Expect plenty of Purview.
Beta test-takers describe the exam leaning heavily on Purview basics, with less on Copilot and agents than the learning path suggests.

Validates foundational knowledge of Microsoft 365 services, data protection and governance, and basic administration of Copilot and agents.
AB-900 tests whether you understand Microsoft 365 objects and security, how Purview protects data used by Copilot, and the basic admin tasks for Copilot and agents. Learn what each tool is for, look around the admin centers, and practise short scenario questions.
Example scenario: A new employee can sign in to Outlook but not to Teams. Which admin center and setting would you check first?
Example scenario: Copilot summarizes a salary spreadsheet for an employee who should not see it. Why did this happen, and what would you fix?
Example scenario: A team wants to try Copilot for a few weeks without buying monthly licences for everyone. Which billing option would you suggest?
Official AB-900 study guide · Skills measured as of October 14, 2026
Choose the best answer from the options, or the stated number of answers when a question asks for more than one.
Copilot shows an employee a document that should be private. What is the most likely cause?
A. Copilot only surfaces content the signed-in user can already open, so the fix is to correct the permissions.
Drag items from a list into the matching places; an item can be used once, more than once or not at all.
Drag each need to the Microsoft Purview feature that meets it. The needs are label a file as confidential, block sharing of card numbers by email, and search mailboxes for a legal case.
Label a file as confidential → Sensitivity labels, block sharing of card numbers by email → Data loss prevention, search mailboxes for a legal case → eDiscovery.
Pick one value from each drop-down list in a block of text or a diagram to complete it.
Select the correct value in each list. To give a user a Copilot licence, open the [Microsoft 365 admin center / Microsoft Purview portal] and assign the licence on the [Licenses / Domains] page.
Microsoft 365 admin center and Licenses. Licences are assigned to users in the admin center.
Sign in to Microsoft Learn with a personal Microsoft account, then schedule AB-900 with Pearson VUE from the certification page. Students and educators can also book through Certiport.
Read the skills list, take the free practice assessment once to see where you stand, then work through the learning path.
Most candidates spend 10–30 hours. Plan for the low end if you already administer Microsoft 365; plan for the high end if Purview, identity or data protection are new to you.
Use the free learning path for coverage, then a short video review. Give Purview extra time; it carries the largest weight.
Look around the admin centers. If you can, open the Microsoft 365, Purview and Copilot admin pages and find each setting in the skills list.
Take Microsoft's free practice assessment to learn the style, then add a second question set for more scenario practice.
Choose the checklist for your test-centre or online appointment.
Breaks are allowed, but the clock keeps running and you cannot go back to questions you saw before the break.
Beta test-takers describe the exam leaning heavily on Purview basics, with less on Copilot and agents than the learning path suggests.
Passers describe conceptual, scenario-based questions that ask why a solution fits, not configuration steps.
One candidate found none of 600+ third-party bank questions on the real exam, and others recommend Microsoft's free materials first.