In the present market you are hard to buy the valid study materials which are used to prepare the AB-650 certification like our AB-650 latest question. Both for the popularity in the domestic and the international market and for the quality itself, other kinds of study materials are incomparable with our AB-650 Test Guide and far inferior to them. Our AB-650 certification tool has their own fixed clients base in the domestic market and have an important share in the international market to attract more and more foreign clients.
| Section | Weight | Objectives |
|---|---|---|
| Implement security, compliance, and governance for AI and Microsoft 365 | 25-30% | - Secure AI-enabled workloads
|
| Manage Microsoft 365 tenant and identity services | 20-25% | - Configure and manage Microsoft 365 tenants
|
| Administer Microsoft 365 Copilot and AI services | 25-30% | - Manage Copilot and AI capabilities
|
| Manage Microsoft 365 workloads | 20-25% | - Manage devices and applications
|
The Microsoft sector is an ever-evolving and rapidly growing industry that is crucial in shaping our lives today. With the growing demand for skilled Microsoft professionals, obtaining Administering Microsoft 365 and AI Services (AB-650) certification exam has become increasingly important for those who are looking to advance their careers and stay competitive in the job market. Individuals who hold Administering Microsoft 365 and AI Services (AB-650) certification exam demonstrate to their employers and clients that they have the knowledge and skills necessary to succeed in the AB-650 exam.
NEW QUESTION # 64
You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint site named site1.
You need to ensure that site1 meets the following requirements:
* Retains all data for 10 years
* Prevents the sharing of data outside the organization
Which two items should you create and apply to site1? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Answer: E,F
Explanation:
Microsoft Purview provides separate capabilities for enforcing data retention requirements and restricting external collaboration in SharePoint Online.
Option A: A retention policy - Correct.
A Microsoft Purview retention policy allows administrators to retain all content in a specified SharePoint site for a defined period.
Configure a retention policy that includes site1 and specify a retention period of 10 years.
Microsoft recommends retention policies when the same retention requirements apply to all content in a SharePoint site. Content remains preserved even when users modify or delete files, subject to retention processing.
Option D: A sensitivity label - Correct.
Microsoft Purview sensitivity labels support site-level protection settings, including SharePoint external sharing restrictions.
Create a sensitivity label scoped to Groups & sites and configure Control external sharing from labeled SharePoint sites # Only people in your organization.
Apply the label to site1 to prevent external sharing at the site level.
Option B is incorrect because DLP generally enforces content-based conditions rather than providing the intended blanket site-level external sharing configuration.
Options C and F are incorrect because retention labels and their publishing policies primarily address item- level retention rather than efficiently retaining all site content.
Option E is incorrect because sensitive information types identify content patterns and do not independently enforce retention or sharing restrictions.
Therefore, a retention policy and a site-level sensitivity label meet both requirements.
Microsoft References:
* Microsoft Learn - Retention policies and retention labels .
* Microsoft Learn - Sensitivity labels for SharePoint sites and Microsoft 365 groups
NEW QUESTION # 65
You have a Microsoft 365 subscription.
You need to meet the following requirements.
Report a Microsoft 365 service issue.
Request help on how to add a new user to a Microsoft Entra tenant.
What should you use in the Microsoft 365 admin center? To answer, drag the appropriate features to the correct requirements. Each feature may be used once, more than once, or not at all. You may need to drag the split b
Answer:
Explanation:
Explanation:
The Microsoft 365 admin center provides dedicated features for reporting service disruptions and requesting technical assistance. The correct selection depends on whether the administrator is reporting an operational service issue or seeking guidance from Microsoft Support.
First selection: Service health.
The Service health dashboard enables administrators to monitor incidents, service degradation, outages, and advisories affecting Microsoft 365 workloads, including Exchange Online, Microsoft Teams, and SharePoint Online.
Administrators can navigate to Health # Service health. If they experience a problem that Microsoft has not reported, they can select Report an issue and submit information about the affected service. Microsoft evaluates these reports and may publish an incident or advisory when a service-side problem is confirmed.
Second selection: New service request.
The New service request feature allows administrators to request assistance from Microsoft Support, including guidance about creating and configuring Microsoft Entra user accounts.
Administrators can navigate to Support # New service request, describe their question, review suggested troubleshooting information, and contact Microsoft Support when additional assistance is required.
Message center publishes service announcements and planned changes, while Product feedback collects suggestions and feedback about Microsoft products. Neither is the most appropriate option for the stated requirements.
Therefore, Service health and New service request are the correct selections.
Microsoft References:
* Microsoft Learn - How to check Microsoft 365 service health .
* Microsoft Learn - Get support for Microsoft 365 for business .
NEW QUESTION # 66
Your network contains an on-premises Active Directory Domain Services (AD DS) domain.
You have a Microsoft 365 subscription that syncs with the domain. The subscription has Microsoft Entra Password Protection configured, and the on-premises Microsoft Entra Password Protection components are deployed to the domain.
You need to prevent password changes that contain internal product names.
What should you do?
Answer: B
Explanation:
Microsoft Entra Password Protection protects users against weak and predictable passwords through two mechanisms: the Microsoft-managed global banned password list and an organization-defined custom banned password list.
