Microsoft AB-650 시험을 한번에 합격할수 없을가봐 두려워 하고 계시나요? 이 글을 보고 계신 분이라면 링크를 클릭하여 저희 사이트를 방문해주세요. 저희 사이트에는Microsoft AB-650 시험의 가장 최신 기출문제와 예상문제를 포함하고 있는 Microsoft AB-650덤프자료를 제공해드립니다.덤프에 있는 문제와 답을 완벽하게 기억하시면 가장 빠른 시일내에 가장 적은 투자로 자격증 취득이 가능합니다.
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Manage and secure AI services in Microsoft 365 | 35-40% | - Monitor AI services
|
| Topic 2: Configure and manage Microsoft 365 tenants and workloads | 20-25% | - Configure and manage a Microsoft 365 tenant
|
| Topic 3: Govern and secure Microsoft 365 tenants and workloads | 40-45% | - Manage identities in Microsoft Entra
|
Microsoft인증AB-650시험은 IT인증시험과목중 가장 인기있는 시험입니다. Pass4Test에서는Microsoft인증AB-650시험에 대비한 공부가이드를 발췌하여 IT인사들의 시험공부 고민을 덜어드립니다. Pass4Test에서 발췌한 Microsoft인증AB-650덤프는 실제시험의 모든 범위를 커버하고 있고 모든 시험유형이 포함되어 있어 시험준비 공부의 완벽한 선택입니다.
질문 # 33
You have a Microsoft 365 E5 subscription that contains a group named Group1. Group1 contains an agent named Agent1.
The finance department at your company uses Windows devices onboarded to Microsoft Purview. Microsoft Edge is configured for data loss prevention (DLP), and the Microsoft Purview browser extension is installed for supported non-Microsoft Edge browsers.
Exhibit 1 - DLP Policies
Exhibit 2 - DLP Alerts
The subscription has the DLP policies shown in the following table.
Name
Applies to
Detects
Enforcement behavior
Policy1
Endpoint devices
Credit card numbers or IBAN account numbers
Block prompts to other AI apps when using Microsoft Edge.
Policy2
Endpoint devices and users that have an Adaptive Protection risk level of Elevated Files that have a sensitivity label named Highly Confidential applied or contain U.S. Social Security numbers (SSNs) Block with override for uploads and prompts to other AI apps in supported browsers.
Policy3
Group1
IBAN account numbers in agent-to-human or human-to-agent messages
Audit matching messages in Microsoft Teams and email.
DLP alerts are generated as shown in the following table.
Name
Actor
Risk level
Source
Matched content
Alert1
User1
Elevated
Browser-based AI app file activity
A file labeled as Highly Confidential
Alert2
User2
Minor
Browser-based AI app prompt activity
Prompt text that contains a credit card number
Alert3
Agent1
Not applicable
Agent communication activity
A message that contains an IBAN account number
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
정답：
설명：
Explanation:
Statement
Correct Answer
Policy2 generated Alert1.
Yes
Policy1 generated Alert2.
Yes - assuming the prompt was submitted in Microsoft Edge
Policy1 generated Alert3.
No
Microsoft Purview DLP evaluates sensitive information, user risk levels, protected workloads, and activity types to determine which policies apply.
Statement 1: Yes.
Alert1 involves User1, whose Adaptive Protection risk level is Elevated. The activity involves uploading a file labeled Highly Confidential through a browser-based AI application.
Policy2 targets elevated-risk users and detects files with that sensitivity label. Its Block with override action covers file uploads to supported AI applications. Therefore, Alert1 matches Policy2.
Statement 2: Yes, conditionally.
Alert2 involves User2 submitting a prompt containing a credit card number.
Policy1 detects credit card numbers in prompts submitted to other AI applications through Microsoft Edge.
Unlike Policy2, it does not require an Elevated risk level. User2 ' s Minor risk level therefore does not prevent Policy1 from applying.
However, the exhibit does not confirm which browser User2 used. The intended Yes is valid if the activity occurred in Edge.
Statement 3: No.
Alert3 involves Agent1 communicating a message containing an IBAN account number.
