AB-650 (Administering Microsoft 365 and AI Services) is Microsoft's Associate-level exam for the Microsoft 365 Certified: AI Services Administrator Associate credential. It is currently a beta exam with no retirement date set. To pass, you need working knowledge of classic Microsoft 365 tenant administration plus Microsoft's newest AI governance layer — Copilot, agents, Microsoft Entra Agent ID, and Microsoft Agent 365 — tested together in one 100-minute sitting.
Exam Overview
Exam Code
AB-650
Full Exam Name
Administering Microsoft 365 and AI Services (beta)
Certification Earned
Microsoft 365 Certified: AI Services Administrator Associate (beta)
Passing Score
700 / 1000
Exam Duration
100 minutes (standard duration for an Associate role-based exam without labs)
Language
English only, as of this beta
Retirement Date
None published — the exam is still in beta
Prerequisites
None enforced at registration
Microsoft's exam-duration guidance places every Associate and expert role-based exam without labs at 100 minutes of exam time (120 minutes of seat time, including the candidate agreement and optional feedback). The official AB-650 exam pagedoes not publish an exact question count for this beta exam; Microsoft's general guidance is that most certification exams run 40–60 questions, so plan your pacing around that range rather than a fixed number.
Who should take AB-650?
- • Microsoft 365 administrators being asked to also govern Copilot and agents
- • Identity or security admins (SC-300, MS-102 holders) extending into AI governance
- • IT teams standing up Microsoft 365 Copilot and Agent 365 for the first time
- • Anyone who needs Purview DLP and sensitivity-label experience specific to AI workloads
Skills Measured & Domain Weightings
Per Microsoft's official AB-650 study guide(checked August 2026), the exam covers three domains. Domain 2 alone is nearly half the exam, and Domain 3's AI-services content is the newest, so weight your study hours accordingly — not evenly across all three.
Domain 1: Configure and Manage Microsoft 365 Tenants and Workloads
20–25%- • Tenant branding, domains, organizational settings, and Microsoft 365 licensing — including licenses specifically for Copilot, Agent 365, and Copilot Studio
- • Microsoft 365 Backup setup, restore, and monitoring; network connectivity insights; Service health notifications
- • Mailboxes and shared mailboxes; Teams channels, owners, and members; Copilot in Teams meetings, including transcription
- • SharePoint site permissions, plus SharePoint/OneDrive configuration for Copilot: Advanced Management, Microsoft Search in SharePoint, and site exclusions
Study tip: The Copilot-specific licensing and SharePoint-for-Copilot bullets are easy to skip if you already know classic tenant admin. They are tested.
Domain 2: Govern and Secure Microsoft 365 Tenants and Workloads
40–45%- • Microsoft Entra identities: users, guests, groups, PIM roles, administrative units, contacts, and bulk management via Microsoft Graph PowerShell
- • Entra authentication and access: auth methods, Password Protection, SSPR, Conditional Access with ID Protection and MFA
- • Defender for Office 365: alerts, threat policies, investigating email/collaboration threats, attack simulation training
- • Microsoft Purview: DLP policies across Exchange, SharePoint, OneDrive, Teams, endpoints, and Copilot; sensitivity labels; retention policies; DLP alerts; Data Security Posture Management (DSPM) for AI
Study tip:This is the largest domain and the one most candidates underestimate. Purview's Copilot-specific DLP scoping and DSPM for AI are the parts least covered in older Microsoft 365 admin training.
