HOTSPOT (Drag and Drop is not supported)For each of the following statements, select Yes if the statement is true. Otherwise, select No.Note: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: YesYes - A site member of a Microsoft SharePoint site can invite users to access the content in the site.A site member of a Microsoft SharePoint site can invite users to access the content in the site.Box 2: YesYes - A site owner of a Microsoft SharePoint site can add Microsoft 365 groups as site members.A SharePoint site owner can add Microsoft 365 (M365) groups to a site to manage permissions efficiently. By adding an M365 Group to the Site Members group, all members of that group gain "Edit" access to the site. This approach leverages existing group memberships, simplifying access management compared to adding individual users.Box 3: YesYes - A site owner of a Microsoft SharePoint site can remove another site owner from the site.A site owner of a Microsoft SharePoint site has the authority to remove another site owner. This is because SharePoint site owners are granted Full Control permissions by default, which includes the ability to manage site membership and permissions for all users, including other owners.
https://it.tufts.edu/guides/microsoft-sharepoint-online-collaboration-platform/transferring-site-ownership
Your organization has a Microsoft 365 subscription.Which two tasks can you perform by using the Exchange admin center? Each correct answer presents part of the solution.Note: Each correct selection is worth one point.
Answer(s): B,C
[B]Mail flow rules (or transport rules) in the Exchange admin center (EAC) for Microsoft 365 allow administrators to manage email flow by setting conditions, exceptions, and actions for messages. They are configured by navigating to Mail flow > Rules, allowing actions such as rejecting, redirecting, encrypting, or adding disclaimers to messages.[C]Shared mailboxes in Microsoft 365 are created via the Exchange admin center (under Recipients > Mailboxes) or the Microsoft 365 admin center (under Teams & Groups).Incorrect:[Not A]Assigning a license to it is typically handled through the Microsoft 365 admin center rather than the EAC.
https://office365itpros.com/2022/11/08/mail-flow-rules-new-eac https://learn.microsoft.com/en-us/microsoft-365/admin/email/about-shared-mailboxes
You are reviewing your company's security policies as part of a Zero Trust strategy.Which statement accurately describes the Zero Trust principles?
Answer(s): B
Zero Trust is a security framework based on the mantra "never trust, always verify," which operates on three core principles: assuming breach, verifying explicitly, and using least-privilege access. It treats all traffic as potentially malicious, requiring strict authentication for every user, device, and connection attempt regardless of location, minimizing the blast radius of potential compromises.Core Principles of Zero TrustAssume Breach: This principle means operating as if an attacker is already present inside the network. This mindset minimizes the "blast radius" of a security incident, limits lateral movement through segmentation, and triggers continuous monitoring to detect anomalies faster.Verify Explicitly: Every access request is authenticated and authorized based on all available data points, including user identity, device health, location, and context. No source or destination is trusted by default, ensuring all traffic is secured.Use Least Privilege Access: Access is restricted to the minimum necessary for users to perform their tasks, utilizing just-in-time (JIT) and just-enough access (JEA) to reduce the attack surface.
https://cloudsecurityalliance.org/articles/trust-model-the-first-step-to-ensure-your-it-network
Your organization has a Microsoft 365 subscription.You need to generate a report that shows the permissions and active sharing links of content stored in Microsoft OneDrive accounts.What should you use?
In a Microsoft 365 subscription, you can use the Audit feature in the Microsoft Defender portal (or MicrosoftPurview compliance portal) to generate a report on permissions and active sharing links for content stored in OneDrive for Business accounts.Note:Microsoft Purview Audit (Historical Sharing Activity)If you need to see who shared something and when, rather than just a list of currently active links, use the Audit tool.Go to the Microsoft Purview portal and navigate to Audit.Set the Date and time range.Under Activities, search for and select Shared file, folder, or site.Filter the Workload to OneDrive.Click Search and then Export the results to a CSV.
