As you see, all of the three versions are helpful for you to get the AB-650 certification: the PDF, Software and APP online. So there is another choice for you to purchase the comprehensive version which contains all the three formats, it is the Value Pack. Besides, the price for the Value Pack is quite favorable. And no matter which format of AB-650 study engine you choose, we will give you 24/7 online service and one year's free updates on the AB-650 practice questions.
| Section | Weight | Objectives |
|---|---|---|
| Configure and manage Microsoft 365 tenants and workloads | 20-25% | - Configure and manage a Microsoft 365 tenant
|
| Govern and secure Microsoft 365 tenants and workloads | 40-45% | - Protect data with Microsoft Purview
|
| Manage and secure AI services in Microsoft 365 | 35-40% | - Implement and manage agents and Agent 365
|
Now rest assured that with the Microsoft AB-650 exam questions you will get the updated version of AB-650 exam real questions all the time. You have the option to download updated Microsoft AB-650 Exam Questions up to 12 months from the date of Microsoft AB-650 exam questions purchase.
NEW QUESTION # 81
You have a Microsoft 365 subscription that contains a Microsoft Entra security group named Group1. The subscription has self-service password reset (SSPR) disabled.
You need to pilot SSPR for Group1. The solution must require users to use a mobile app notification to reset their password.
What should you configure in the Password reset settings?
Answer: E
Explanation:
Microsoft Entra self-service password reset (SSPR) allows users to reset their passwords without contacting an administrator or helpdesk. Administrators can configure which authentication methods users must complete to verify their identities.
Option A is correct because Authentication methods controls the verification methods available during password reset, including Microsoft Authenticator push notifications.
In the legacy SSPR configuration, administrators navigate to Microsoft Entra admin center # Entra ID # Password reset # Authentication methods.
The Mobile app notification method allows users to verify their identities by responding to a Microsoft Authenticator notification.
An important configuration consideration is that the legacy SSPR experience supports app notifications when two authentication methods are required for password reset. When only one method is required, the mobile application verification code is supported instead.
To restrict the pilot to Group1, administrators must separately configure Properties, enable SSPR for selected users, and select Group1.
Option B configures administrator-specific password reset requirements. Option C controls SSPR enablement and targeting, but not the authentication method itself. Option D controls registration requirements, and Option E configures password reset notifications.
Current documentation qualification: Microsoft has deprecated management of authentication methods through legacy SSPR policies. For new deployments, administrators should configure Microsoft Authenticator through the centralized Authentication methods policy.
NEW QUESTION # 82
You need to implement the planned change for web search.
Which users can perform the configuration, and which portal should the user use? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Answer Area
Correct Selection
Users
Admin1 only
Portal
The Microsoft 365 Apps admin center
Microsoft 365 provides the Allow web search in Copilot policy to control whether Microsoft 365 Copilot and Microsoft 365 Copilot Chat can retrieve information from public web sources.
First selection: Admin1 only.
According to Microsoft Learn, the Cloud Policy service supports administration by Global Administrators, Office Apps Administrators, and Security Administrators.
In the Contoso scenario:
* Admin1: Global Administrator - authorized to manage Cloud Policy.
* Admin2: AI Administrator - can manage Copilot settings, but this role is not listed among those authorized to manage Cloud Policy configurations.
* Admin3: Privileged Role Administrator - does not have the required Cloud Policy management permissions.
* User1: Eligible for AI Administrator, but eligibility does not grant active administrative permissions.
Therefore, Admin1 is the only administrator explicitly authorized for this configuration.
Second selection: The Microsoft 365 Apps admin center.
Administrators configure web search through Microsoft 365 Apps admin center # Customization # Policy Management.
Create a Cloud Policy configuration and select the following setting:
Allow web search in Copilot
Configure it as:
Disabled in Microsoft Copilot and Microsoft Copilot Chat.
This disables public web search for both experiences, satisfying Contoso ' s requirement to use only Microsoft
365 information sources for Copilot responses.
Microsoft confirms that the Microsoft 365 admin center provides a shortcut to this setting, but the Cloud Policy itself is configured in the Microsoft 365 Apps admin center.
Microsoft References:
* Microsoft Learn - Cloud Policy service and supported administrator roles .
* Microsoft Learn - Manage Copilot settings .
* Microsoft Learn - Manage web search for Copilot and Copilot Chat .
NEW QUESTION # 83
You have a Microsoft 365 subscription that uses Microsoft Defender for Office 365. Standard protection is enabled for all recipients.
The subscription contains a mail-enabled security group named Group1. Group1 contains users that require custom inbound anti-spam actions. A custom anti-spam inbound policy named Policy1 is applied to Group1 and has a priority value of 0.
You discover that email sent to the users in Group1 is evaluated by using the Standard preset security policy instead of Policy1.
You need to ensure that Policy1 is applied to Group1. All other recipients must continue to receive the Standard protection settings.
What should you do?