Policy1 applies to endpoint browser prompts, not agent-to-human or human-to-agent communications.
Policy3 specifically audits IBAN-containing agent communications for Group1. Therefore, Alert3 matches Policy3 rather than Policy1.
Microsoft References:
* Microsoft Learn - Prevent sensitive data sharing with AI apps in Microsoft Edge .
* Microsoft Learn - Adaptive Protection in DLP .
* Microsoft Learn - Purview data security and compliance for Agent 365 .
질문 # 34
You have a Microsoft 365 subscription.
You plan to update the EmployeeType attribute for all the users in a group named Contractors. You retrieve the GroupId value of the Contractors group.
You need to use Microsoft Graph PowerShell to retrieve all the Contractors group users and set their EmployeeType attribute to Part-time.
How should you complete the PowerShell script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
정답：
설명：
Explanation:
First dropdown: Get-MgGroupMember; Second dropdown: Update-MgUser; Third dropdown: -UserId Microsoft Graph PowerShell provides cmdlets for managing Microsoft Entra groups and modifying user account attributes. This task requires retrieving members of an existing group and updating the EmployeeType property for each user.
First selection: Get-MgGroupMember. This cmdlet retrieves direct members of the specified Microsoft Entra group. The -GroupId parameter identifies the Contractors group using its unique identifier.
Second selection: Update-MgUser. This cmdlet updates Microsoft Entra user properties through Microsoft Graph. It supports the -EmployeeType parameter, which can be used to assign the value Part-time.
Third selection: -UserId. This parameter identifies the specific user object to modify. The foreach statement processes each returned member and applies the corresponding update.
Technical accuracy note: The video uses $person.ObjectId. Current Microsoft Graph PowerShell documentation normally exposes the member identifier as $person.Id. Additionally, the -All switch should be specified when retrieval of every group member is required across result pages.
A production-oriented implementation would therefore use the following structure, assuming the group contains user objects:
$members = Get-MgGroupMember -GroupId " < GroupId > " -All
foreach ($person in $members) { Update-MgUser -UserId $person.Id -EmployeeType " Part-time " } The three dropdown answers remain correct; this implementation note distinguishes the original examination script from current Microsoft Graph behavior.
Microsoft References:
https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.groups/get-mggroupmember
https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.users/update-mguser
질문 # 35
You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Office 365. Strict protection is enabled for all recipients.
The subscription contains a group named Group1 that contains all the mailboxes for your company's marketing department.
Several marketing department mailboxes recently sent high volumes of external email after a credential was compromised.
You need to enforce a lower external message limit for Group1. The solution must automatically restrict senders that reach the limit.
What should you do?
정답：A
설명：
Microsoft Defender for Office 365 supports outbound spam policies that control sending limits and automatically restrict accounts exhibiting suspicious outbound email activity.
Option A is correct because a custom outbound anti-spam policy can target Group1 specifically, allowing administrators to enforce more restrictive sending limits for marketing department mailboxes without changing the organization-wide configuration.
Administrators can navigate to Microsoft Defender portal # Email & collaboration # Policies & rules # Threat policies # Anti-spam, and create a custom outbound policy.
The policy should include Group1, configure the appropriate external recipient limit, and select Restrict the user from sending mail as the action when a limit is reached.
Option B is incorrect because modifying the default outbound policy would affect other users not covered by a higher-priority custom outbound policy.
Option C is incorrect because Strict preset security policies do not contain configurable outbound spam policies.
Option D is incorrect because Standard preset protection cannot provide a custom outbound sending limit.
Option E is incorrect because inbound anti-spam policies protect incoming email rather than restricting compromised users ' outgoing messages.
Crucially, Microsoft ' s documentation confirms that Strict and Standard preset security policies do not override outbound spam policies. Therefore, the custom outbound policy can apply to Group1 without excluding its members from Strict protection.
Microsoft References:
* Microsoft Learn - Configure outbound spam policies .
* Microsoft Learn - Preset security policies .
질문 # 36
You have a Microsoft 365 subscription that has at least one paid Microsoft 365 Copilot license.
