Are these AB-900 exam dumps?

No. Every question is original — built on the official exam blueprint and backed by free, public, official Microsoft documentation, with every answer linked to the exact official page behind it. We never use braindumps, leaked questions, or paywalled material. If you are looking for the live exam's actual questions, we do not have them, and we would not sell them.

How long do I have access?

12 months from purchase, including all content updates during that time — certification content changes, so we keep it current rather than promising a hollow 'lifetime'. PDFs you download during that period stay yours to keep.

Can I try before buying?

Yes — 16 questions from this bank are free with a free account, in the same player you would use after purchase. Full sample questions with their explanations are also printed on this page.

What kinds of questions are included?

The bank has 176 questions across all four formats: single answer, multi-select, drag-and-drop, hotspot.

What happens when Microsoft updates the AB-900 exam?

We re-check the bank against the new Skills Measured outline and update the questions that need it, then republish. Updates during your 12 months are included at no extra cost. We date our claim against Microsoft's published outline rather than simply saying the pack was "recently updated", so you can check the correspondence yourself.

Yes, before you access what you bought. Because these are digital products delivered immediately, opening a paid question bank or downloading a purchased PDF ends the statutory 14-day withdrawal right — until you do, it is intact. We also refund genuine cases such as a technical failure we cannot fix. The full detail, including exactly what counts as access, is in our Refund Policy.

Microsoft · Fundamentals · AB-900

AB-900 Practice Exams & Study Guide

176 original practice questions across all three AB-900 domains, built against the 22 July 2026 objectives — every answer explained and backed by official Microsoft documentation. No dumps, no recycled braindumps: the link to that documentation sits under every answer, so you can check any of it yourself.

Try 16 free questions Already own it? Start practicing

Prepares you for Microsoft 365 Copilot and Agent Administration Fundamentals Exam (AB-900)Matches Microsoft's current AB-900 objectives (22 July 2026)Microsoft's outline →

176

original questions

drag-and-drop & hotspot items

100%

questions with an official source link

Everything in this pack

176 original questions, written from official Microsoft documentation
All four question formats — single answer, multi-select, drag-and-drop, hotspot
3 practice modes — Exam, Review, Domain practice
A weak-area report after every session, scored by official domain
The designed AB-900 Study Guide and Quick Recap card deck (PDF, in the bundle)
Every answer linked to the exact official page behind it
16 free to try right now — no card needed
12 months of access, including every content update we publish in that time
Runs in your browser — nothing to install, no player to configure

Coverage follows the official AB-900 blueprint

Official domain	Exam weight	Our questions
Identify the core features and objects of Microsoft 365 services	30–35%	56
Understand data protection and governance tasks for Microsoft 365 and Copilot	35–40%	59
Perform basic administrative tasks for Copilot and agents	25–30%	61

Weights from Microsoft's current Skills Measured outline for AB-900, dated 22 July 2026. Question counts follow the blueprint — never padded to hit a number.

What you'll be able to do

Work through every domain of the AB-900 blueprint, in the official weighting
Find your weak domains before the exam does — every session scores you by domain and unit
Handle all four question formats under time, including drag-and-drop and hotspot
Explain why an answer is right, not just which one it is — and check it against the official page

Judge the quality yourself

Sample question 1

A security team wants every access request checked against identity attributes, device health, location, and current risk level — even when the request comes from inside the corporate network. Which Zero Trust principle describes this?

a.Assume breach
b.Least privilege access
c.Verify explicitly✓ correct
d.Defense in depth

Why C: (C) Verify explicitly is the principle that no request is trusted by default. Every access attempt is authenticated and authorized using all available signals — who the user is, what device they are on, where they are, and how risky the sign-in looks. Location inside the network changes nothing. (A) Assume breach is a different principle: it plans for containment on the basis that an attacker may already be inside. (B) Least privilege limits how much access a verified user gets, not how the request is checked. (D) Defense in depth is a general security idea, not one of the three Zero Trust principles this exam names.

Sample question 2

Which of the following are passwordless sign-in methods in Microsoft 365? Select all that apply.

a.Microsoft Authenticator approval with a biometric or device PIN✓ correct
b.A password followed by an SMS one-time code
c.A FIDO2 security key✓ correct
d.Windows Hello facial recognition or fingerprint✓ correct
e.A password checked against a list of previous passwords

Why A, C, D: (A), (C) and (D) all complete sign-in without a password ever being typed. Microsoft Authenticator can approve a push notification verified with a fingerprint, face, or PIN. FIDO2 keys are physical tokens that prove identity with public-key cryptography. Windows Hello ties a biometric or PIN to the device itself, combining something you have with something you are. (B) is multifactor authentication, but the password is still there — stronger than a password alone, yet not passwordless. (E) is just password hygiene.

