Holding a certification in a certain field definitely shows that one have a good command of the AB-650 knowledge and professional skills in the related field. However, it is universally accepted that the majority of the candidates for the AB-650 exam are those who do not have enough spare time and are not able to study in the most efficient way. You can just feel rest assured that our AB-650 Exam Questions can help you pass the exam in a short time. With our AB-650 study guide for 20 to 30 hours, you can pass the exam confidently.
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Govern and secure Microsoft 365 tenants and workloads | 40-45% | - Implement and manage authentication and access
|
| Topic 2: Configure and manage Microsoft 365 tenants and workloads | 20-25% | - Configure and manage a Microsoft 365 tenant
|
| Topic 3: Manage and secure AI services in Microsoft 365 | 35-40% | - Enable and manage Microsoft 365 Copilot
|
Nowadays most people are attracted to the Administering Microsoft 365 and AI Services (AB-650) certification and take it seriously because they know that it is the future. But they can't figure out where to prepare for Administering Microsoft 365 and AI Services (AB-650) certification exam. After observing the problems of the students ActualtestPDF provides them with the best Administering Microsoft 365 and AI Services (AB-650) Questions so they don't get depressed anymore and pass the Administering Microsoft 365 and AI Services (AB-650) exam on the first try. The Administering Microsoft 365 and AI Services (AB-650) is designed after consulting with a lot of professionals and getting their reviews.
NEW QUESTION # 51
You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Office 365. Strict protection is enabled for all recipients.
The subscription contains a group named Group1 that contains all the mailboxes for your company ' s marketing department.
Several marketing department mailboxes recently sent high volumes of external email after a credential was compromised.
You need to enforce a lower external message limit for Group1. The solution must automatically restrict senders that reach the limit.
What should you do?
Answer: E
Explanation:
Microsoft Defender for Office 365 uses outbound anti-spam policies to control outgoing email volumes and restrict accounts that exceed configured sending limits.
Option E is correct because a custom outbound anti-spam policy can target Group1 without changing the sending limits for other departments.
Administrators can configure the policy through Microsoft Defender portal # Email & collaboration # Policies
& rules # Threat policies # Anti-spam # Create policy # Outbound.
Select Group1 under the sender conditions, configure a lower Set an external message limit, and select Restrict the user from sending mail as the action when the limit is exceeded. Microsoft will restrict affected senders until an administrator removes the restriction.
Options A and B are incorrect because Standard and Strict preset security policies do not include configurable outbound spam policies. Therefore, Strict protection being enabled for every recipient does not prevent a custom outbound policy from applying.
Option C is incorrect because inbound policies protect incoming email.
Option D is incorrect because the default outbound policy applies across the organization rather than specifically to Group1.
Technical distinction: Microsoft ' s external message limit is based on the number of external recipients per hour, not the number of individual emails sent.
Microsoft References:
* Microsoft Learn - Configure outbound spam policies
* Microsoft Learn - Preset security policies
Final answer: E. Create a custom anti-spam outbound policy.
NEW QUESTION # 52
You have an Azure subscription named Sub1 that contains two resource groups named RG1 and RG2.
RG2 contains virtual machines.
You have a Microsoft 365 subscription. The subscription uses metered pay-as-you-go billing through a policy named BP1 that is linked to RG1.
The finance department at your company uses calendar-month reporting.
You need to compare the current month ' s AI service spending with the previous month, and identify which usage categories contribute to the largest variance.
What should you configure in Microsoft Cost Management? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Scope: RG1; Analysis settings: Cost analysis
Microsoft Cost Management provides cost analysis capabilities for tracking Azure consumption, comparing billing periods, and identifying services responsible for changes in expenditure.
First selection: RG1.
The Copilot pay-as-you-go billing policy BP1 is associated with resource group RG1. Microsoft 365 Copilot usage charges are billed through the connected Azure subscription and resource group.
Selecting RG1 isolates the relevant charges from unrelated Azure resources, including the virtual machines located in RG2.
Although BP1 is the Microsoft 365 billing policy, it is not itself a standard Azure Cost Management scope.
Therefore, RG1 is the correct selection.
Second selection: Cost analysis.
Cost analysis enables administrators to review actual consumption charges over selected time periods, including calendar months.
To investigate month-over-month differences, administrators can compare the current and previous billing months, configure monthly granularity, and group costs by service name, meter, or another supported dimension.
Grouping expenses by meter or service helps identify the usage categories responsible for the largest increases or decreases.
Budgets establish spending thresholds and notifications, while Cost alerts surface configured alerts. Neither provides the required detailed comparison and cost breakdown.
Therefore, RG1 and Cost analysis satisfy the two requirements.
