Is AB-900 Hard? An Honest Read on Copilot and Agent Administration Fundamentals

Microsoft rates AB-900 as Beginner and gives you 45 minutes. By that rating alone it is an easy exam. The honest complication is the audience profile, which assumes you already use Microsoft 365 admin centres, Entra identity and Purview. If you do, AB-900 is fair. If you have never opened them, it is harder than the word Fundamentals suggests.

What Microsoft says about the level

The certification page places AB-900 at Beginner level. It tags the credential with Administrator as the role and artificial intelligence as the subject. No prerequisite exam is listed. Microsoft's own one-line summary is about keeping an AI-enabled Microsoft 365 environment supported, secure and protected.

The exam is proctored and lasts 45 minutes. It may include interactive components, and English is currently the only language listed. The study guide adds that candidates whose preferred language is missing can ask for 30 extra minutes. The outline in force is dated 22 July 2026.

So far this reads like an easy exam, and in one sense it is.

Where "Beginner" and the audience profile disagree

Now read the audience profile on the study guide, and count what it assumes you already know:

• Microsoft 365 itself — governance, data protection, identity and access, security, and the core services, plus Copilot and agents.
• Five separate admin centres — Purview, Entra, Teams, SharePoint in Microsoft 365, and Exchange Online.
• The core objects — libraries, sites, teams, groups and users, and the role each one plays.
• The core security features — single sign-on (SSO), conditional access policies and authentication methods.
• Experience with modern IT management practices, and with AI-driven productivity tools.

That is not a description of somebody new to Microsoft 365. It is a description of a junior administrator.

Those two facts do not contradict each other, and the reason matters. The Beginner rating is honest about depth: nothing on AB-900 asks you to design, build or troubleshoot at an engineer's level. It is not a claim about context. Microsoft tags the credential with the Administrator role, which tells you plainly who is expected to take it.

The practical consequence: how hard AB-900 feels is mostly decided before you start studying. It depends on whether you have already opened a Microsoft 365 admin centre.

Two thirds of it is not about Copilot

The exam's name says Copilot and agents. The weighting says something else. The study guide splits AB-900 three ways:

Skill area	Weight
Core Microsoft 365 features and objects, security and identity	30–35%
Data protection and governance across Microsoft 365 and Copilot	35–40%
Basic administration of Copilot and agents	25–30%

The largest area is data protection and governance, which is mostly Purview. The Copilot and agent administration that gives the exam its name is the smallest of the three.

Two consequences for difficulty. First, if Copilot is what interests you, most of your study time still goes elsewhere. Second, the heaviest area is also the one with the most product names to keep apart. A single sub-bullet names six Purview solutions — Data Lifecycle Management, DSPM for AI, Communication Compliance, Insider Risk Management, Data Loss Prevention and Information Protection. Elsewhere the outline adds Compliance Manager, Data Explorer, activity explorer and eDiscovery Content search. None of them is conceptually hard. Telling ten similar names apart, in a 45-minute exam, is the actual work.

Not every task is "describe"

Most of the outline uses verbs like understand, identify, explain and compare. A minority do not. AB-900 also asks you to create an agent, assign Copilot licences, run SharePoint's data access governance report, use eDiscovery Content search to find emails and files, and monitor pay-as-you-go billing for Copilot.

You are not being asked to build anything complex. You are being asked to know which portal a task belongs to, and that is knowledge that comes from use rather than from reading. These are the tasks that reading alone does not prepare you for.

One more thing worth knowing. Microsoft notes that questions mostly stay on generally available features, and that Preview features can appear when they are in common use. In a product area that changes this quickly, that matters: older study material can be both out of date and incomplete.

What a 700 pass mark does and does not mean

Microsoft's scoring page sets the pass mark at 700, on a scale that runs to 1,000. It states directly that this is a scaled score, so it does not mean 70% of the questions answered correctly. The scale exists so that attempts stay comparable: if a candidate's set of questions is easier, more points are needed to pass; if it is harder, fewer are.

Three details are worth knowing before exam day:

• Multi-part questions are scored component by component, so partial credit is real.
• Nothing is subtracted for a wrong answer. Leave no question blank.
• Some items do not count toward your score at all. They are being trialled, and you cannot tell which ones they are.

Your score report gives one overall number, a pass or fail result, and a bar chart per skill area. Microsoft states that the bars cannot be converted into a count of correct answers, and that it will not tell you which questions you missed.

There is no published pass rate

Microsoft does not publish pass rates for its certification exams, and AB-900 is no exception. Any page quoting a specific percentage either invented the number or extrapolated it from forum posts, where candidates who failed are less likely to write. We would not plan around any of those figures. That is our opinion, and it is the reason every factual claim above carries a link to the Microsoft page it came from.

Is AB-900 worth taking?

"Worth it" depends on who you are, so here is what the credential evidences and who Microsoft aims it at.

What it evidences. Microsoft's summary of the credential is about keeping an AI-enabled Microsoft 365 environment supported, secure and protected. In practice that means three things. You know which admin centre a task belongs to. You know what each Purview solution does. And you understand how Copilot reaches data, and how existing permissions shape what it can return.

Who it is for. The role tag is Administrator and the subject tag is artificial intelligence. Our read of that pairing: AB-900 is aimed at the person who has to enable Copilot safely for an organisation, not at a general audience. If that describes your job, the credential matches work you already do.

The context, stated carefully. MS-900 is retired and AB-900 is the newer Fundamentals credential in the Microsoft 365 family, but Microsoft has not called it a replacement — we set out exactly what was and was not announced.

Where we would be honest about the limits. A Fundamentals certification is not a job qualification on its own, and this one is a weak first-ever certification precisely because it assumes so much background. One point in its favour: the renewal note in the study guide covers associate, expert and specialty certifications, and Fundamentals certifications are not on that list, so there is no annual renewal to complete.

The honest way to find out where you stand

Microsoft publishes a free practice assessment on the certification page. Microsoft says these assessments mirror how real exam questions are worded and how difficult they are, and show you where more preparation is needed. There is also a free exam sandbox for trying the interface itself.

Take the practice assessment before you study anything. That single result answers the question this article cannot answer for you. If the vocabulary is familiar, AB-900 is a short project. If most of the terms are new, treat it as a longer one, and use a schedule rather than a guess — our AB-900 study plan sets one out. If you want the full outline of what is tested, that is in our AB-900 exam guide.

So, is it hard?

For someone who already administers Microsoft 365: no. In our view it is a fair, well-scoped Fundamentals exam, and 45 minutes is enough time.

For someone meeting Microsoft 365 for the first time: harder than the Beginner label implies, though still very passable. The obstacle is breadth rather than difficulty — five admin centres you have never opened, around ten Purview tools with similar names, and identity vocabulary that your colleagues already use daily.

Either way, AB-900 is unusually transparent. The outline is public, the practice assessment is free, and the pass mark is published.

Our AB-900 practice exams and study guide were written against the current outline. Every answer is explained and linked to the Microsoft page behind it, so the questions you miss show you exactly what to review.

We will not promise you a pass, and we would be careful with anyone who does.

Difficulty judgements here are our opinion, formed while building AB-900 material against the current skills outline; every factual claim links to Microsoft's own page. Independent study material. ciply.io is not affiliated with, endorsed by, or sponsored by Microsoft.