Every explanation names why the right answer is right and what each wrong option actually refers to — that's the standard across all 176 questions. Try 16 of them free →

Look inside the AB-900 Study Guide

The real opening of Chapter 1 — how the whole guide teaches. The full guide continues like this, chapter by chapter, with original diagrams and verified questions woven in.

Chapter 1 · free excerpt

One Tenant, Many Services

Microsoft 365 is not a single product. It is a group of cloud services that an organization runs inside one environment, under one identity system and one set of controls. Administrators need that picture early, because a setting changed in one place can reach several services at once. This chapter names the core services and the layers they sit on. It explains how a domain name gives an organization its identity in Microsoft 365. It then opens the console where administration starts. The final section covers what decides which features any single person can use: the license.

Microsoft 365 is a cloud-connected ecosystem, not a shelf of separate programs. Five services form its core. Exchange Online handles email and calendaring. The collaboration hub is Microsoft Teams, bringing calling, meetings, chat and app integration together in one interface. SharePoint Online is the platform for content management and intranet sites. OneDrive gives each person cloud storage of their own. Microsoft Copilot is the built-in AI assistant. None of the five stands alone. They are parts of one estate, and an administrator manages them as one.

The connections between them are structural, not cosmetic. Creating a team does more than open a chat space. Teams has two other services underneath it — Microsoft 365 Groups and SharePoint — so each new team also brings a SharePoint site into existence, plus a group mailbox in Exchange. One action, three services touched.

Mental model

Think of an office building with a single main entrance. The security desk at that entrance decides who may come in, and its decision applies to every floor above it. The floors do different work — a post room, a records store, meeting rooms, a help desk — but they share the address, the entrance and the building rules. Microsoft 365 is arranged the same way. The identity system is the desk at the door. The services are the floors. Change the rule at the desk and every floor is affected. That is why an administrator learns the shared parts first and the individual services second.

Figure 1.1 — One tenant, many services. The services people use every day stand on one shared base: a single tenant, one identity system, and a license decision per person — administered from the Microsoft 365 admin center.

Worked example

Worked example. Northwind Traders buys a smaller distributor, Contoso Freight, and has to bring forty staff into its own Microsoft 365 environment within a month. Contoso's customers write to addresses at contoso.com, and those addresses have to keep working. Watch the order in which the work has to happen. First the domain. An administrator adds contoso.com in the Microsoft 365 admin center and publishes the DNS records that prove Northwind controls the name. Only once verification clears can accounts and shared mailboxes carry that domain, so the domain work comes first. One tenant, now two verified domains. Second the accounts. Forty users are created by bulk import under Users > Active Users, each one given a location value, because that attribute is what licensing enforcement relies on. Third the licenses. Rather than assigning forty times, the administrator puts the new staff into a security group and attaches the license to the group. Every member is provisioned in one step, automatically. Fourth the organization-wide settings. External sharing has to be looked at again, because Contoso's people were used to sharing freely with delivery partners and Northwind's boundary is tighter. That review starts under Org Settings, where the boundary can be set globally or narrowed by group. Then day one arrives, and half the new users report that email is slow. Before opening a ticket, the administrator checks the Service Health Dashboard, finds a live Exchange Online incident with a published resolution time, and tells the staff. Notice how much of the work ran through one console: domains, accounts, licenses, organization-wide policy and health.

Excerpt ends here — the full chapter continues with the five workloads in depth, exam traps, and verified practice questions.

Quick Recap — two of the AB-900 cards

A landscape card deck for last-mile review, ending in a Cram Sheet. One chapter card and one of the four Cram Sheet cards:

Chapter card

One tenant, many services

SharePoint Online, Microsoft Teams, OneDrive, Copilot, Exchange Online — five services on one shared base: a single tenant, one identity system, one license decision per person — administered from the Microsoft 365 admin center.

