私たちは、このキャリアの中で、10年以上にわたりプロとしてAB-650練習資料を作りました。AB-650練習資料が最も全面的な参考書です。 そして、私たちは十分な耐久力を持って、ずっとAB-650練習資料の研究に取り組んでいます。私たちのAB-650練習資料を利用したら、AB-650試験に合格した人がかなり多いです。だから、弊社のAB-650練習資料を早く購入しましょう！
| Section | Weight | Objectives |
|---|---|---|
| Manage and secure AI services in Microsoft 365 | 35-40% | - Enable and manage Microsoft 365 Copilot
|
| Govern and secure Microsoft 365 tenants and workloads | 40-45% | - Secure Microsoft 365 workloads
|
| Configure and manage Microsoft 365 tenants and workloads | 20-25% | - Configure and manage a Microsoft 365 tenant
|
我々JPNTestのAB-650問題集はあなたの発展に大助けを提供することができます。AB-650試験に合格したら、あなたがより良く就職し輝かしい未来を持っています。この試験が非常に困難ですが、実は試験を準備するとき、もっと楽になることができます。我々のMicrosoftのAB-650問題集を利用してから、あなたは短い時間でリラクスで試験に合格することができます。
質問 # 62
You have a Microsoft 365 subscription that uses Microsoft 365 Copilot. The subscription contains a SharePoint site named Site1 and a security group named Group1.
Site1 contains sensitive project documents. Some users that are outside of Group1 have direct permissions or sharing links to the documents in Site1.
You need to ensure that only the users in Group1 can open the Site1 documents. The solution must meet the following requirements:
The Group1 users must require existing SharePoint permissions to access the documents.
Authorized users must continue to access the documents by using Microsoft 365 Copilot.
Existing SharePoint permissions must be preserved.
What should you configure?
正解：C
解説：
Microsoft SharePoint Restricted Access Control enables administrators to restrict access to a SharePoint site and its content to members of designated Microsoft Entra security groups or Microsoft 365 groups.
Option B is correct because Restricted Access Control adds an additional authorization requirement without replacing the site ' s existing SharePoint permissions.
When Group1 is configured as the restricted access control group for Site1, users must satisfy two conditions before accessing its documents: they must belong to Group1 and possess appropriate existing SharePoint permissions.
Users outside Group1 are denied access even when they previously received direct permissions or sharing links.
This protection also applies to Microsoft 365 Copilot and organization-wide search experiences. Microsoft Copilot respects the effective SharePoint authorization boundaries, preventing unauthorized users from accessing restricted content through Copilot responses.
Option A is incorrect because Microsoft 365 Archive is intended for inactive content storage rather than enforcing group-based authorization.
Option C is incorrect because Restricted SharePoint Search controls content discoverability, not the underlying ability to open files.
Option D is incorrect because Restricted Content Discovery limits search and Copilot discovery without enforcing the required group-based access restrictions.
Restricted Access Control therefore satisfies the complete requirement while preserving the existing permission structure.
Microsoft References:
https://learn.microsoft.com/en-us/sharepoint/restricted-access-control
質問 # 63
You have a Microsoft 365 subscription.
A user named user1@contoso.com was recently provisioned.
You need to use PowerShell to assign a Microsoft 365 E3 license to User1. Microsoft Bookings must NOT be enabled.
How should you complete the command? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正解：
解説：
Explanation:
First dropdown: Connect-MgGraph; Second dropdown: Get-MgSubscribedSku; Third dropdown: Set- MgUserLicense Microsoft Graph PowerShell provides commands for connecting to Microsoft Graph, retrieving subscribed license products, and assigning licenses with individual service plans disabled.
First selection: Connect-MgGraph. This command establishes an authenticated Microsoft Graph PowerShell session using delegated permissions. Appropriate licensing administration permissions must be available to the signed-in administrator.
Second selection: Get-MgSubscribedSku. This command retrieves the subscribed licensing SKUs and their associated service plans. The required product is identified through its SKU part number, and its service plans can be examined to locate Microsoft Bookings.
Third selection: Set-MgUserLicense. This cmdlet assigns or removes licenses for a specified user.
Administrators can use the -AddLicenses parameter to provide a license configuration containing the intended SKU identifier and disabled service-plan identifiers.
Important technical corrections: The original exhibit filters on EnterprisePack, which identifies Office 365 E3, whereas Microsoft 365 E3 ordinarily uses SPE_E3. The exhibited script also uses Select -ExcludeProperty ServicePlanID; to build a valid disabled-plan identifier collection, Microsoft documents Select - ExpandProperty ServicePlanId.
The three dropdown choices are correct, but these additional corrections are required if the script is to assign Microsoft 365 E3 and disable Bookings reliably in production.
Microsoft References:
https://learn.microsoft.com/en-us/microsoft-365/enterprise/assign-licenses-to-user-accounts-with-microsoft-365-powershell
質問 # 64
You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Office 365. Strict protection is enabled for all recipients.
The subscription contains a group named Group1 that contains all the mailboxes for your company ' s marketing department.
Several marketing department mailboxes recently sent high volumes of external email after a credential was compromised.
You need to enforce a lower external message limit for Group1. The solution must automatically restrict senders that reach the limit.
What should you do?
