AB-650 Exam Guide: What Administering Microsoft 365 and AI Services Covers, the Beta Format, and Who It Is For

AB-650 is Microsoft's Associate-level exam for administering Microsoft 365 and AI services. Pass it and you earn one credential — Microsoft 365 Certified: AI Services Administrator Associate. It is built on three skill areas: tenant and workload configuration, governance and security, and the management of Copilot and agents. The exam is in beta as of August 2026.

What AB-650 covers

The blueprint lives on the AB-650 study guide, which is the page to trust for the skill areas and their weightings. Three areas, and 58 sub-bullets between them:

Weight	Skill area, named as Microsoft names it	Sub-bullets
20–25%	Configure and manage Microsoft 365 tenants and workloads	13
40–45%	Govern and secure Microsoft 365 tenants and workloads	21
35–40%	Manage and secure AI services in Microsoft 365	24

Read the weight column before you plan anything. Roughly four marks in five sit in the last two areas. The tenant administration most people picture when they hear "Microsoft 365 exam" is the smallest block on the paper.

One note on dates, because it decides which outline you are studying. AB-650's study guide carries no "skills measured as of" heading and no change log. New exams often have neither, and there is nothing yet to compare a change log against. The version we captured and built against is the page as Microsoft last updated it on 27 July 2026.

Area one is the estate itself. Eight of its bullets are tenant-level: branding, domains, organizational settings, licence management, Microsoft 365 Backup, network connectivity insights, and Service health with its notifications. The licence bullets name the AI products directly — Microsoft Copilot Studio, Microsoft Agent 365 and Microsoft 365 Copilot. Five more are the workloads: mailboxes including shared ones, teams with their channels and members, SharePoint sites and their permissions, transcription settings for Copilot in Teams meetings, and the SharePoint and OneDrive controls that decide what Copilot may surface.

Area two is governance and security, and it is the heaviest block. Seven bullets sit on identity in Microsoft Entra — users, guests and external access, groups, roles with Privileged Identity Management (PIM), administrative units, contacts, and bulk work through Microsoft Graph PowerShell. Five cover authentication and access: authentication methods, Microsoft Entra Password Protection, self-service password reset (SSPR), Conditional Access with Microsoft Entra ID Protection and multifactor authentication, and the troubleshooting when a sign-in fails. Four are Microsoft Defender for Office 365: alerts, threat policies and rules, investigation and response, and attack simulations with their training campaigns. The last five are Microsoft Purview — Data Loss Prevention (DLP), information protection, data lifecycle management, DLP alerts raised by AI services as well as by Microsoft 365, and Data Security Posture Management (DSPM) for monitoring AI activity.

Area three is the AI half, and it is where this exam differs from every Microsoft 365 exam before it. Nine bullets are Microsoft 365 Copilot: tenant readiness, data readiness problems such as oversharing and leaks, web search, Copilot Search, the tenant settings catalog, user experiences, Microsoft 365 Copilot Cowork, third-party AI providers, and Copilot connectors. Eight are agents, handled as identities with a lifecycle — Microsoft Entra Agent ID, access packages and Conditional Access for agents, owners, allowed agent types and sharing, plus the agent registry work of discovery, approval, rejection, blocking and uploading. Three more govern agents through Microsoft Agent 365: activity monitoring, protecting sensitive data, and finding compliance gaps. The final four are monitoring and cost, including the Copilot Control System.

Two cautions Microsoft prints beside the list are worth reading. The sub-bullets are examples of how a skill gets tested, so related topics can appear too. And most questions cover features that are generally available, though Preview features can show up when they are already in common use.

What "beta" means for you right now

The exam is in beta as of August 2026, and that changes three practical things. All three come from Microsoft's beta exam page.

Your score arrives late. A beta exam is not scored on the day, because the scoring model is not finished. Microsoft's estimate is about 10 days after the exam goes live worldwide, which it puts at roughly 10 to 12 weeks after the beta period starts. Depending on when you sit it, you may wait as long as 14 weeks.

A pass still counts. Passing the beta version counts toward the certification and you do not retake the live version. A fail is harder: you have to wait for the exam to go live before you can try again.

The price may be discounted, briefly. Microsoft posts a limited number of eighty percent discount codes on the Microsoft Learn blog. They run for a three to four week window, they are first come first served, and the seats go quickly. Without a code you pay the normal price. One restriction catches people out. Four countries are excluded from beta exams for security reasons: Türkiye, Pakistan, India and China. The rule follows where you are located, not where you are from.

Microsoft has given one date, in one place, and gently. The Skills Hub post announcing the certification, dated 28 July 2026, ends: "Stay tuned for general availability of this Certification in October 2026." That is the only place we found it. Neither the exam page nor the certification page mentions October or general availability at all, and "stay tuned for" is Microsoft's own hedge rather than ours. Treat it as an intention, not a date to book around.

The other timing statement is about the free practice test, and it is doubly conditional. Microsoft says a practice assessment usually appears "within 8 weeks" of the point where an exam both leaves beta and becomes generally available.

Format, score, and cost

The exam page lists English as the only language, and no retirement date. Price is set by the country or region where the exam is proctored, so there is no global figure to quote. Microsoft recommends booking with a personal Microsoft account rather than a work or school one. Exam records tied to an organizational account are lost if you leave that organization.