Domain 3: Manage and Secure AI Services in Microsoft 365
35–40%- • Copilot tenant and data readiness: data leaks, oversharing, compliance, web search, Copilot Search, release preferences, AI disclaimers, Copilot Cowork, third-party AI providers, Copilot connectors
- • Agent lifecycle via Microsoft Entra Agent ID: identity lifecycle workflows, access packages, Conditional Access for agents, agent owners, allowed agent types and templates
- • Agent registry: discovering agents, reviewing and publishing or rejecting submissions, installing or blocking access, uploading custom agents
- • Agent 365 governance: monitoring agent activity, protecting sensitive data agents touch, evaluating compliance gaps, managing tools in Agent 365
- • Monitoring: AI service costs, Copilot usage reports in the admin center, and adoption/service health via the Copilot Control System
Study tip: This is the domain with the least mature third-party study material, because Agent 365 and Entra Agent ID are new. Hands-on time in a Copilot-enabled tenant matters more here than for the other two domains.
See where you stand right now
Try 40 Free AB-650 Practice Questions
Scenario-based questions across all three domains, with explanations. No credit card required.
Start Free Practice →Why the Beta Status Actually Matters
AB-650's own Microsoft Learn exam page states plainly: "The Practice Assessment for this exam is not currently available," and that practice assessments are typically released within about eight weeks of an exam leaving beta. That is unusual — most Associate-level Microsoft exams have an official, free practice assessment candidates can lean on. AB-650 candidates today do not have that option.
Two practical consequences follow. First, third-party question banks that were not built specifically for this exam and grounded against its current skills-measured list are more likely to be stale or wrong — there is no official baseline to check them against yet. Second, hands-on time in a real (or trial) Microsoft 365 tenant with Copilot enabled matters more than usual, because the Agent 365 and Entra Agent ID material is recent enough that documentation and community writeups are still catching up.
Commercial disclosure: MSCertQuiz sells practice-exam access for AB-650, and this guide is written by the same team that builds those questions. We are telling you this upfront so you can weigh that when reading our resource recommendations below.
Study Resources
1. Microsoft's official AB-650 study guide
FreeLists every skills-measured bullet under all three domains. This is the exact source Microsoft uses to write questions — read every bullet before you study anything else, and flag any term you don't recognize. Read it directly at learn.microsoft.com/credentials/certifications/resources/study-guides/ab-650.
2. A Microsoft 365 developer or trial tenant with Copilot
Free/trialThe Domain 3 material — Copilot Control System, agent registry, Entra Agent ID — is far easier to retain after you have clicked through it once. If your organization has a Copilot-enabled tenant, spend an hour in the admin center before your exam.
3. Scenario-based practice questions
EssentialGiven the absence of an official practice assessment, this is the step most AB-650 candidates skip and shouldn't. Practice questions surface exactly where reading comprehension breaks down under exam-style wording, especially in the Purview and Agent 365 material.
4. Microsoft Purview and Entra product documentation
FreeMicrosoft's study guide links directly to Microsoft 365, Microsoft Entra ID, Microsoft Defender, and Microsoft Purview documentation. Domain 2 is the biggest chunk of the exam, and it draws almost entirely from those four doc sets.
Not sure where your gaps are?
Take the free AB-650 readiness quiz. No signup required. It scores you by domain so you know whether to focus on Purview governance or Agent 365.
Check My ReadinessStudy Plan by Background
How long AB-650 takes to prepare for depends heavily on whether Microsoft 365 administration is already part of your job. The table below allocates study hours proportionally to each domain's exam weight — a genuinely different way to plan than "one week per domain," which under-serves Domain 2.
| Domain | Exam weight | Study hours (experienced admin, ~25h total) | Study hours (newer to M365 admin, ~50h total) |
|---|---|---|---|
| 1. Tenants & workloads | 20–25% | ~5 hours | ~11 hours |
| 2. Govern & secure | 40–45% | ~10 hours | ~21 hours |
| 3. AI services | 35–40% | ~10 hours (weighted up — newest material) | ~18 hours |
Read the official skills-measured list end to end
Every sub-bullet under all three domains is a study-list item. Mark anything unfamiliar — for most candidates that will cluster in Agent 365 and Purview's DSPM for AI.
Work Domain 2 first, not last
It is the largest domain and the foundation for Domain 3 — Conditional Access and sensitivity labels reappear as "Conditional Access for agents" and "sensitivity labels for Copilot" later. Learning it in order saves re-explaining concepts twice.
