AB-650 Study Plan: 17 Modules, 1,388 Minutes, and the Order We Would Read Them In

Microsoft's official preparation for AB-650 is 17 modules across three learning paths, about 1,388 minutes of reading. We counted them. Add practice on top and plan for roughly 45 hours. We would spend seven weeks on it, and read the modules in teaching order rather than blueprint order: tenant and identity first, agents last.

AB-650 is in beta as of August 2026. This article is about how to prepare and in what order. For what the exam covers, how it is scored and who it is for, read our AB-650 exam guide. If you are choosing between this exam and the fundamentals-level one, that is a separate question and we answer it here. The agent surface in the third exam area is new enough to deserve its own explanation, which is here.

How long the official reading takes

The AB-650 exam page carries a Two ways to prepare section. Its self-paced side resolves to three learning paths:

Learning path	Modules	Units	Minutes
Microsoft 365 tenants and workloads: the configure-and-manage path	5	54	422
Microsoft 365 tenants and workloads: the govern-and-secure path	5	56	459
Microsoft 365 AI services: the manage-and-secure path	7	79	507
Total	17	189	1,388

We added those minutes up twice, in two different ways, because a single count is not a check. The three path totals give 1,388. The seventeen module durations, summed on their own, give 1,388 as well. Every figure comes from Microsoft's own learning catalogue, and we opened all seventeen module pages to confirm each one is live.

1,388 minutes is 23 hours and 8 minutes. That is the part of your schedule you can fix in advance. Everything after it depends on you.

The reading is spread evenly. The exam is not.

The study guide, last updated on 27 July 2026, splits the exam into three areas and gives each a weight. The three learning paths carry almost exactly those same three titles, so we pair each path with its matching area. That pairing is ours. We also counted the sub-bullets printed under each area ourselves, so two of these columns are ours:

Exam area	Weight	Sub-bullets (our count)	Share of official minutes
Microsoft 365 tenants and workloads: the configure-and-manage area	20–25%	13	30%
Microsoft 365 tenants and workloads: the govern-and-secure area	40–45%	21	33%
Microsoft 365 AI services: the manage-and-secure area	35–40%	24	37%

The reading is close to even: 30, 33, 37. The exam is not. The middle area is worth up to 45% of your score and gets a third of the minutes. That is the one mismatch a plan has to absorb, and it is why weeks 4 and 5 below are the heavy ones.

The third area is the widest — 24 of the 58 sub-bullets sit there. Width and weight are different things, and the difference matters for scheduling. A wide area needs more separate facts held in memory, even when it is not the heaviest area on the paper.

One more planning note from the same page. Microsoft says most questions cover features that are generally available, and that preview features appear only where they are already in common use. So you can safely ignore preview announcements while you study.

The order we would learn it in

This ordering is ours. It is not a Microsoft-stated pathway. The three paths follow the exam's own structure, and that structure is an assessment design: it groups skills for scoring. It is not how the subject is learned, and the mismatch is largest in the third area. Agents draw their identities from Microsoft Entra, their permissions from groups and access packages, and their data limits from sensitivity labels. Read that area first and every second sentence rests on something you have not met yet.

So we sequence it this way:

1. The tenant, then licences. Where the settings live, and who is paying for what.
2. Identity next, ahead of the workloads. Users, groups, roles and Conditional Access are what the later modules configure against, the agent ones included.
3. Then the workloads and their data. Exchange, Teams, SharePoint and OneDrive. Site permissions decide what Copilot can return, so this has to come before any Copilot module.
4. Then protection and governance. Sensitivity labels, data loss prevention, retention. This is the vocabulary the rest of the exam reuses.
5. Then Copilot, then agents. Both now sit on top of things you already know.
6. Monitoring and cost last. Nothing else depends on them, and they are the easiest pages to read when you are tired.

Three specific moves sit inside that. We pull the identity modules forward, out of the second path. We push tenant health and resilience later, because it is an operations topic and nothing builds on it. And we read Microsoft Defender for Office 365 after the Microsoft Purview pair, not before. Defender is a surface of its own. Purview supplies terms that the AI area keeps using.

A seven-week shape, week by week

Seven weeks at six to seven hours each. The reading minutes are Microsoft's; the hours are our estimate and include practice. A few module names are trimmed to fit these tables. Every link goes to Microsoft's own page, and the full titles are in the source list at the foot of this article.