Microsoft 365 Copilot is configured as shown in the following table.
The subscription contains the users shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
정답：
설명：
Explanation:
User2 can enable Copilot image generation for the subscription: Yes; User1 can use Microsoft 365 Copilot in the Exchange admin center: Yes; User3 can buy a Microsoft 365 Copilot license without admin approval: No Original cropped AB-650 video exhibit: AB650 Q28 hotspot.png
Microsoft 365 Copilot administrative controls determine who can manage AI functionality, access Copilot within administrative portals, and purchase licenses independently.
First statement: Yes. User2 holds the AI Administrator role, which provides permission to configure Microsoft Copilot settings, including image generation. An AI Administrator can navigate to the Microsoft
365 admin center, open Copilot settings, and modify the Copilot image generation configuration.
Second statement: Yes. User1 holds the Global Reader role. This is a recognized administrative role that provides read-only access to supported Microsoft 365 administrative portals, including Exchange admin center. Because Copilot in admin centers is configured as Allowed for all admins, User1 can access supported Copilot functionality within the permissions of the role. This does not grant permission to modify Exchange settings.
Third statement: No. The self-service purchasing configuration is Allow trials only. This permits eligible users to start supported trials but prevents them from purchasing Microsoft 365 Copilot licenses independently.
User3 has no administrative role and cannot bypass the purchasing restriction.
Therefore, the correct sequence is Yes, Yes, No.
Microsoft References:
https://learn.microsoft.com/en-us/microsoft-365/copilot/microsoft-365-copilot-page
https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference
질문 # 37
You have a Microsoft 365 E5 subscription that uses Microsoft Exchange. The subscription contains a mail- enabled security group named Group1 and a user named User1.
User1 has a mailbox named Mailbox1 that is 42 GB in size.
User1 is transferred to a new role and will no longer use Mailbox1.
You need to modify Mailbox1 to meet the following requirements:
Preserve access to historical email.
Enable the users in Group1 to open Mailbox1.
Enable the Group1 users to send email messages that appear to be sent from Mailbox1.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
정답：B,D
설명：
Microsoft Exchange Online supports converting an existing user mailbox to a shared mailbox while retaining its historical email content. This is appropriate when the original user no longer needs direct access but other employees must continue using the mailbox.
Option C is correct because converting Mailbox1 into a shared mailbox preserves the existing email messages and enables delegated access for other users.
The mailbox contains 42 GB of data, which is below the standard 50 GB unlicensed shared mailbox limit.
Therefore, an additional mailbox license is not required solely because of its current size, provided no separately licensed features are necessary.
Option B is correct because Full Access permission allows Group1 members to open the mailbox and manage existing items. Send As permission enables them to send messages that appear to originate directly from Mailbox1.
Option E is incorrect because Send on Behalf permission displays the individual delegate ' s identity, whereas the requirement specifies that messages must appear to come from Mailbox1.
Option D is incorrect because Litigation Hold is designed for preservation and compliance purposes, not for providing collaborative mailbox access.
Option A is unnecessary for a standard shared mailbox of this size.
Therefore, converting the mailbox and granting Full Access and Send As permissions satisfies all three requirements.
Microsoft References:
https://learn.microsoft.com/microsoft-365/admin/email/convert-user-mailbox-to-shared-mailbox
https://learn.microsoft.com/en-us/exchange/collaboration/shared-mailboxes/create-shared-mailboxes
질문 # 38
......
Pass4Test사이트에서 제공하는Microsoft 인증AB-650 덤프의 일부 문제와 답을 체험해보세요. 우리 Pass4Test의 를Microsoft 인증AB-650 덤프공부자료를 선택해주신다면 우리는 최선을 다하여 여러분이 꼭 한번에 시험을 패스할 수 있도록 도와드리겠습니다.만약 여러분이 우리의 인증시험 덤프를 보시고 시험이랑 틀려서 패스를 하지 못하였다면 우리는 무조건 덤프비용 전부를 환불해드릴것입니다. Pass4Test제품으로 자격증을 정복합시다!
AB-650시험유효덤프: https://www.pass4test.net/AB-650.html