Do practice questions after each domain, not at the end
Since there is no official practice assessment to fall back on, this is the only reliable way to check comprehension before exam day. Read every explanation, including for questions you got right.
Spend deliberate time in a Copilot-enabled admin center
Agent registry, Entra Agent ID, and Copilot Control System are hard to visualize from text alone. Even 60–90 minutes of hands-on clicking cements the terminology far faster than reading.
Book the exam once you are consistently above 75%
On a beta exam with no official baseline, waiting for perfect confidence tends to mean waiting indefinitely. A consistent 75%+ on scenario practice questions is a reasonable bar to schedule against.
Exam Day Tactics
Watch for "agent" vs. "user" scoping
AB-650 questions frequently test whether a Purview policy, Conditional Access rule, or sensitivity-label grant was written for human identities, agent identities, or both. Read the subject of every permission carefully.
Use Microsoft Learn access deliberately
Role-based exams give you split-screen access to Microsoft Learn during the exam. It is meant for the occasional lookup, not for reading every answer — leaning on it too much will cost you time you don't have.
Separate governance tools by their job
Azure/Entra Conditional Access controls access; Purview DLP controls data movement; sensitivity labels control usage rights on content itself. Distractors on this exam often swap one for another.
Don't assume Copilot inherits everything automatically
A recurring exam pattern: a broad grant (like "any authenticated user") looks sufficient for a human but is explicitly documented as insufficient for an agent identity, which needs specific usage rights.
Common Questions
Is AB-650 hard to pass?
AB-650 is a scenario-heavy Associate exam that spans classic Microsoft 365 administration and Microsoft's newest AI governance tooling in the same sitting. Candidates who already run Entra ID and Purview day to day usually find the tenant-and-workload material familiar; the Agent 365 and Entra Agent ID content is genuinely new and has fewer outside study resources.
What is the passing score for AB-650?
700 out of 1000, on Microsoft's scaled scoring system (as stated on the official AB-650 study guide, checked August 2026). That corresponds to roughly 70% competency spread across all three domains.
Does Microsoft have an official practice assessment for AB-650?
Not yet. Microsoft's own AB-650 exam page states the Practice Assessment for this exam is not currently available, and that practice assessments are usually released within about eight weeks of an exam leaving beta and going generally available.
How long should I study for AB-650?
Candidates already administering Microsoft 365 tenants with solid Entra ID and Purview fundamentals should plan 4-6 weeks, concentrated on the AI services domain. Candidates newer to Microsoft 365 administration should plan 8-10 weeks, since the govern-and-secure and AI-services domains together carry over 75% of the exam.
What are the prerequisites for AB-650?
There is no enforced prerequisite exam. Microsoft designed AB-650 for candidates with hands-on experience administering Microsoft 365 workloads and Microsoft Entra ID, an understanding of Defender XDR, and familiarity with Microsoft Graph PowerShell for bulk management tasks.
Will AB-650 questions change while the exam is in beta?
Microsoft states the exam has no retirement date set and that most questions cover generally available features, with preview features included only when they are commonly used in the field. Because Agent 365 and Copilot governance are moving fast, revisit the official study guide close to your exam date to confirm nothing shifted.
About This Guide
This guide is maintained by the MSCertQuiz team, which also builds and sells the 500-question AB-650 practice bank referenced above. Every domain weighting and exam-mechanics figure on this page traces back to Microsoft's official AB-650 exam page and study guide, checked August 2026 — not estimated or carried over from another certification.
Related AB-650 Resources
Free AB-650 Practice Questions
Scenario questions across all three domains, with rationale.
AB-650 Cheat Sheet
Quick-reference tables for your final review pass.
AB-650 Certification Page
Full domain breakdown and the 500-question practice bank.
All Certifications
Browse every Microsoft certification MSCertQuiz covers.