Cheat sheet

AB-900 Copilot Agent Admin Cheat Sheet

M365 Core Services

30-35%of exam

Admin CentersEntra SecurityLicensingZero TrustService Picker

Data Protection + Governance

35-40%of exam

Purview ProtectionDLP + LabelsInsider RiskDSPM for AICompliance Picker

Copilot + Agent Admin

25-30%of exam

Copilot LicensingUsage AnalyticsAgent LifecyclePrompt GovernanceBilling Picker

Quick Facts

Exam
AB-900
Credential
Copilot Agent Admin
Time
60 min
Pass
700/1000
Questions
40-60
Fee
$99 USD
Renewal
Annual free assessment
Vendor
Pearson VUE

Zero Trust

Verify Explicit Least Assume

Verify: identityExplicit: authLeast: privilegeAssume: breach

Entra vs Purview

Entra ID

  • Who signs in
  • MFA + CA
  • Identity

Purview

  • What data does
  • Labels + DLP
  • Compliance

Identity vs data

Admin Center Picker

  1. MailboxesExchange admin
  2. SitesSharePoint admin
  3. Teams policiesTeams admin
  4. Identity rulesEntra admin
  5. CompliancePurview portal
  6. Tenant settingsM365 admin

Exam Facts

AB-900
Copilot admin fundamentalsExam
700/1000
Passing score
60 min
Exam duration
$99
Exam fee
Annual
Renewal required
40-60
Question count
Pearson VUE
Test delivery

AB-900 vs MS-900

AB-900

  • Copilot focus
  • Purview depth
  • Agent admin

MS-900

  • Broad M365
  • General security
  • Service overview

AI admin vs fundamentals

Admin Centers

M365 admin
Tenant hubPortal
Exchange admin
Mailboxes + DLs
SharePoint admin
Sites + libraries
Teams admin
Teams + policies
Entra admin
Identity center
Purview portal
Compliance hub
Power Platform
Agents + flows

Entra + Security

Entra ID
Cloud identity
MFA
Extra factor
SSO
One login
Conditional Access
Risk-based rules
PIM
Just-in-time roles
Zero Trust
Verify explicitly
Secure Score
Security posture
Audit logs
Activity trail

M365 Licensing

Active users
Assign licenses
Licenses + apps
Per-user panel
Billing
Purchase services
Service plans
Feature bundles
Add-on
Extra capability
Copilot Admin
Copilot settings role

Domain Weights

Governance 35-40; Core 30-35; Copilot 25-30

Governance: largestCore: M365 servicesCopilot: agents

Label vs DLP

Sensitivity Label

  • Classify content
  • Encrypt file
  • Visual mark

DLP

  • Detect share
  • Block action
  • Policy rule

Classify vs block

Purview Picker

  1. Classify contentSensitivity labels
  2. Block sharingDLP policy
  3. Risky insiderInsider Risk
  4. Toxic commsComm Compliance
  5. Legal holdeDiscovery
  6. Keep recordsRetention
  7. AI data riskDSPM for AI
  8. OversharingDAG reports

Purview Protection

Sensitivity labels
Classify contentCore
Auto-labeling
Policy applies labels
DLP
Block sensitive share
Encryption
Protect labeled files
Watermark
Visual mark
Trainable classifiers
ML content match
Data classification
Content taxonomy

Purview Stack

Label -> DLP -> Retain -> Audit

Label: classifyDLP: blockRetain: lifecycleAudit: log

Insider Risk vs Comm Compliance

Insider Risk

  • User behavior
  • Risk signals
  • HR + security

Comm Compliance

  • Message content
  • Policy violations
  • Supervision

Behavior vs content

Purview Compliance

Insider Risk
Risky user activity
Comm Compliance
Monitor communications
eDiscovery
Legal hold search
Retention
Keep/delete rules
Records mgmt
Regulatory records
Audit
Unified audit log
DSPM for AI
AI data posture

Copilot Data Access

Microsoft Graph
Copilot data path
Permissions
User can access
Oversharing
Excess access risk
DAG reports
Access governance
SAM
SharePoint advanced
Responsible AI
Ethical AI use
Grounding
Org data context

Governance Tools

Compliance mgr
Compliance score
Policy templates
Prebuilt rules
Alert policies
Trigger alerts
Content explorer
Browse labeled data
Activity explorer
DLP events
Purview roles
Compliance access

Copilot Access

License Graph Permissions Ground

License: userGraph: data pathPermissions: scopeGround: context

Copilot vs Agent

Built-in Copilot

  • Microsoft features
  • M365 apps
  • Prebuilt

Custom Agent

  • User-built
  • Copilot Studio
  • Approval needed

Built-in vs custom

Copilot Picker

  1. Assign accessActive users
  2. Track usageCopilot Analytics
  3. Meter billingPay-as-you-go
  4. Control promptsPrompt mgmt
  5. Build agentCopilot Studio
  6. Approve agentApproval process
  7. Manage agentsPower Platform
  8. Copilot settingsCopilot Admin

Copilot Administration

Copilot license
Per-user monthlyLicense
Pay-as-you-go
Consumption billing
Copilot Analytics
Usage dashboard
Usage report
Active users
Org settings
Tenant Copilot
Web grounding
External web data
Prompt mgmt
Govern prompts

License vs Pay-as-you-go

Monthly License

  • Per user
  • Predictable cost
  • Full access

Pay-as-you-go

  • Consumption
  • Metered billing
  • Flexible scale

Fixed vs metered

Agents + Lifecycle

Built-in Copilot
Microsoft features
Custom agent
User-built agent
Agent approval
Admin review gate
Agent creation
Build in studio
Lifecycle mgmt
Deploy to retire
Power Platform
Agent admin center
Copilot Studio
Build agents

Common Traps

Identity vs data

Entra signs in Purview protects data

Label vs DLP

Labels classify DLP blocks share

Copilot vs agent

Built-in is Microsoft Agents need approval

License vs billing

Assign per user Pay-go is metered

Graph vs admin

Graph is data path Admin assigns access

Global vs Copilot

Global is broad Copilot Admin least privilege

Last Minute

  1. 1.Weights: 35-40 / 30-35 / 25-30
  2. 2.Pass = 700/1000
  3. 3.Renew annually free
  4. 4.Entra = identity; Purview = data
  5. 5.Labels classify; DLP blocks
  6. 6.Copilot uses Microsoft Graph
  7. 7.DSPM for AI = AI posture
  8. 8.Copilot Admin = least privilege
  9. 9.Agents need approval
  10. 10.Pay-go = consumption billing
Same family resources

Explore More Microsoft Certifications

Continue into nearby exams from the same family. Each card keeps practice questions, study guides, flashcards, videos, and articles in one place.