AB-650 Practice Test
Microsoft 365 Certified: AI Services Administrator Associate (beta)
AB-650 tests whether you can administer Microsoft 365 in an AI-powered workplace — Copilot, agents, and the Purview/Entra controls that keep them safe — not just run a traditional tenant.
Our 500 scenario-based questions cover the full AB-650 blueprint: tenant configuration and licensing, Entra identity and access governance, Purview data loss prevention and information protection, Copilot enablement and data readiness, and — the newest and least-documented material — Microsoft Entra Agent ID, Agent 365 governance, and Purview protections for AI agents. Calibrated to real exam difficulty so test day feels familiar, even though this beta exam has no official Microsoft practice assessment yet.
Start Free Practice — 40 QuestionsNo credit card required. Upgrade to full 500 questions for $19.99 when ready.
Is this for you?
This is NOT for you if:
AB-650 Exam Details
What to expect on exam day
Questions
40
Duration
100 minutes
Passing Score
700
Exam Cost
$165
Exam Domains Covered
Master all topics tested on the AB-650 exam
Configure and manage Microsoft 365 tenants and workloads
Govern and secure Microsoft 365 tenants and workloads
Manage and secure AI services in Microsoft 365
Test Yourself Right Now
Try 5 real practice questions — no signup needed
5 Free AB-650 Questions
See how ready you are for the AB-650 exam. Each question includes a detailed explanation so you learn as you go.
Sample AB-650 Practice Questions
10 real questions from the free AB-650bank. Pick an answer in your head, then open “Show answer” for the explanation.
1. Which licensing model applies to the Microsoft 365 Copilot add-on license?
- A. A pay-as-you-go charge based on the number of Copilot prompts submitted, with no user license needed
- B. A per-user add-on license that requires an underlying eligible Microsoft 365 or Office 365 base subscription
- C. A one-time perpetual purchase per device, independent of any user subscription
- D. A free entitlement automatically included with a Microsoft 365 E3 subscription
Show answer
Correct answer: B
Microsoft 365 Copilot is licensed as a per-user add-on: an eligible base subscription (such as Microsoft 365 E3/E5 or Business Standard/Premium) must already be assigned to the user, and the Copilot license is then layered on top to unlock Copilot in Word, Excel, Outlook, Teams, and other apps. It is not a perpetual per-device purchase, it is not included free with E3, and it is not billed purely on a per-prompt basis for end users.
2. An admin chooses to verify domain ownership for contoso.com by adding a TXT record at the domain registrar. What value does Microsoft 365 give the admin to place in that TXT record?
- A. The tenant's Microsoft Entra tenant ID (GUID)
- B. A unique value in the format MS=msXXXXXXXX
- C. The tenant's primary onmicrosoft.com domain name
- D. A CNAME pointing to autodiscover.outlook.com
Show answer
Correct answer: B
Microsoft 365 generates a unique verification TXT value in the format MS=msXXXXXXXX that the admin copies into a TXT record at the registrar; once Microsoft finds that exact value published in DNS, ownership is confirmed. The onmicrosoft.com domain, the autodiscover CNAME, and the tenant GUID are all separate values used elsewhere in DNS or sign-in configuration, not for ownership verification.
3. Where in the Microsoft 365 admin center does an admin update the organization's legal address, technical contact, and official company name that appears on invoices and some sign-in surfaces?
- A. Settings > Org settings > Security & privacy
- B. Setup > Domains
- C. Billing > Billing accounts
- D. Settings > Org settings > Organization profile
Show answer
Correct answer: D
The Organization profile tab under Org settings stores the organization's name, address, technical contact, and other profile details, separate from the visual branding controls in Custom themes on the same tab. Security & privacy governs settings like password expiration and sharing defaults, Domains manages custom domains, and Billing accounts manages payment methods and invoices, not the organization's profile data.
4. A user is a member of two different Microsoft 365 Groups that each have their own group theme assigned in Custom themes. Which theme does that user see?
- A. Whichever group theme was created first
- B. Whichever group theme was assigned to their group most recently
- C. A merged theme combining colors from both group themes
- D. The default theme
Show answer
Correct answer: D
When a user is assigned to multiple group themes through overlapping group memberships, Microsoft 365 shows that user the default theme rather than trying to pick or merge between the conflicting group themes. Creation order, assignment recency, and color merging are not part of how this conflict is resolved.
5. An organization's network connectivity overview shows a network assessment score of 35 for its Chicago office, well below the healthy baseline. What does this score most directly indicate?
- A. Users at that location are likely to experience noticeably degraded Microsoft 365 performance and connectivity issues
- B. The Chicago office has exceeded its licensed user count for that location
- C. The Chicago office's custom domain has failed DNS verification
- D. Multi-geo data residency is misconfigured for users in that office
Show answer
Correct answer: A
The network assessment score (0-100) aggregates TCP latency, download speed, and UDP connection quality for a location; a score of 80 represents a healthy baseline, so a score of 35 signals a real risk of degraded Microsoft 365 performance and connectivity problems for users there, and warrants reviewing the location's network perimeter design. It has no relationship to license counts, domain DNS verification, or multi-geo data residency configuration.