Microsoft publishes no duration and no question count for AB-650. We checked the exam page, the certification page and the study guide. Other sites state both confidently; we would rather tell you the figure is unpublished than repeat a guess.

You pass at 700, and the scoring page explains what that number is. Microsoft reports technical exam scores between 1 and 1,000, and scales them, so 700 is not 70% of the points. The bar reflects both the skills being measured and how difficult your particular set of questions was. Three more rules change how you should answer: guessing costs nothing, multi-part questions usually give a point per correct component, and some questions are unscored trial items you cannot identify.

This certification does expire, which is the part people miss when they arrive from a fundamentals exam. Associate, expert and specialty certifications run on an annual cycle; fundamentals certifications do not expire at all. The renewal page describes the process: a free, unproctored, open-book assessment on Microsoft Learn, taken inside a six-month window, extending the certification by a year.

Who AB-650 is for

Microsoft names no prerequisite exam. AB-650 is the single exam behind the AI Services Administrator Associate certification, and the listed job role is Administrator.

What the study guide gives instead of a prerequisite is an audience profile, and this one is specific. It expects hands-on experience with Microsoft 365 workloads and with Microsoft Entra ID, an understanding of what Defender XDR can do, and familiarity with Microsoft Graph PowerShell. The role it describes is someone who governs data access, protects information, and supports people and agents working alongside each other at enterprise scale.

That profile is our reading of the honest entry bar, and it is not gentle. This is not a first certification. If you already run a Microsoft 365 tenant day to day, AB-650 asks you to add the AI layer on top of skills you have. If you do not, close to two-thirds of the marks will be teaching you the estate before they teach you anything about Copilot. Choosing between this exam and AB-900 is a question in its own right, and we answer it in AB-650 vs AB-900.

How far Microsoft's free training reaches — our own measurement

Three official learning paths are attached to this exam, one per skill area: configure and manage (5 modules), govern and secure (5 modules), and the AI services (7 modules). All three are rated Intermediate. Together they hold 17 modules, and we counted 189 individual units in them.

What follows is our measurement, not a Microsoft statement. Building our question bank meant knowing where our grounding could come from, so we swept all 58 sub-bullets against those 189 units. The keywords came word for word out of Microsoft's own bullet text, and we never widened one to make a result look better.

How well the path covers the bullet	Sub-bullets
Fully taught	48
Taught thinly	7
Partially taught	2
No lexical anchor anywhere	1
Mentioned only, never taught	0

That is unusually good coverage, and we say so gladly. It also has a limit we want stated in the same breath, because the limit is what makes the number worth anything. The sweep measures presence, not depth. It can tell you a topic appears in the training. It cannot tell you whether the teaching reaches the level the bullet's verb demands. The verbs here vary a lot. Four Purview bullets ask you to "identify requirements for" a policy; others ask you to configure, manage or investigate. Reading level and doing level are not the same, and no word count separates them.

We also read three of the low scorers by hand. All three turned out to be taught in substance under different wording. Guests appear as external collaboration and cross-tenant access. Image and video generation appear as two separate settings. Copilot user experiences are taught as a tab in the settings catalog. We kept the low scores in the record anyway. A measurement you overwrite whenever you dislike the result is not a measurement. The whole point of running one is that it is allowed to disagree with us.

The practical read: the paths are a genuine foundation for this exam, which is not something we could say about every Microsoft exam we have built for. Where they thin out is the newest material: agent identity, the agent registry, and Microsoft Agent 365. That is also the material with the least written about it anywhere else. We wrote a separate explainer on Microsoft Agent 365 for that reason.

How hard is AB-650?

Harder than its module list suggests, for four reasons.

The weighting is the first. The published bands put 75–85% of the marks in governance, security and AI services, and the identity, Purview and Defender material behind them is Associate-level work in its own right. The second is the agent half. Twenty-four bullets cover products most administrators have never operated, where community answers and blog posts barely exist yet. The third is the beta status: no practice assessment today, and a fail means waiting for the exam to go live before you can retake. The fourth is subtler. The blueprint mixes recognition verbs with operational ones. From the outline alone you cannot tell which topics need portal fluency and which need a clear definition.

What makes it fair is the coverage we measured above. The training is there, it is free, and it lines up with the blueprint better than most. What we would not do is treat the paths as the whole job, and that is our opinion rather than Microsoft's guidance.

How to prepare

Start with the three learning paths, then go past them. The study guide's Find documentation section points at the product documentation for Microsoft 365, the admin center, Microsoft Entra ID, Microsoft Defender and Microsoft Purview compliance. Those pages carry the operational depth the modules summarise, and they cost nothing. Free demo material exists too: Microsoft's exam sandbox puts you in the real interface with the real question types before exam day.

For the order to study in and how long to allow, we wrote an AB-650 study plan so this guide does not have to double as a schedule.

Practice questions earn their place in one specific gap: the decisions. Which Purview control answers which requirement. A sensitivity label set against a retention policy. Conditional Access written for a person against Conditional Access written for an agent. Reading about a decision is not the same as being asked to make one under time pressure.

Our AB-650 practice exams were written against the 27 July 2026 outline, question by question, with every answer explained and tied to the official Microsoft page behind it. No dumps, ever.

Independent study material. ciply.io is not affiliated with, endorsed by, or sponsored by Microsoft.