Microsoft 365 Copilot & Agent Administration Fundamentals Diagnostic Quiz

Not sure where to start? This 24-question diagnostic samples every AB-900 domain in proportion to its weight on the real exam, then tells you which domains to study first. It takes about 8 minutes, there is no timer, and nothing leaves your browser.

24 questions about 8 minutes 3 domains free, no sign-up

Find your weak spots

24 questions, about 8 minutes, no timer. Every domain is sampled, weighted the way the real exam weights it. You get a band for each domain and a study-first list, not a pass prediction.

24 questions~8 min3 domains

No feedback until the end. Your result is saved in this browser only.

Sample AB-900 diagnostic questions

These are real items from the AB-900 bank, one from each of three domains, shown with their answers so you can see the format before you start. The diagnostic itself draws 24 questions from 61 AB-900 terms , and does not reveal answers until the end.

  1. Data Protection & Governance for Copilot

    Which best describes “How Copilot Accesses Data”?

    • · Customizable labels in Purview Information Protection that classify and optionally encrypt content according to its sensitivity.
    • · A Purview solution providing central insights, policies, and data risk assessments to secure and monitor generative AI use such as Copilot and agents.
    • ✓ Microsoft 365 Copilot retrieves only the work content a user already has permission to access, grounded through Microsoft Graph and the semantic index.
    • · The API and data layer that exposes a user's Microsoft 365 content and relationships, providing personalized grounding context to Copilot.

    Exam tip: Copilot enforces existing permissions, so it never surfaces data a user could not otherwise open, but oversharing of source content still exposes that content to Copilot.

  2. Core Microsoft 365 Services & Identity

    Which best describes “Zero Trust”?

    • · Authentication is the process of proving a user's identity, using methods such as passwords, the Microsoft Authenticator app, FIDO2 security keys, Windows Hello, and passkeys.
    • ✓ Zero Trust is a security strategy built on three guiding principles: verify explicitly, use least-privilege access, and assume breach.
    • · Conditional Access is a Microsoft Entra ID feature that enforces access policies using if-then rules combining signals such as user, device, location, and risk with controls like requiring MFA.
    • · Microsoft Defender XDR is a unified enterprise defense suite that coordinates detection, investigation, and response across endpoints, identities, email, and apps from the Microsoft Defender portal.

    Exam tip: Memorize the three Zero Trust principles in order — verify explicitly, least privilege, assume breach; Zero Trust is a strategy, not a single product.

  3. Copilot & Agent Administration

    Which best describes “Agent Builder”?

    • · Microsoft Copilot Studio is the full-featured, low-code tool for building, customizing, and managing agents with advanced tools, connectors, and topics.
    • · A custom agent is an organization-built agent tailored to specific tasks, instructions, knowledge sources, and actions for a team or business process.
    • ✓ The Microsoft 365 Copilot Agent Builder is a simple, in-context experience within Copilot Chat for quickly creating agents without leaving the chat interface.
    • · A declarative agent is an agent defined by instructions, actions, and knowledge sources on top of the Microsoft 365 Copilot orchestrator and foundation models, rather than custom-built infrastructure.

    Exam tip: Agent Builder is for quick, lightweight agent creation in the chat UX; escalate to Copilot Studio for advanced needs, and you can copy an agent from one to the other.

What the AB-900 diagnostic covers

The quiz mirrors the exam blueprint. Data Protection & Governance for Copilot carries the most weight on the real AB-900, at about 39% of the test, so it gets the most questions here; Copilot & Agent Administration, at about 28%, gets the fewest, but never fewer than 3, because a band should never rest on a single question. The questions draw on the site's AB-900 term bank, so they measure how well you know the concepts and vocabulary the exam is built on. They are not full-length scenario items.

  1. Data Protection & Governance for Copilot

    39% of the exam

    Exam Domains

    The largest domain: understand Microsoft Purview's information-protection, DLP, insider-risk, and data-lifecycle capabilities and how Copilot accesses and is governed against data. Includes DSPM for AI, eDiscovery content search, responsible AI, and detecting SharePoint oversharing.

    20 terms · 2 study sets

  2. Core Microsoft 365 Services & Identity

    33% of the exam

    Exam Domains

    Recognize the everyday objects and admin centers of Microsoft 365 (users, groups, mailboxes, sites, teams) and the platform's identity and security foundations. Covers licensing, the major admin centers, Zero Trust, Entra, conditional access, and core threat-protection concepts.

    19 terms · 2 study sets

  3. Copilot & Agent Administration

    28% of the exam

    Exam Domains

    Hands-on administration of Microsoft 365 Copilot and agents: licensing models, enabling/disabling features, usage and adoption monitoring, prompt management, and the agent lifecycle. Covers Researcher, Analyst, and custom agents plus the admin centers used to manage them.

    22 terms · 2 study sets

How your result is scored

Each domain comes back as a band rather than a percentage: Needs work (under 50% correct), Developing (50% to 79%), or Solid (80% and up). A handful of questions per domain is enough evidence to say "this needs work"; it is not enough to trust a number like 67%, so we do not show one.

The study-first list ranks domains by the share of the exam each one puts at risk: its blueprint weight multiplied by the fraction you missed. On the AB-900 that maths has teeth, because the domains are not equal — Data Protection & Governance for Copilot is worth about 39% and Copilot & Agent Administration about 28%, so half-knowing Data Protection & Governance for Copilot costs you roughly 20 points of the exam while barely knowing Copilot & Agent Administration costs about 22. Up to three domains make the list; if all 3 come back Solid, the list is empty and the full-length mock exam is the next real test.

Every question you miss is written into that study set's flashcard deck as due now, so the review queue starts with your actual gaps — across the 2 study sets in Data Protection & Governance for Copilot alone, that is the difference between re-reading things you already know and drilling the ones you do not. Your attempts are kept in this browser (the last five), and a retake shows which domains moved up or down since last time.

This is a study map, not a prediction. The real AB-900 runs 45 questions in 45 minutes and is administered by Microsoft; this is 24 untimed questions drawn from the same blueprint. No sample that short can estimate a result on it, and the site's own mock exam uses a 70% practice target rather than a pass prediction for the same reason.

What to do with your result

  1. Step 1

    Open your first focus domain

    Start with the top of the study-first list. Its study sets are linked right on the results screen; flashcards for the terms you missed are already due.

  2. Step 2

    Drill the set, then quiz it

    Flashcards build recall; the per-set quiz checks it with confusable distractors drawn from related terms.

  3. Step 3

    Retake, then take the mock exam

    After a study block, retake the diagnostic to see which bands moved. When the focus list is empty, the timed AB-900 mock exam is the next real test.

All Microsoft 365 Copilot & Agent Administration Fundamentals study modes → · How to pass the AB-900 →

Frequently asked questions

How long is the AB-900 diagnostic quiz?
24 questions, untimed. Most people finish in about 8 minutes. Every domain gets at least 3 questions, and the rest are spread in proportion to each domain's weight on the real exam.
Does the result predict whether I will pass?
No. A 24-question sample can tell you which domains need work; it cannot estimate a real AB-900 result. Treat it as a study map, then measure progress with the full-length mock exam.
Where is my result stored?
In your browser only, using local storage. Nothing is uploaded and no account is needed. Retake the quiz later and the results screen compares the two attempts domain by domain.
What happens to the questions I miss?
Each missed term is scheduled as due in that study set's flashcards, so your next review session starts with exactly the gaps the diagnostic found.