Answer: B
Explanation:
Microsoft Defender for Office 365 processes email protection policies according to a defined precedence order. When Standard or Strict preset security policies are enabled, they take precedence over custom anti- spam policies.
The general processing order is Strict preset security policy, Standard preset security policy, applicable evaluation policies, custom policies, and finally default protection.
Although Policy1 has priority 0, this value establishes its precedence among custom anti-spam policies only.
It cannot override the Standard preset security policy.
Option A is correct because excluding Group1 from Standard protection prevents the Standard preset security policy from applying to the group ' s members. These users can then be evaluated by Policy1, provided its recipient conditions match.
Administrators can configure this exception through the Microsoft Defender portal or the corresponding preset policy rule settings.
Option B is incorrect because disabling Standard protection would affect all recipients, violating the requirement to preserve Standard protection for other users.
Option C is incorrect because changing Policy1 to priority 1 lowers its precedence among custom policies and does not supersede Standard protection.
Option D is incorrect because adding exceptions to Policy1 does not change the precedence of Standard protection.
Therefore, Group1 must be excluded from the Standard preset security policy.
Microsoft References:
https://learn.microsoft.com/en-us/defender-office-365/preset-security-policies
https://learn.microsoft.com/en-us/defender-office-365/how-policies-and-protections-are-combined
NEW QUESTION # 84
You have a Microsoft 365 subscription that uses Microsoft 365 Backup to protect a Microsoft SharePoint site named Site1.
Site1 has a retention policy that has a preservation lock applied.
You plan to restore Site1 to an earlier restore point by using Microsoft 365 Backup.
You need to perform a full restore of Site1. The solution must keep the preservation lock in effect.
Which restore destination should you use?
Answer: A
Explanation:
Microsoft 365 Backup supports restoring SharePoint sites to an earlier point in time, either by replacing the original site or creating a new site from backup.
Option C is correct because Site1 is protected by a retention policy with Preservation Lock. This prevents administrators from weakening or removing the protected retention configuration.
Microsoft documents that SharePoint sites subject to strict SEC 17a-4(f) preservation requirements cannot undergo an in-place restore that would violate the immutability guarantee.
By selecting Create new sites from backups, administrators restore the complete site to a separate SharePoint URL without replacing the existing protected site.
The original Site1 and its Preservation Lock remain unaffected.
Option A is incorrect because an in-place restore is incompatible with strict preservation requirements.
Option B is incorrect because restoring to a new folder does not provide the requested full SharePoint site restore.
Option D is incorrect because replacing the original site could roll back protected content and metadata, conflicting with the preservation requirement.
Microsoft notes that some less restrictive retention holds permit in-place restores. However, creating a new site is the appropriate approach for maintaining strict preservation guarantees.
Microsoft References:
* Microsoft Learn - Restore data in Microsoft 365 Backup .
* Microsoft Learn - Retention policies and Preservation Lock .
Final answer: C. Create new sites from backups.
NEW QUESTION # 85
You have a Microsoft 365 E5 subscription and use Microsoft Intune for managing mobile devices.
You need to access service health alerts from a mobile phone.
What should you use?
Answer: C
Explanation:
The Microsoft 365 Admin mobile app provides administrators with mobile access to Microsoft 365 administrative functions, including service health monitoring, incident notifications, Message Center updates, and support requests.
Option C is correct because the Microsoft 365 Admin mobile app includes a dedicated Service Health feature that enables administrators to monitor the operational status of Microsoft 365 services directly from a mobile device.
Administrators can view active service incidents, service advisories, outages, and relevant service disruption details.
The app also supports configurable push notifications for service health alerts, enabling administrators to receive timely information about service disruptions without signing in to the web-based Microsoft 365 admin center.
Option A is incorrect because Intune Company Portal provides employees with access to managed corporate applications, device enrollment, and compliance information.
Option B is incorrect because the Intune app focuses on device management and access to organizational resources rather than Microsoft 365 service health monitoring.
Option D is incorrect because Microsoft Authenticator supports multifactor authentication, passwordless sign- in, and authentication approvals. It does not provide Microsoft 365 service health reporting.
Therefore, the Microsoft 365 Admin mobile app is the correct solution.
Microsoft Reference: Microsoft Learn - About the Microsoft 365 admin mobile app .
NEW QUESTION # 86
......
PassTorrent have a professional IT team to do research for practice questions and answers of the Microsoft AB-650 exam certification exam. They provide a very effective training tools and online services for your. If you want to buy PassTorrent products, PassTorrent will provide you with the latest, the best quality and very detailed training materials as well as a very accurate exam practice questions and answers to be fully prepared for you to participate in the Microsoft Certification AB-650 Exam. Safely use the questions provided by PassTorrent's products. Selecting the PassTorrent is equal to be 100% passing the exam.
Updated AB-650 Test Cram: https://www.passtorrent.com/AB-650-latest-torrent.html