We can guarantee that you are able not only to enjoy the pleasure of study but also obtain your Microsoft AB-650 certification successfully, which can be seen as killing two birds with one stone. And you will be surprised to find our superiorities of our Microsoft AB-650 Exam questioms than the other vendors.
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Administer Microsoft 365 Copilot and AI services | 25-30% | - Prepare Microsoft 365 for AI
|
| Topic 2: Manage Microsoft 365 workloads | 20-25% | - Manage devices and applications
|
| Topic 3: Manage Microsoft 365 tenant and identity services | 20-25% | - Configure and manage Microsoft 365 tenants
|
| Topic 4: Implement security, compliance, and governance for AI and Microsoft 365 | 25-30% | - Protect organizational data
|
>> New AB-650 Study Materials <<
These Administering Microsoft 365 and AI Services (AB-650) mock tests will give you real AB-650 exam experience. This feature will boost your confidence when taking the Administering Microsoft 365 and AI Services (AB-650) certification exam. The 24/7 support system has been made for you so you don't feel difficulty while using the product. In addition, we offer free demos and up to 1 year of free Microsoft Dumps updates. Buy It Now!
NEW QUESTION # 94
You have a Microsoft 365 subscription that uses Microsoft Defender for Office 365 Plan 2.
You need to configure automated investigation and response (AIR) to specify which types of message clusters to remediate automatically without approval from the security team.
Which remediation action should you use?
Answer: C
Explanation:
Microsoft Defender for Office 365 Plan 2 provides Automated Investigation and Response (AIR) capabilities to investigate malicious email messages and recommend or execute remediation actions.
Option D is correct because Microsoft explicitly identifies Soft delete as the only available remediation action when configuring automatic remediation for AIR message clusters.
By default, AIR remediation actions require approval from the Security Operations (SecOps) team. However, administrators can enable automatic remediation for selected message cluster types, allowing malicious messages to be remediated without manual approval.
Administrators can configure this feature in the Microsoft Defender portal by navigating to Settings # Email
& collaboration # MDO automation settings.
The Message clusters section supports three categories:
* Similar files
* Similar URLs
* Multiple similar attributes
Under Remediation action, administrators select Soft delete. AIR then automatically removes qualifying malicious messages from user mailboxes without requiring SecOps approval.
Soft deletion moves messages into the Recoverable Items structure, allowing recovery according to applicable mailbox retention settings.
Option A moves messages to Deleted Items, while Option B moves them to Junk Email. Neither is supported as the configurable automatic AIR remediation action.
Option C permanently removes messages and is not supported for this automatic remediation configuration.
Microsoft also specifies that clusters containing more than 10,000 messages require manual review rather than automatic remediation.
Therefore, Soft delete is the only correct option.
NEW QUESTION # 95
You have a Microsoft 365 subscription that contains a Microsoft SharePoint site named Site1. Site1 has the files shown in the following table.
For Site1, users are assigned the roles shown in the following table.
You create a data loss prevention (DLP) policy named Policy1 that contains a rule as shown in the following exhibit.
[The closing instruction below the long DLP exhibit is not fully visible in the recording. The answer area asks for the number of files accessible to each user.] AB650 Q40 files and roles recovered
How many files can be accessed by User1 and User2 after Policy1 is applied to Site1? To answer, select the appropriate options in the answer area.
Answer:
Explanation:
Explanation:
User1: 5; User2: 2
Microsoft Purview Data Loss Prevention policies identify sensitive information and enforce access restrictions according to configured rule conditions and actions.
The DLP rule in this scenario detects the IP Address sensitive information type at High confidence, requiring at least two instances.
Therefore, files containing fewer than two qualifying IP addresses do not match the condition. Supported files containing two or more qualifying IP addresses are subject to the configured restrictions.
The rule uses Restrict access or encrypt the content in Microsoft 365 locations, with Block everyone selected.
Microsoft documents that this action retains access for the content owner, last modifier, and primary site administrator. Consequently, User1, as Site1 owner, can access all five files.
User2 is a Visitor and does not receive those exemptions. Under the intended scenario, User2 can access File1.
docx, which contains only one IP address, and File4.bmp, whose image content is not scanned by the ordinary text-based DLP condition.
The other three files satisfy the sensitive-information threshold and are blocked.
Technical qualification: Microsoft Purview also supports optional OCR scanning for image files. If OCR is enabled for SharePoint and the bitmap ' s content qualifies, File4.bmp could also be restricted. The answer 5 and 2 assumes OCR is not enabled.
Microsoft References:
https://learn.microsoft.com/en-us/purview/dlp-policy-reference
https://learn.microsoft.com/en-us/purview/ocr-learn-about
NEW QUESTION # 96
You have a Microsoft 365 subscription.
You have a data loss prevention (DLP) policy that blocks sensitive data from being shared in email messages.
You need to modify the policy so that when an email message containing sensitive data is sent to both external and internal recipients, the message is only prevented from being delivered to the external recipients.
What should you modify?
Answer: B
Explanation:
Microsoft Purview Data Loss Prevention (DLP) enables administrators to control how sensitive information is shared through Exchange Online, SharePoint, OneDrive, and other Microsoft 365 services.