正解：A
解説：
Microsoft Defender for Office 365 uses outbound anti-spam policies to control outgoing email volumes and restrict accounts that exceed configured sending limits.
Option E is correct because a custom outbound anti-spam policy can target Group1 without changing the sending limits for other departments.
Administrators can configure the policy through Microsoft Defender portal # Email & collaboration # Policies
& rules # Threat policies # Anti-spam # Create policy # Outbound.
Select Group1 under the sender conditions, configure a lower Set an external message limit, and select Restrict the user from sending mail as the action when the limit is exceeded. Microsoft will restrict affected senders until an administrator removes the restriction.
Options A and B are incorrect because Standard and Strict preset security policies do not include configurable outbound spam policies. Therefore, Strict protection being enabled for every recipient does not prevent a custom outbound policy from applying.
Option C is incorrect because inbound policies protect incoming email.
Option D is incorrect because the default outbound policy applies across the organization rather than specifically to Group1.
Technical distinction: Microsoft ' s external message limit is based on the number of external recipients per hour, not the number of individual emails sent.
Microsoft References:
* Microsoft Learn - Configure outbound spam policies
* Microsoft Learn - Preset security policies
Final answer: E. Create a custom anti-spam outbound policy.
質問 # 65
You have a Microsoft 365 E5 subscription that contains customer financial files. The files have a sensitivity label named Confidential applied.
You need to review Microsoft 365 Copilot interactions that reference the financial files and identify users that referenced the files. The solution must minimize administrative effort.
What should you use?
正解：A
解説：
Microsoft Purview Data Security Posture Management (DSPM) provides centralized visibility into sensitive information and its use across Microsoft 365 workloads, including interactions with Microsoft 365 Copilot.
DSPM includes reporting and investigation capabilities that help administrators understand how users interact with organizational information through AI applications.
The AI activity exploration capabilities provide information about Copilot interactions, including associated users, referenced files, sensitivity labels, and potentially sensitive information.
Because the financial files are classified with the Confidential sensitivity label, administrators can investigate activity involving labeled content and determine which users referenced sensitive organizational files during Copilot interactions.
DSPM minimizes administrative effort by providing predefined dashboards, reports, and integrated investigation workflows instead of requiring administrators to construct individual audit searches.
Option A is incorrect because Microsoft Entra audit logs primarily record identity and directory administrative activities, rather than providing detailed Copilot file-reference investigations.
Option C is incorrect because Content explorer identifies and examines classified organizational content. It is not the primary solution for correlating Copilot interactions with users and referenced files.
Option D is incorrect because Data Lifecycle Management manages retention and deletion requirements rather than providing dedicated AI interaction monitoring.
Therefore, Data Security Posture Management is the appropriate solution.
Microsoft References:
https://learn.microsoft.com/en-us/purview/data-security-posture-management-learn-about
https://learn.microsoft.com/en-us/purview/ai-m365-copilot
質問 # 66
You have a Microsoft 365 subscription that contains 1,000 Microsoft SharePoint sites, including a site named Site1 that contains confidential files.
Users are assigned Microsoft 365 Copilot licenses and use Microsoft 365 Copilot Search.
You need to prevent the files in Site1 from appearing in organization-wide search and Microsoft 365 Copilot responses. The solution must NOT affect search results from other SharePoint sites.
Which should you configure?
正解：B
解説：
Microsoft SharePoint Restricted Content Discovery (RCD) provides a site-specific mechanism for limiting how SharePoint content appears in organization-wide Microsoft 365 search and Microsoft 365 Copilot experiences.
Option B is correct because the administrator can apply Restricted Content Discovery directly to Site1 without modifying the search behavior of the other 999 SharePoint sites.
When RCD is enabled for Site1, its content is generally excluded from organization-wide discovery experiences and Copilot responses. This reduces the risk of confidential documents appearing in broad search results.
Restricted Content Discovery does not modify existing SharePoint permissions or remove files from the Microsoft 365 search index.
Option A is incorrect because Restricted SharePoint Search uses a tenant-wide allowlist approach and can affect search results across many SharePoint sites. Microsoft also began blocking new enablement of that feature on July 31, 2026.
Option C is incorrect because Copilot connectors integrate external data sources rather than restrict the discovery of existing SharePoint content.
Option D is incorrect because Microsoft Search bookmarks promote selected resources rather than restrict document discoverability.
Implementation qualification: Microsoft documents exceptions for content users own or have recently interacted with. RCD is not an absolute security boundary. If all access must be prevented, SharePoint permissions or Restricted Access Control must also be considered.
Microsoft References:
https://learn.microsoft.com/en-us/sharepoint/restricted-content-discovery
https://learn.microsoft.com/en-us/sharepoint/restricted-sharepoint-search
質問 # 67
......
AB-650テストトレントは高品質で、主に合格率に反映されます。 AB-650テストトレントは、過去数年間の試験問題と業界動向に基づいて、業界の専門家によって慎重に編集されています。さらに重要なことは、時間の変化に基づいてAB-650試験資料を速やかに更新し、タイムリーに送信することです。教材を使用している人の99％が試験に合格し、証明書に合格しています。これは、間違いなく、AB-650テストトレントの合格率が99％であることを示しています。
AB-650ダウンロード: https://www.jpntest.com/shiken/AB-650-mondaishu