AB-650 practice test

Configuring the tenant: branding, domains, organisational settings including security and privacy, licence management with group-based licensing and consumption billing, licences for Copilot, Agent 365 and Copilot Studio, Microsoft 365 Backup with its setup, restore and monitoring, network connectivity insights, and service health with its notifications. Then the workloads: mailboxes including shared ones, teams with their channels, owners and members, Copilot settings in Teams meetings including transcription, SharePoint sites and permissions, and the SharePoint and OneDrive configuration that decides what Copilot can reach, including advanced management, search and site exclusions.

Identity in Entra: users, guests and external access, groups, roles and privileged identity management, administrative units, contacts and bulk work through Graph PowerShell. Authentication and access: authentication methods, password protection, self-service password reset, investigating sign-in problems, and Conditional Access with identity protection and multifactor authentication. Securing the workloads through Defender for Office: alerts, threat policies and rules, investigation and response, and attack simulation with its training campaigns. Then Purview: data loss prevention across the workloads, endpoints and Copilot, information protection with sensitive information types and sensitivity labels, lifecycle management with retention labels and policies, responding to alerts, and monitoring AI activity through data security posture management.

Microsoft 365 Copilot: assessing tenant and data readiness including leaks and oversharing, web search and Copilot Chat, Copilot Search, the tenant settings covering self-service purchases, admin centre access, release preferences, disclaimers and image generation, user experiences, Cowork, third-party AI providers and Copilot connectors. Agents: identity lifecycle through Entra Agent ID, securing access with packages and Conditional Access, owners, allowed types, sharing, templates, the agent registry with its requests, publishing, blocking and custom uploads, and the tools in Agent 365. Then securing and governing agents through activity monitoring, data protection and compliance gaps, and monitoring the AI services themselves: cost, usage reports by workload, and adoption and health through the Copilot Control System.