Option C is correct because DLP rule actions determine how Microsoft 365 handles content that matches configured sensitive information conditions.
To restrict only external recipients, administrators should modify the rule ' s Restrict access or encrypt the content in Microsoft 365 locations action.
For Exchange email, configure:
Block only people outside your organization.
This action is designed to prevent external recipients from receiving protected email while preserving internal delivery where supported.
Option A is incorrect because the policy already protects Exchange email. Changing locations would not provide the required recipient-specific enforcement.
Option B is incorrect because conditions determine when a DLP rule matches content, rather than what happens to a message after detection.
Option D is incorrect because exceptions exclude matching content from policy processing instead of defining how individual recipients are blocked.
Important consideration: Microsoft documents that enabled DLP policy tips can prevent users from sending messages containing both internal and external recipients until they remove the external recipients. Therefore, this action does not guarantee transparent delivery splitting in every client.
Microsoft Reference: Microsoft Learn - Data Loss Prevention policy reference .
NEW QUESTION # 97
You have a Microsoft 365 subscription that uses B2B collaboration in Microsoft Entra ID.
Member users can invite guest users, and teams collaborate with external users from multiple partner domains.
You plan to limit future guest invitations to two domains named fabrikam.com and adatum.com, while keeping the existing guest accounts in the subscription.
You need to enforce the domain restriction for new guest invitations across the subscription.
What should you configure?
Answer: B
Explanation:
Microsoft Entra External ID provides External collaboration settings to control B2B guest invitations across an entire tenant, including restrictions based on external email domains.
Option D is correct because administrators can configure an allowlist that permits new guest invitations only for specified partner domains.
Navigate to Microsoft Entra admin center # Entra ID # External Identities # External collaboration settings.
Under Collaboration restrictions, select Allow invitations only to the specified domains, and add:
* fabrikam.com
* adatum.com
Save the configuration to prevent future B2B invitations to other domains.
Microsoft confirms that these restrictions do not affect existing guest users who have already redeemed their invitations. However, pending invitations to newly blocked domains might fail during redemption.
Option A is incorrect because cross-tenant access settings primarily govern inbound and outbound B2B authentication and organizational access relationships.
Option B is incorrect because SharePoint external sharing settings apply to SharePoint and OneDrive sharing rather than providing the requested tenant-wide B2B invitation restrictions.
Option C is incorrect because Conditional Access evaluates sign-in conditions and access requirements rather than restricting guest invitations by email domain.
Therefore, External collaboration settings satisfy both the domain restriction and existing-account preservation requirements.
Microsoft References:
* Microsoft Learn - Allow or block B2B collaboration invitations .
* Microsoft Learn - Configure external collaboration settings .
Final answer: D. External collaboration settings.
NEW QUESTION # 98
You have a Microsoft 365 E5 subscription that contains the users shown in the following table.
The subscription has the following two anti-spam policies:
AntiSpam1
* Name: AntiSpam1
* Priority: 0
* Include these users, groups and domains
* Users: User3
* Groups: Group1
Exclude these users, groups and domains
* Groups: Group2
Message limits
* Set a daily message limit: 100
AntiSpam2
* Name: AntiSpam2
* Priority: 1
* Include these users, groups and domains
* Users: User1
* Groups: Group2
Exclude these users, groups and domains
* Users: User3
Message limits
* Set a daily message limit: 50
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Microsoft Defender for Office 365 evaluates custom outbound anti-spam policies according to policy priority, inclusion conditions, and exclusions.
Microsoft documents two important evaluation rules:
* Different inclusion condition types, such as Users and Groups, use AND logic.
* Exclusions override inclusions, and the first applicable policy takes precedence.
Statement 1: No.
User1 belongs to Group1 but is not the explicitly specified user (User3) in AntiSpam1. User1 is specified in AntiSpam2 but does not belong to Group2. Therefore, neither custom policy applies. The limits cannot be combined to produce 150.
Statement 2: No.
User2 belongs to both Group1 and Group2. However, AntiSpam1 specifies User3 and Group1 as combined inclusion conditions, and additionally excludes Group2. AntiSpam2 specifies User1 and Group2 as combined inclusion conditions. User2 does not satisfy either policy ' s complete requirements.
Statement 3: No.
User3 is explicitly included in AntiSpam1 but does not belong to Group1. User3 also belongs to the excluded Group2. AntiSpam2 explicitly excludes User3. Consequently, neither custom policy imposes the stated 100- recipient daily limit on User3.
All three users fall back to the default outbound anti-spam policy.
Technical clarification: Microsoft defines the daily message limit in outbound anti-spam policies as a maximum number of recipients per day, not necessarily the number of email messages.
Microsoft Reference: Microsoft Learn - Configure outbound spam policies, recipient conditions, and policy precedence .
NEW QUESTION # 99
......
Furthermore, after acquiring our Administering Microsoft 365 and AI Services AB-650 Exam Questions preparation material, you will receive free updates for 365 days. ValidTorrent provides up-to-date Administering Microsoft 365 and AI Services exam questions, latest test dumps demo and latest test experience will make you success in your career. And price is affordable.
AB-650 Exam Online: https://www.validtorrent.com/AB-650-valid-exam-torrent.html