Week 1 — the tenant itself (about 5 hours)

Module	Minutes
Provision and brand a Microsoft 365 tenant	92
Licensing Microsoft 365 and AI services at scale	74

Branding, domains, organizational settings. Then the licence half, which is heavier than it looks: group-based licensing, pay-as-you-go, and the separate licences named for Microsoft Copilot Studio, for Microsoft Agent 365, and for Microsoft 365 Copilot itself. End the week able to say which licence unlocks which AI capability, without notes.

Week 2 — identity (about 6 hours)

Module	Minutes
Provision and govern identities in Microsoft Entra	100
Implement authentication and access in Microsoft Entra	89

Users, guests, groups, contacts, administrative units, roles and Privileged Identity Management. Then Conditional Access, the authentication methods themselves, self-service password reset, and Microsoft Entra Password Protection. Bulk management with Microsoft Graph PowerShell has its own sub-bullet in the outline, so treat it as a topic rather than a footnote.

This is a natural stopping point. If you have to pause for a fortnight, pause here. Everything after week 2 assumes it.

Week 3 — workloads, and where the data sits (about 7 hours)

Module	Minutes
Configure Exchange Online and Microsoft Teams workloads	75
SharePoint and OneDrive governance for Microsoft 365 Copilot	96
Keeping a Microsoft 365 tenant resilient and healthy	85

Mailboxes and shared mailboxes, teams with their channels, owners and members, and the settings for Copilot in Teams meetings, transcription included. Then SharePoint sites and their permissions, plus site exclusions, Microsoft Search in SharePoint, and what SharePoint Advanced Management adds. Close the week with Microsoft 365 Backup, network connectivity insights, and Service health.

Week 4 — Microsoft Purview (about 6 hours)

Module	Minutes
Protect information with Microsoft Purview information protection	80
Preventing data loss, and the data lifecycle, in Microsoft Purview	101

Sensitive information types, sensitivity labels, and the policies that apply them. Then data loss prevention across Exchange, SharePoint, OneDrive, Teams, endpoints and Copilot. Then retention policies, retention labels, and the retention label policies that connect the two. Then Data Security Posture Management, watching AI activity.

Build one table of your own this week: a row per Purview capability, and the question that capability answers. Five of this area's sub-bullets each name a different one, and the exam asks you to choose between them rather than to define them.

Week 5 — threats, then Copilot (about 7 hours)

Module	Minutes
Email and collaboration security in Microsoft Defender for Office 365	89
Assessing readiness and rolling out Microsoft 365 Copilot	74
Configure Microsoft 365 Copilot settings and extensibility	74

Alerts, threat policies and rules, investigation and response, and attack simulation with its training campaigns. Then the Copilot half: tenant readiness, data readiness and the oversharing problem, web search, Microsoft 365 Copilot Search, tenant settings, user experiences, Microsoft 365 Copilot Cowork, third-party AI providers, and Copilot connectors.

Second natural stopping point. The heaviest exam area is now behind you.

Week 6 — agents (about 8 hours)

Module	Minutes
Agent identities and secure access in Microsoft Entra Agent ID	65
Curating and controlling agents — the Agent Registry, plus Agent 365 tools	67
Monitoring and managing agents with Microsoft Agent 365	71
Govern agents using Agent 365	86

The longest week, and the newest material. Agent identity lifecycle workflows, agent access through access packages and Conditional Access, agent owners, and agent settings such as allowed types, sharing and templates. Then the registry actions, which are worth separating carefully: discovering agents is not reviewing them, reviewing is not publishing or rejecting, and publishing is not installing or blocking. Finish with monitoring agent activity, protecting sensitive data, and evaluating compliance gaps.

Week 7 — monitoring, then review (about 6 hours)

Module	Minutes
Monitor and optimize Microsoft 365 AI services	70

Costs for AI services, usage reports in the Microsoft 365 admin center with their workload-level adoption detail, and the Copilot Control System for both adoption and service health. Then stop taking in new material. Spend the rest of the week on mixed practice, and on the distinctions the exam keeps returning to: a sensitivity label against a retention label, data loss prevention against Data Security Posture Management, a Copilot licence against pay-as-you-go, and Copilot against an agent.

What being a beta exam changes about your schedule

This is the part a normal study plan gets wrong, so read it before you book anything. AB-650 is in beta as of August 2026, and Microsoft's own description of beta exams carries three facts that change how you plan.

You will not get a score on the day. The scoring model is not final while an exam is in beta, so results are held. Microsoft says scores are released about ten days after the exam goes live. The wait can reach fourteen weeks, depending on when in the beta period you sit.