Option C is correct because the custom banned password list is specifically designed to detect organization- specific terms, including internal product names, company names, brands, locations, and common abbreviations.
Administrators can configure the list through Microsoft Entra admin center # Entra ID # Authentication methods # Password protection.
Set Enforce custom list to Yes and add the internal product names, one entry per line.
Microsoft Entra evaluates password changes against the combined global and custom banned password lists.
Its matching algorithm also considers common character substitutions and variations.
Because the scenario confirms that the on-premises Password Protection components are already deployed, the domain controller agents can enforce these policies during password changes and resets, provided enforcement mode is enabled.
Option A is incorrect because passwordless authentication does not configure banned password detection.
Option B is incorrect because password writeback controls synchronization of password changes from the cloud to on-premises AD DS.
Option D is incorrect because fine-grained password policies cannot define arbitrary banned product-name patterns.
Option E is incorrect because smart lockout protects against repeated failed sign-in attempts, not weak password selection.
Microsoft References:
* Microsoft Learn - Password protection in Microsoft Entra ID .
* Microsoft Learn - Configure custom banned passwords .
NEW QUESTION # 67
You have a Microsoft 365 subscription that contains 1,000 Microsoft SharePoint sites, including a site named Site1 that contains confidential files.
Users are assigned Microsoft 365 Copilot licenses and use Microsoft 365 Copilot Search.
You need to prevent the files in Site1 from appearing in organization-wide search and Microsoft 365 Copilot responses. The solution must NOT affect search results from other SharePoint sites.
Which should you configure?
Answer: C
Explanation:
Microsoft SharePoint Restricted Content Discovery (RCD) provides a site-specific mechanism for limiting how SharePoint content appears in organization-wide Microsoft 365 search and Microsoft 365 Copilot experiences.
Option B is correct because the administrator can apply Restricted Content Discovery directly to Site1 without modifying the search behavior of the other 999 SharePoint sites.
When RCD is enabled for Site1, its content is generally excluded from organization-wide discovery experiences and Copilot responses. This reduces the risk of confidential documents appearing in broad search results.
Restricted Content Discovery does not modify existing SharePoint permissions or remove files from the Microsoft 365 search index.
Option A is incorrect because Restricted SharePoint Search uses a tenant-wide allowlist approach and can affect search results across many SharePoint sites. Microsoft also began blocking new enablement of that feature on July 31, 2026.
Option C is incorrect because Copilot connectors integrate external data sources rather than restrict the discovery of existing SharePoint content.
Option D is incorrect because Microsoft Search bookmarks promote selected resources rather than restrict document discoverability.
Implementation qualification: Microsoft documents exceptions for content users own or have recently interacted with. RCD is not an absolute security boundary. If all access must be prevented, SharePoint permissions or Restricted Access Control must also be considered.
Microsoft References:
https://learn.microsoft.com/en-us/sharepoint/restricted-content-discovery
https://learn.microsoft.com/en-us/sharepoint/restricted-sharepoint-search
NEW QUESTION # 68
You have a Microsoft 365 subscription that uses B2B collaboration in Microsoft Entra ID.
Member users can invite guest users, and teams collaborate with external users from multiple partner domains.
You plan to limit future guest invitations to two domains named fabrikam.com and adatum.com, while keeping the existing guest accounts in the subscription.
You need to enforce the domain restriction for new guest invitations across the subscription.
What should you configure?
Answer: A
Explanation:
Microsoft Entra External ID provides External collaboration settings to control B2B guest invitations across an entire tenant, including restrictions based on external email domains.
Option D is correct because administrators can configure an allowlist that permits new guest invitations only for specified partner domains.
Navigate to Microsoft Entra admin center # Entra ID # External Identities # External collaboration settings.
Under Collaboration restrictions, select Allow invitations only to the specified domains, and add:
* fabrikam.com
* adatum.com
Save the configuration to prevent future B2B invitations to other domains.
Microsoft confirms that these restrictions do not affect existing guest users who have already redeemed their invitations. However, pending invitations to newly blocked domains might fail during redemption.
Option A is incorrect because cross-tenant access settings primarily govern inbound and outbound B2B authentication and organizational access relationships.
Option B is incorrect because SharePoint external sharing settings apply to SharePoint and OneDrive sharing rather than providing the requested tenant-wide B2B invitation restrictions.
Option C is incorrect because Conditional Access evaluates sign-in conditions and access requirements rather than restricting guest invitations by email domain.
Therefore, External collaboration settings satisfy both the domain restriction and existing-account preservation requirements.
Microsoft References:
* Microsoft Learn - Allow or block B2B collaboration invitations .
* Microsoft Learn - Configure external collaboration settings .
Final answer: D. External collaboration settings.
NEW QUESTION # 69
......
Our AB-650 training materials are famous for instant access to download. You can receive your downloading link and password within ten minutes, so that you can start your learning as early as possible. In order to build up your confidence for AB-650 exam materials, we are pass guarantee and money back guarantee, and if you fail to pass the exam, we will give you full refund. In addition, AB-650 test materials cover most of knowledge points for the exam, therefore you can mater the major points for the exam as well as improve your professional ability in the process of learning.
Trustworthy AB-650 Exam Content: https://www.dumpsvalid.com/AB-650-still-valid-exam.html