Microsoft References:
https://learn.microsoft.com/en-us/microsoft-365/copilot/pay-as-you-go/setup
https://learn.microsoft.com/en-us/azure/cost-management-billing/costs/customize-cost-analysis-views
NEW QUESTION # 53
You have a Microsoft 365 subscription that contains a Microsoft SharePoint communication site named Site1 and a security group named Group1.
Some users that are outside of Group1 have direct permissions or sharing links to the content in Site1.
You need to ensure that users can access Site1 and its content only when they meet both of the following conditions.
* The user is a member of Group1.
* The user has SharePoint permissions to the content.
The solution must meet the following requirements:
* Apply only to Site1.
* Preserve the existing SharePoint permissions.
* Minimize administrative effort.
What should you do?
Answer: C
Explanation:
Microsoft SharePoint Restricted Access Control (RAC) provides an additional authorization boundary for SharePoint sites. It restricts site and content access to members of designated Microsoft Entra security groups or Microsoft 365 groups while preserving existing SharePoint permissions.
Option C is correct because configuring Restricted Access Control for Site1 and specifying Group1 satisfies both conditions simultaneously. Users must belong to Group1 and already possess appropriate SharePoint permissions. Membership in Group1 alone does not grant access.
Users outside Group1 are denied access even if they have direct permissions or previously received sharing links. Restricted Access Control can be configured for an individual communication site without modifying its existing permission assignments.
Option A is incorrect because sharing restrictions primarily control sharing operations rather than comprehensively enforcing the existing-content access boundary required.
Option B is incorrect because Restricted Content Discovery limits content visibility in organization-wide search and Microsoft 365 Copilot but does not prevent users with existing permissions from directly accessing files.
Option D is incorrect because manually changing SharePoint permissions could achieve access restrictions but would violate the requirement to preserve existing permissions and minimize administrative effort.
Therefore, configuring Restricted Access Control specifically for Site1 is the appropriate solution.
Microsoft Reference: Microsoft Learn - Restrict SharePoint site access .
Topic 1, Contoso Ltd
Contoso, Ltd. is a consulting company that has a main office in San Francisco and a branch office in Dallas.
Existing Environment Microsoft Entra configuration Contoso has an Azure subscription. Contoso has a Microsoft 365 E5 subscription. Contoso has a Microsoft Entra tenant named contoso.com. The tenant has an administrative unit named AU1 that contains the following membership rule. (device.deviceTrustType -eq
"Workplace") and (device.deviceOSType -in ["Windows", "Android"]) The tenant contains the cloud-only users shown in the following table.
The tenant contains the groups shown in the following table.
The tenant contains the devices shown in the following table.
All the devices are managed by using Microsoft Intune. Microsoft Entra authentication methods Contoso contains an Authentication methods policy for Microsoft Authenticator that has the following settings:
Include: Group1 Exclude: Group3 Authentication mode: Passwordless Privileged Identity Management (PIM) configuration Privileged roles are managed by using Privileged Identity Management (PIM). The PIM settings for the AI Administrator role are configured as shown in the following table.
Email configuration Each user has a Microsoft Exchange mailbox. Contoso contains an anti-spam outbound policy named Antispam1 that has the following configurations: Included groups: Group4 Excluded users:
User2 Set an external message limit: 3 Set an internal message limit: 5 Set a daily message limit: 13 Restriction placed on users who reach the message limit: Restrict the user from sending mail Microsoft SharePoint configuration Contoso has a Microsoft SharePoint site named Site1 that stores the following types of content and various other documents: Project documents: All the documents have a project code that includes the letters PR, followed by a dash and nine digits (for example PR-123456789). Proposal documents:
All the documents have a customer ID that includes seven to 10 alphanumerical characters. All the customer IDs are recorded in a Microsoft Excel workbook. Feedback forms: All the documents were created by using the same template. Microsoft AI services Contoso implements the following Microsoft AI services: Microsoft
365 Copilot for selected users Microsoft Foundry agents, including an agent named Agent1 Requirements Planned changes Contoso plans to implement the following changes: Issue new Android devices to the Group1 users. Assign Microsoft 365 Copilot licenses to the users in Group1. Add an additional email address alias for the users in Group4. Create a Conditional Access policy named CAPolicy1 for Group3. Disable web search for Microsoft 365 Copilot and Microsoft 365 Copilot Chat. Create classifiers to identify project documents and proposal documents stored on Site1. Technical requirements Contoso identifies the following technical requirements: The users in Group3 that access Microsoft 365 resources from anonymous IP addresses must complete multifactor authentication (MFA). Microsoft 365 Copilot responses must NOT use content from the project documents stored on Site1. Microsoft 365 Copilot responses must use content from only Microsoft 365 locations. The total costs of Agent1 must be monitored and evaluated monthly. All the Android devices must be registered in Microsoft Entra. Administrative effort must be minimized.