https://admindroid.com/how-to-audit-who-granted-onedrive-access-in-microsoft-365
HOTSPOT (Drag and Drop is not supported)Select the answer that correctly completes the sentence.Hot Area:
Box: Microsoft Viva Insights___________ includes signals, such as collaboration history, document relevance, and communications frequency, which influence Microsoft Copilot responses.Microsoft Viva Insights includes and analyzes collaboration history, document relevance, and communication frequency, which act as signals to improve the effectiveness and context of Microsoft 365 Copilot.How Viva Insights Signals Influence Copilot Responses:How Viva Insights Signals Influence Copilot Responses:Contextual Understanding: Viva Insights aggregates data from email, calendar, and Teams chats to provide a deeper understanding of collaboration patterns and employee work styles.Personalization & Memory: Copilot for Microsoft 365 can access these signals to function as an adaptive productivity partner that remembers user preferences, working styles, and project context.Actionable Data: The "Copilot Dashboard" in Viva Insights combines this collaborative data with Copilot adoption, behavior impact, and user sentiment to measure how effectively AI is being used in the organization.Relevance Improvement: By measuring "before and after" behavioral data, Viva Insights helps identify which tools and documents are most relevant, enabling Copilot to prioritize useful information in its responses.
https://techcommunity.microsoft.com/blog/microsoftvivablog/new-ways-microsoft-copilot-and-viva-are- transforming-the-employee-experience/3982293
Box 1: NoNo - Prompts and responses issued by users in Microsoft 365 Copilot are used by Microsoft to train models.For Microsoft 365 Copilot, Microsoft explicitly states that prompts and responses are not used to train the underlying foundation models.Box 2: NoNo - Content retrieved by using Microsoft Graph is used by Microsoft to train models.Data Privacy Principles for Microsoft Graph and AI:No Training on Customer Data: Prompts, responses, and data accessed through Microsoft Graph (such as emails, chats, documents, and meetings) are not used to train foundational Large Language Models (LLMs), including those used by Microsoft 365 Copilot.Box 3: YesYes - Microsoft 365 Copilot honors the security permissions in your Microsoft 365 subscription.It is built on Microsoft 365's existing enterprise-grade security, privacy, and compliance frameworks, ensuring that Copilot only accesses data that individual users are already authorized to view.
https://learn.microsoft.com/en-us/copilot/microsoft-365/microsoft-365-copilot-privacy
Box 1: NoNo - Users can use Microsoft 365 Copilot anonymously.Users cannot use Microsoft 365 Copilot anonymously. Access to Microsoft 365 Copilot requires an authenticated work or school account (Microsoft Entra ID) or a personal Microsoft account with a Copilot Pro subscription.Box 2: YesYes - Administrators can allow self-service purchase of Microsoft 365 Copilot licenses.By default, self-service purchasing is enabled for new products, including Copilot, so admins must proactively disable it if they want to restrict user purchases.Box 3: NoNo - Microsoft 365 Copilot licenses can be assigned to Microsft Entra ID guest users from other organizations.It is not supported to assign Microsoft 365 Copilot licenses to external Microsoft Entra ID guest users.While the Microsoft 365 admin center might technically allow you to physically select and assign a license to a guest account, Microsoft's official documentation explicitly states that this configuration is unsupported.
https://learn.microsoft.com/en-us/microsoft-365/commerce/subscriptions/manage-self-service-purchases- admins https://learn.microsoft.com/en-us/copilot/microsoft-365/microsoft-365-copilot-setup
HOTSPOT (Drag and Drop is not supported)Your company uses Microsoft 365 Copilot pay-as-you-go billing.The company wants greater visibility into Copilot usage costs and the ability to forecast departmental spending.You need to ensure that you can see Copilot costs by department.What should you use? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
Box 1: Microsoft 365 admin centerPortalTo gain visibility into Microsoft 365 Copilot pay-as-you-go costs by department and forecast spending, you should use Billing Policies in the Microsoft 365 admin center.Box 2: A billing policyFeature
https://learn.microsoft.com/en-us/copilot/microsoft-365/pay-as-you-go/overview
Post your Comments and Discuss Microsoft AB-900 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AB-900 content, but please register or login to continue.