Cram sheet · 1 of 4

Must-memorize facts

3: Zero Trust principles — verify explicitly, least privilege, assume breach (Ch 3)
6: Zero Trust pillars — identity, endpoints, applications, data, infrastructure, network (Ch 3)
3: SharePoint site roles — Visitor reads, Member edits, Owner runs the site (Ch 2)
3: channel types — standard, private, shared (Ch 2)
4: Defender XDR components — Office 365, Endpoint, Identity, Cloud Apps (Ch 6)
6: Purview solutions on the blueprint — IP, DLP, IRM, CC, DSPM for AI, DLM (Ch 7)
4: Secure Score action statuses — Completed, Planned, Resolved via Third Party, Risk Accepted (Ch 5)
2: eDiscovery editions — Standard holds and searches; Premium adds review sets, redaction, analytics (Ch 8)
4: agent kinds — prebuilt, ready-made SharePoint, everyday business user, advanced (Ch 10)
3: approval stages — submission, review, decision (Ch 13)
20: knowledge sources per agent, and 20 groups per license assignment (Ch 13, Ch 1)
10: billing policies per tenant; TOTP codes turn over about every 30 seconds (Ch 12, Ch 5)

What the designed PDFs look like

Real pages from the files you download — the polish is part of what you're paying for.

Simple pricing, 12 months of access

Practice Exams

$10.90launch price · 12-month access

✓ 176 original questions across all 3 official domains
✓ All four question formats: single, multi-select, drag-and-drop, hotspot
✓ Exam, Review and Section modes with a weak-area report
✓ Every answer explained and linked to the official Microsoft page behind it

Best value — save $3.90

Complete Bundle

$13.90launch price · 12-month access

✓ Everything in Practice Exams
✓ The designed AB-900 Study Guide (PDF), taught in learning order
✓ The Quick Recap card deck for last-mile review
✓ One purchase, complete preparation
See what's inside ↓

Study Guide + Quick Recap

$6.90launch price · 12-month access

✓ Designed AB-900 Study Guide (PDF) with original diagrams
✓ Quick Recap card deck ending in a cram sheet
✓ Plain-English teaching around precise exam terms
See what's inside ↓

Secure checkout by Stripe · VAT handled · instant access

Introductory launch pricing. The regular price applies after our launch window. Prices shown in USD; local currency and tax shown at checkout.

Who this is for

Anyone sitting AB-900 for the first time and wanting the blueprint covered, not sampled
Retakers who need to find the gap that cost them, rather than re-reading everything
People new to Microsoft cloud, from any background — the guide teaches, it doesn't just quiz
Anyone who wants to check an answer against the official documentation instead of trusting it

Who it isn't for

Anyone looking for the live exam's actual questions. We don't have them, and nobody should be selling them to you — using them puts your certification at risk and teaches you nothing.
Anyone who wants to pass without understanding the material. Every answer here comes with the reasoning and the source, which is slower than memorising and the entire point.

Questions people ask before buying

Are these AB-900 exam dumps?: No. Every question is original — built on the official exam blueprint and backed by free, public, official Microsoft documentation, with every answer linked to the exact official page behind it. We never use braindumps, leaked questions, or paywalled material. If you are looking for the live exam's actual questions, we do not have them, and we would not sell them.
How long do I have access?: 12 months from purchase, including all content updates during that time — certification content changes, so we keep it current rather than promising a hollow 'lifetime'. PDFs you download during that period stay yours to keep.
Can I try before buying?: Yes — 16 questions from this bank are free with a free account, in the same player you would use after purchase. Full sample questions with their explanations are also printed on this page.
What kinds of questions are included?: The bank has 176 questions across all four formats: single answer, multi-select, drag-and-drop, hotspot.
What happens when Microsoft updates the AB-900 exam?: We re-check the bank against the new Skills Measured outline and update the questions that need it, then republish. Updates during your 12 months are included at no extra cost. We date our claim against Microsoft's published outline rather than simply saying the pack was "recently updated", so you can check the correspondence yourself.
Can I get a refund?: Yes, before you access what you bought. Because these are digital products delivered immediately, opening a paid question bank or downloading a purchased PDF ends the statutory 14-day withdrawal right — until you do, it is intact. We also refund genuine cases such as a technical failure we cannot fix. The full detail, including exactly what counts as access, is in our Refund Policy.

Full detail: Refund Policy · Terms · How we build content

The no-dumps promise

Braindump sites recycle stolen exam content — using them risks your certification and teaches you nothing. Every ciply.io question is original: built on the official exam blueprint, backed by official Microsoft documentation, and every answer links the exact page behind it — so you learn why it's right. How we build content →

Every question in this pack maps to Microsoft's published Skills Measured outline for AB-900 — the current outline, dated 22 July 2026. When Microsoft revises it, we re-diff the bank against the new outline. Read Microsoft's outline →

ciply.io is an independent study resource and is not affiliated with, authorized, sponsored, or endorsed by Microsoft. Microsoft 365 Copilot and Agent Administration Fundamentals Exam, AB-900, and related names are trademarks of their respective owners.