Administrative costs must be minimized.
NEW QUESTION # 54
You have a Microsoft 365 subscription that contains the groups shown in the following table.
You need to provide adoption details for both groups from the last 30 days. The details must include the active users and the prompts of the users from the last 30 days.
Which Microsoft 365 admin center report should you use for each group? To answer, drag the appropriate reports to the correct groups. Each report may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Group1: The Microsoft 365 Copilot usage report; Group2: The Microsoft 365 Copilot Chat usage report Microsoft 365 provides separate reporting capabilities for licensed Copilot functionality and the broadly available Copilot Chat experience.
First selection: Microsoft 365 Copilot usage report.
Group1 contains users assigned Microsoft 365 Copilot licenses who interact with Copilot across Microsoft
365 applications and agents.
The Microsoft 365 Copilot usage report provides adoption and engagement information about these licensed experiences.
It includes enabled users, active users, usage by application, user activity information, and supported prompt- count metrics.
Administrators can use this report to evaluate whether licensed employees are actively using Copilot capabilities.
Second selection: Microsoft 365 Copilot Chat usage report.
Group2 users do not have Microsoft 365 Copilot licenses but use the Copilot Chat experience available through Microsoft 365.
The Copilot Chat usage report tracks conversational AI adoption, including active users, total prompts submitted, average prompts per user, and individual activity trends.
This makes it the appropriate report for measuring engagement among users who rely on Copilot Chat without the paid Copilot license.
The Microsoft 365 apps usage report measures general application usage, while the Copilot readiness report focuses on eligibility and deployment preparation.
Therefore, the licensed group requires the Copilot usage report, while the unlicensed group requires the Copilot Chat usage report.
Reporting clarification: Microsoft ' s current report documentation describes standard 7-, 28-, 90-, and 180- day periods. The video specifies 30 days, but the latest reporting interface may use a 28-day period instead.
Microsoft References:
https://learn.microsoft.com/en-us/microsoft-365/admin/activity-reports/microsoft-365-copilot-usage
https://learn.microsoft.com/en-us/microsoft-365/admin/activity-reports/microsoft-copilot-usage
NEW QUESTION # 55
Your organization uses Microsoft Purview Information Protection and Microsoft Purview Data Loss Prevention (DLP).
Documents containing intellectual property are labeled with a sensitivity label named "Highly Confidential - Project X". Notice that some of these documents are stored without encryption so that legacy line-of-business workflows can parse them.
You need to ensure that Microsoft 365 Copilot never summarizes, references, or uses the content of any file labeled "Highly Confidential - Project X" during user chat interactions, even if the prompting user is the owner of the file.
What should you configure?
Answer: A
Explanation:
Microsoft Purview Data Loss Prevention (DLP) extends policy enforcement directly to Microsoft 365 Copilot and Copilot Chat locations.
Option A is correct because configuring a DLP policy using the "Microsoft 365 Copilot and Copilot Chat" location allows administrators to create a rule condition matching specific sensitivity labels (such as "Highly Confidential - Project X") and apply an action that restricts Copilot from processing or returning results from those files, regardless of whether the file uses encryption or whether the user has read access.
Option B is incorrect because Exchange mail flow rules only govern email in transit and have no effect on how Copilot processes files stored in SharePoint or OneDrive.
Option C is incorrect because retention policies control data deletion and preservation timelines, not AI prompt processing.
Option D is incorrect because Customer Lockbox controls whether Microsoft support engineers can access tenant content during a support ticket, not how Copilot interacts with labeled user files.
Therefore, configuring a DLP policy for the Microsoft 365 Copilot location is the correct approach.
Microsoft References:
[https://learn.microsoft.com/en-us/purview/dlp-microsoft365-copilot-location-learn-about](https://www.google.com/search?q=https://learn.microsoft.com/en-us/purview/dlp-microsoft365-copilot-location-learn-about)
NEW QUESTION # 56
......
Free demo is available for AB-650 training materials, so that you can have a deeper understanding of what you are going to buy. We also recommend you to have a try. In addition, AB-650 training materials are compiled by experienced experts, and they are quite familiar with the exam center, and if you choose us, you can know the latest information for the AB-650 Exam Dumps. We offer you free update for one year after buying AB-650 exam materials from us, and our system will send the latest version to your email automatically. So you just need to check your email, and change the your learning ways in accordance with new changes.
Discount AB-650 Code: https://www.actualtestpdf.com/Microsoft/AB-650-practice-exam-dumps.html