AB-650 Practice Exam: Microsoft 365 and AI Services Administrator
Microsoft 365 tenant and workloads, identity and security with Entra, Defender and Purview, and administration of Copilot, agents and Agent 365: 303 original questions with detailed explanations, smart review and progress tracking. Independent prep resource, not affiliated with Microsoft.
AB-650 exam domains
Why practice with EarnYourCert
AB-650 sample questions
Five real questions from our 303-question bank. Try to answer before revealing the solution.
1. What do you need before you can protect SharePoint sites, OneDrive accounts and Exchange mailboxes with Microsoft 365 Backup?
- Pay-as-you-go billing set up for Microsoft 365 Backup
- A third-party backup app approved in the App Store
- A retention policy that keeps all content for 10 years
- An Azure Backup vault in the same region as the tenant
Show answer
Correct answer: A. Microsoft 365 Backup is a pay-as-you-go service: you first connect billing to an Azure subscription, then turn on Backup and create backup policies.
2. Network connectivity insights show no data for your branch offices. What should you do first?
- Open the Service health page and subscribe to advisories
- Enable location data collection and add office locations
- Create a Conditional Access named location per office
- Assign a Teams Phone license to each branch office user
Show answer
Correct answer: B. Insights require office locations (added manually or discovered) and permission to collect location data from Windows devices or the connectivity test.
3. An item is subject to a 3-year retention policy and a 7-year retention label, both retaining content. How long is it kept?
- 10 years, because the periods are added together
- 3 years, because policies override labels
- It depends on which one was created first
- 7 years, because the longest retention period wins
Show answer
Correct answer: D. Under the principles of retention, retention wins over deletion and the longest retention period wins.
4. Many agents created from the same design must share owners, sponsors and access settings. What should you use in Entra Agent ID?
- A shared mailbox per agent family
- An agent identity blueprint
- A custom Teams policy package
- A dynamic distribution list
Show answer
Correct answer: B. An agent identity blueprint is a reusable template that standardizes how agent identities are created and governed (owners, sponsors, access, lifecycle).
5. Makers in Copilot Studio are sharing agents with the whole company. How can you limit sharing to small groups?
- Disable web search for Copilot in the cloud policy
- Assign the makers the Global Reader role only
- Set environment sharing limits in Power Platform
- Block the agents' URLs in the Tenant Allow/Block List
Show answer
Correct answer: C. Copilot Studio sharing controls (Editor and Viewer roles, sharing limits) are set at the managed environment or environment group level in the Power Platform admin center.
Frequently asked questions
How many questions does the AB-650 practice exam have?
The question bank has 303 original questions. Each practice exam draws 50 questions weighted by domain, just like the official exam.
What's the passing score for AB-650?
Microsoft's official AB-650 exam requires a score equivalent to 70% to pass. We use the same threshold in our practice exams so you train under realistic conditions.
What domains does the AB-650 exam cover?
Three domains: configure and manage Microsoft 365 tenants and workloads (20-25%), govern and secure them (40-45%), and manage and secure AI services in Microsoft 365 (35-40%).
Is the AB-650 practice exam free?
Yes, you can practice for free without signing up. Creating a free account adds progress tracking and smart review (SRS); the Pro tier removes daily question limits.
Are these the official Microsoft exam questions?
No. These are original questions written based on Microsoft's official "Skills measured" guide for AB-650, not extracts from the real exam or "exam dumps".