Now it is a society of abundant capable people, and there are still a lot of industry is lack of talent, such as the IT industry is quite lack of technical talents. Microsoft certification AB-650 exam is one of testing IT technology certification exams. TestKingFree is a website which provide you a training about Microsoft Certification AB-650 Exam related technical knowledge.
| Section | Objectives |
|---|---|
| Topic 1: Manage Microsoft 365 security, compliance, and governance | - Implement compliance and data governance
|
| Topic 2: Manage Microsoft 365 tenant administration | - Manage Microsoft 365 users, groups, and roles
|
| Topic 3: Administer Microsoft 365 Copilot and AI services | - Manage AI agents and AI-powered services
|
| Topic 4: Manage Microsoft 365 workloads and collaboration services | - Administer Microsoft Teams
|
>> Exam Sample AB-650 Questions <<
Our AB-650 research materials are widely known throughout the education market. Almost all the candidates who are ready for the qualifying examination know our products. Even when they find that their classmates or colleagues are preparing a AB-650 exam, they will introduce our study materials to you. So, our learning materials help users to be assured of the AB-650 Exam. Currently, my company has introduced a variety of learning materials, covering almost all the official certification of qualification exams, and each AB-650 learning materials in our online store before the listing, are subject to stringent quality checks within the company.
NEW QUESTION # 26
You have a Microsoft 365 E5 subscription that contains a user named User1.
You need to perform the following actions:
* Create a shared mailbox named Mbox1 in the subscription.
* Grant User1 the Send As permission for Mbox1.
Which Microsoft 365 portals can you use to perform each task? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Microsoft Exchange Online supports shared mailbox creation and delegated mailbox permission management through both the Microsoft 365 admin center and Exchange admin center (EAC).
First selection: Exchange admin center and Microsoft 365 admin center only.
Administrators can create shared mailboxes through either administrative interface.
In the Microsoft 365 admin center, navigate to Teams & groups # Shared mailboxes # Add a shared mailbox.
Alternatively, in the Exchange admin center, navigate to Recipients # Mailboxes # Add a shared mailbox.
Both interfaces support creating Mbox1 and configuring its basic mailbox properties.
Second selection: Exchange admin center and Microsoft 365 admin center only.
Both portals support granting Send As permissions.
In the Microsoft 365 admin center, select Mbox1 under Shared mailboxes and open Manage mailbox permissions.
In the Exchange admin center, select Mbox1 under Recipients, open Manage mailbox delegation, and configure Send As permissions for User1.
The Send As permission enables User1 to send messages that appear to originate directly from Mbox1 without displaying User1 as the sender.
The Microsoft Entra admin center manages identity objects, roles, groups, and authentication settings. It does not provide the Exchange mailbox creation and mailbox delegation interfaces required by this question.
Therefore, both tasks can be performed through the Exchange admin center and Microsoft 365 admin center.
Microsoft References:
* Microsoft Learn - Shared mailboxes in Exchange Online .
* Microsoft Learn - Create a shared mailbox .
* Microsoft Learn - Configure shared mailbox permissions
NEW QUESTION # 27
You have a Microsoft 365 E5 subscription that has an accepted domain named contoso.com.
You need to ensure that the message headers of emails sent from Microsoft Exchange are signed digitally.
What should you configure?
Answer: C
Explanation:
DomainKeys Identified Mail (DKIM) is an email authentication mechanism that uses public-key cryptography to digitally sign outgoing email messages. It enables receiving mail systems to verify that signed message headers and the message body have not been modified after signing.
When DKIM is configured for the accepted domain contoso.com, Exchange Online signs outbound messages using a private key. The receiving mail server retrieves the corresponding public key through DNS and verifies the DKIM signature.
The signature is included in the email ' s DKIM-Signature header, which contains information identifying the signing domain, cryptographic algorithm, and signed message components.
For custom domains in Microsoft 365, administrators typically configure the required DNS CNAME records and enable DKIM signing through Microsoft Defender.
Option A is incorrect because Microsoft Purview Message Encryption protects message confidentiality rather than providing DKIM authentication signatures.
Option C is incorrect because Domain-based Message Authentication, Reporting, and Conformance (DMARC) defines authentication alignment and handling policies based on SPF and DKIM results.
Option D is incorrect because Authenticated Received Chain (ARC) preserves authentication information through intermediary mail systems, particularly when forwarding modifies messages.
DKIM is therefore the correct technology for digitally signing outbound email messages.
Microsoft References:
https://learn.microsoft.com/en-us/defender-office-365/email-authentication-dkim-configure
NEW QUESTION # 28
Your company has a branch office named Branch1.
You have a Microsoft Entra tenant that contains the following security groups:
Group1: Contains only the users in Branch1
Helpdesk1: Contains users that support only Branch1
You need to configure an administrative unit to delegate administration to Helpdesk1. The solution must meet the following requirements:
Helpdesk1 must be able to reset passwords for only the Branch1 users.
