Online Access Free AB-900 Practice Test

Select the answer that correctly completes the sentence.
Microsoft Entra Privileged Identity Management (PIM) provides time-bound role activation .

Correct Answer:

Explanation:
time-bound role activation
The correct answer is time-bound role activation . Microsoft Learn explains that Microsoft Entra Privileged Identity Management (PIM) allows users to be made eligible for privileged roles and then activate those roles only when needed. Microsoft also states that once activated, the role is active for a preconfigured period of time , after which the privileged access expires automatically. This is the core just- in-time and time-limited access model that PIM is designed to provide. ( learn.microsoft.com ) The other options do not match Microsoft's definition of PIM. It is not primarily described as providing restricted access to Microsoft 365 services , the lifecycle management of users , or the management of enterprise applications . Those areas relate more closely to other Microsoft Entra and Microsoft 365 governance capabilities. Microsoft specifically positions PIM as a service to manage, control, and monitor access to important resources by using eligible assignments , approval workflows , MFA if required , and temporary role activation . Therefore, the phrase that correctly completes the sentence is time-bound role activation . ( learn.microsoft.com )

Your organization has a Microsoft 365 E5 subscription.
You need to ensure that a third-party cloud service can authenticate to Microsoft Entra.
What should you configure?

• A.an app registration
• B.a Microsoft 365 Copilot connector
• C.multifactor authentication (MFA)
• D.a Conditional Access policy

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point

Correct Answer:

Explanation:

Communications Compliance uses OCR (optical character recognition) and machine learning to detect offensive or risky text inside images , including those in SharePoint and OneDrive.
By default, Communications Compliance pseudonymizes user identities to reduce investigator bias. Admins can later deanonymize if needed.
It does not add disclaimers. It silently monitors communications and flags policy violations; disclaimers are handled by Exchange transport rules, not Communications Compliance.

Your company is piloting the use of Microsoft 365 Copilot and has purchased 100 Microsoft 365 Copilot licenses.
You need to view detailed reports about Copilot usage in Microsoft Teams, such as meeting hours summarized by Copilot and meeting actions taken by using Copilot.
What should you use?

• A.the Microsoft 365 Apps usage report in the Microsoft 365 admin center
• B.the Microsoft 365 Copilot readiness report in the Microsoft 365 admin center
• C.the Microsoft 365 Copilot dashboard in Microsoft Viva Insights
• D.the Microsoft 365 Copilot usage report in the Microsoft 365 admin center

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:

The correct selections are No, Yes, No . Microsoft defines Zero Trust as a security strategy and explicitly states that it isn't a product or a service . Instead, it is an approach based on principles such as verify explicitly , use least privilege access , and assume breach . That makes statement 2 true.
Statement 1 is false because Zero Trust does not require an Azure subscription. Microsoft provides Zero Trust guidance across many environments, including Microsoft 365, Copilot, Azure, and hybrid scenarios. It is a strategy that can be implemented with different technologies and is not dependent on owning Azure specifically.
Statement 3 is also false because there is no single switch in the Microsoft 365 admin center to "enable Zero Trust" for an organization. Microsoft's documentation presents Zero Trust as a set of policies, configurations, and deployment steps across services such as Microsoft Entra, Intune, Defender, and Microsoft 365 workloads, not as one admin-center toggle.
Top of Form
Bottom of Form