original: built on the official exam blueprint, backed by official Microsoft documentation, and every answer links the exact page behind it — so you learn why it's right. How we build content →

Every question in this pack maps to Microsoft's published Skills Measured outline for AB-650 — the current outline, last updated 27 July 2026. Microsoft prints no revision date on this particular outline, so that is the date its own page carries. When Microsoft revises it, we re-diff the bank against the new outline. Read Microsoft's outline →

ciply.io is an independent study resource and is not affiliated with, authorized, sponsored, or endorsed by Microsoft. Administering Microsoft 365 and AI Services Exam, AB-650, and related names are trademarks of their respective owners.