Helpdesk1 must be able to update the membership of Group1.
How should you configure the administrative unit? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
Administrative unit members: The Branch1 users and Group1; Role to assign to Helpdesk1: User Administrator Microsoft Entra administrative units enable organizations to delegate administrative permissions to specific subsets of directory objects, avoiding tenant-wide administrative assignments.
First selection: The Branch1 users and Group1.
The administrative unit must contain both the individual Branch1 user objects and the Group1 security group.
Including Branch1 users enables delegated administrators to manage those users within the administrative unit
' s scope. Including Group1 enables administrators to manage the group ' s properties and membership.
Microsoft specifically distinguishes between adding a security group and adding its members to an administrative unit. Adding Group1 does not automatically add its users. Therefore, selecting Group1 alone would not satisfy the password-reset requirement.
Second selection: User Administrator.
The User Administrator role provides permissions to manage supported user properties, reset passwords for eligible nonprivileged users, and manage group memberships.
When assigned at the administrative-unit scope, the role restricts its administrative operations to the applicable objects within that unit.
The Helpdesk Administrator role supports password-related helpdesk tasks but does not grant the broader group membership management capability required.
The Groups Administrator role focuses on group management without the necessary user password-reset capability.
Privileged Role Administrator provides excessive permissions for the scenario.
Therefore, the administrative unit must contain the Branch1 users and Group1, with Helpdesk1 assigned the scoped User Administrator role.
Microsoft References:
https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/administrative-units
https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/admin-units-members-add
NEW QUESTION # 29
You have a Microsoft 365 subscription that has at least one paid Microsoft 365 Copilot license.
Microsoft 365 Copilot is configured as shown in the following table.
The subscription contains the users shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Answer:
Explanation:
Explanation:
User2 can enable Copilot image generation for the subscription: Yes; User1 can use Microsoft 365 Copilot in the Exchange admin center: Yes; User3 can buy a Microsoft 365 Copilot license without admin approval: No
Microsoft 365 Copilot administrative controls determine who can manage AI functionality, access Copilot within administrative portals, and purchase licenses independently.
First statement: Yes. User2 holds the AI Administrator role, which provides permission to configure Microsoft Copilot settings, including image generation. An AI Administrator can navigate to the Microsoft
365 admin center, open Copilot settings, and modify the Copilot image generation configuration.
Second statement: Yes. User1 holds the Global Reader role. This is a recognized administrative role that provides read-only access to supported Microsoft 365 administrative portals, including Exchange admin center. Because Copilot in admin centers is configured as Allowed for all admins, User1 can access supported Copilot functionality within the permissions of the role. This does not grant permission to modify Exchange settings.
Third statement: No. The self-service purchasing configuration is Allow trials only. This permits eligible users to start supported trials but prevents them from purchasing Microsoft 365 Copilot licenses independently.
User3 has no administrative role and cannot bypass the purchasing restriction.
Therefore, the correct sequence is Yes, Yes, No.
Microsoft References:
https://learn.microsoft.com/en-us/microsoft-365/copilot/microsoft-365-copilot-page
https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference
NEW QUESTION # 30
You have a Microsoft 365 E5 subscription and use Microsoft Intune for managing mobile devices.
You need to access service health alerts from a mobile phone.
What should you use?
Answer: D
Explanation:
The Microsoft 365 Admin mobile app provides administrators with mobile access to Microsoft 365 administrative functions, including service health monitoring, incident notifications, Message Center updates, and support requests.
Option C is correct because the Microsoft 365 Admin mobile app includes a dedicated Service Health feature that enables administrators to monitor the operational status of Microsoft 365 services directly from a mobile device.
Administrators can view active service incidents, service advisories, outages, and relevant service disruption details.
The app also supports configurable push notifications for service health alerts, enabling administrators to receive timely information about service disruptions without signing in to the web-based Microsoft 365 admin center.
Option A is incorrect because Intune Company Portal provides employees with access to managed corporate applications, device enrollment, and compliance information.
Option B is incorrect because the Intune app focuses on device management and access to organizational resources rather than Microsoft 365 service health monitoring.
Option D is incorrect because Microsoft Authenticator supports multifactor authentication, passwordless sign- in, and authentication approvals. It does not provide Microsoft 365 service health reporting.
Therefore, the Microsoft 365 Admin mobile app is the correct solution.
Microsoft Reference: Microsoft Learn - About the Microsoft 365 admin mobile app .
NEW QUESTION # 31
......
The Microsoft AB-650 pdf questions learning material provided to the customers from TestKingFree is in three different formats. The first format is PDF format which is printable and portable. It means it can be accessed from tablets, laptops, and smartphones to prepare for the Administering Microsoft 365 and AI Services (AB-650) exam. The Microsoft AB-650 PDF format can be used offline, and candidates can even prepare for it in the classroom or library by printing questions or on their smart devices.
Study AB-650 Dumps: https://www.testkingfree.com/Microsoft/AB-650-practice-exam-dumps.html