You get one attempt during the beta. Microsoft's retake policy states that a beta exam may be taken only once in the beta period. It also states that a beta failure can be retaken only after that exam goes live. The general rule outside beta is a 24 hour wait before a first retake, so the difference here is large. That is why we would not sit this one early just to see what it looks like.

Beta seats are not open to everyone. Microsoft lists China, India, Pakistan and Türkiye as countries whose candidates are not eligible to take beta exams. If you are in one of them, this is a wait-for-general-availability exam, whatever else your plan says.

Two dated facts alongside those. Microsoft announced the certification on 28 July 2026. That post offered a discount to the first 300 candidates who sat the exam on or before 18 August 2026. The window has closed, so ignore any page still promoting it. And a beta pass does count: Microsoft confirms you do not have to retake the final version of the exam afterwards.

We will not tell you to book for a date N weeks out. Microsoft has named a month, once and gently: the 28 July 2026 Skills Hub post ends by telling readers to stay tuned for general availability in October 2026. That sentence sits on a blog, the exam page still shows no date, and beta periods move. So count your weeks from the day you start rather than from a month that may slide. A plan that pretends otherwise sells confidence rather than preparation.

How to know you are ready

The pass mark is 700, stated on the certification page and in the study guide. What that score means in questions is not published, so treat 700 as a line to clear comfortably rather than to approach.

A Microsoft practice assessment is the usual readiness check, and for AB-650 it is not available yet. The exam page says so directly, and adds that these usually appear within eight weeks of an exam leaving beta. During beta, then, you have to build your own readiness signal. Here is ours, offered as an opinion rather than a rule:

• You can name the admin surface that owns each object, without guessing. Mailboxes, teams, sites, labels, agents and licences each live somewhere specific.
• You can trace one chain out loud: a file, its sensitivity label, the permission on its site, and what Copilot can therefore return to a user who asks.
• You can separate the four registry verbs — discover, review, publish or reject, install or block — and say who performs each one.
• You can answer Microsoft Purview questions without re-reading anything. That area is the heaviest, and it is the one where reading feels like knowing.
• Your wrong answers have stopped clustering. If they still cluster in one area, you are not ready for a mixed sitting yet. You are ready for another week on that area.

The exam sandbox linked from the exam page is worth ten minutes early in week 1. It demonstrates the exam interface rather than AB-650 content, and meeting it once means nothing about the screen is new to you later.

One thing for after you pass: Microsoft associate certifications expire annually, and are renewed by a free online assessment on Microsoft Learn. Put a reminder in your calendar the same week your result arrives.

If you are new to Microsoft 365 administration

Be honest with yourself here, because the plan above assumes a starting point. Microsoft names the background it expects, on the exam page and in the study guide. Three things: Microsoft Entra ID and Microsoft 365 workloads you have worked in, Defender XDR capabilities you understand, and Microsoft Graph PowerShell you are familiar with. All three learning paths are marked intermediate rather than beginner. Microsoft also says that only candidates with experience in the technology should sit a beta exam.

If most of that is unfamiliar, we would change three things. Add three or four weeks, mostly to weeks 2, 4 and 6, which assume the most. Get a trial tenant and click through every setting you read about, because the admin centers are hard to hold in memory from prose alone. And consider starting at fundamentals level instead: we compare the two credentials, and say who each one suits, here.

If you administer Microsoft 365 daily, the reverse applies. Weeks 1 to 3 compress into two, and the time you save is better spent on Microsoft Purview and on the agent material than on finishing early.

Where practice fits

Reading gives you the first half of preparation. Being asked gives you the second. On this exam the gap between the two is wider than usual, because the free practice assessment that would normally close it is not published during beta.

That is the honest case for practising with questions rather than only reading. A reading plan can show you that you covered an area. It cannot show you where you are wrong. Only being asked does that. Our AB-650 practice exams and study guide were written against this same July 2026 outline. Every question links the Microsoft Learn page behind it. A wrong answer takes you straight to the page that settles it.

Use them from week 2, not from week 7. Questions asked while you are still learning tell you where to spend the next week. Questions asked at the end only tell you whether you should have.

The schedule, the ordering and the readiness markers above are our opinion, formed while building AB-650 material from these same official modules. Facts carry their source links. Independent study material. ciply.io is not affiliated with, endorsed by, or sponsored by Microsoft.