Show 5 more questions
6. A user is a member of two Microsoft Entra groups that both have group-based licensing configured: one assigns Office 365 E3, and the other assigns Microsoft 365 E5. Both groups have enough available license units. What happens to the user's license assignment?
- A. The license from the group the user joined first is applied; the second is ignored
- B. Microsoft Entra ID prompts an admin to choose one license before either is applied
- C. Neither license is applied, because a user cannot belong to two licensed groups simultaneously
- D. The user is assigned both the E3 and E5 licenses, since group-based licensing is additive across all matching groups
Show answer
Correct answer: D
Group-based licensing is additive: if a user is a member of multiple groups that each have license assignments, Microsoft Entra ID applies the licenses from every matching group (assuming sufficient available units and no conflicting service plans), rather than picking one and discarding the other. There is no first-group-wins rule, no admin approval prompt for this scenario, and belonging to multiple licensed groups is fully supported.
7. A user reports that several emails from last week are missing, and the help desk confirms the emails were deleted straight to the Deleted Items folder (not purged, and not removed via a compliance action). The admin wants to use Microsoft 365 Backup to recover them. What is the correct outcome?
- A. Microsoft 365 Backup automatically restores items from Deleted Items on a recurring background schedule
- B. Microsoft 365 Backup will not restore these items — the user should recover them directly from the Deleted Items folder instead
- C. The admin runs a full mailbox restore, which recovers the items that were in Deleted Items
- D. The admin must first purge the Deleted Items folder before Microsoft 365 Backup can restore anything
Show answer
Correct answer: B
Microsoft 365 Backup explicitly does not restore items that were simply moved to the Deleted Items folder; only items that were changed, moved to the Recoverable Items folder, or purged are eligible for restore. Since these items are still sitting in Deleted Items, the correct and fastest path is for the user (or admin, on their behalf) to move them back to the Inbox directly — running a backup restore for this case would not help and purging the folder would make the situation worse, not better. There is no automatic 24-hour restore job.
8. Where does an admin check whether Microsoft is currently reporting an outage or degraded performance for Exchange Online or Teams?
- A. Purview > Alerts
- B. Health > Service health in the Microsoft 365 admin center
- C. Reports > Usage
- D. Settings > Org settings > Services
Show answer
Correct answer: B
Health > Service health in the Microsoft 365 admin center lists current and recent incidents and advisories for each Microsoft 365 service, including impact descriptions and status updates from Microsoft. Usage reports show adoption metrics, Org settings > Services configures individual workload settings, and Purview alerts surface security/compliance alerts, not service outage status.
9. Before assigning a Microsoft 365 Copilot license to a user, what must already be true about that user's account?
- A. The user must be a member of the Global Administrator role
- B. The user must have completed a Copilot Studio certification
- C. The user's mailbox must be hosted on-premises rather than in Exchange Online
- D. The user must already hold an eligible base Microsoft 365 or Office 365 subscription license
Show answer
Correct answer: D
Microsoft 365 Copilot is an add-on license layered on top of an eligible base Microsoft 365/Office 365 subscription — without that base license already assigned, the Copilot add-on cannot be applied. It has no dependency on the Global Administrator role, no certification prerequisite, and no requirement around on-premises mailbox hosting.
10. Where does an admin view aggregated network performance metrics and connectivity recommendations for each of the organization's office locations?
- A. Reports > Usage > Network
- B. Microsoft Entra admin center > Network access
- C. Purview > Data Security Posture Management
- D. Health > Network connectivity in the Microsoft 365 admin center
Show answer
Correct answer: D
Network connectivity insights, network assessments, and per-location performance recommendations are all shown under Health > Network connectivity in the Microsoft 365 admin center. There is no Network item under Usage reports for this purpose, Microsoft Entra Network access governs identity-based network security controls (a different capability), and Purview DSPM is about data risk posture, not network performance.
AB-650 study resources
Why Practice with MSCertQuiz?
Microsoft Learn teaches concepts. We prepare you for the actual exam.
Dedicated coverage of Microsoft Entra Agent ID and Agent 365 governance — agent identity lifecycle, Conditional Access for agents, access packages, and the agent registry — material so new that Microsoft's own Practice Assessment for this exam isn't available yet
Deep scenario-based questions on Purview DLP and information protection for Copilot and agents: sensitivity label usage rights, DLP policies scoped to the Microsoft 365 Copilot location, and data oversharing remediation
Every question grounded against live Microsoft Learn documentation rather than static dumps, so content stays accurate as this beta exam and its underlying AI services continue to evolve
Full coverage of the exam's largest domain — governing and securing Microsoft 365 tenants — spanning Entra identities, Conditional Access, Defender for Office 365, and attack simulation training, not just the newer AI material
Not sure if you're ready for the AB-650 exam?
Take the free AB-650 Readiness Check →What Our Users Say
“Since AB-650 is still in beta, Microsoft doesn't even have a practice assessment for it yet — this was the only serious practice option I could find. The Agent 365 and Entra Agent ID questions matched the real exam's depth closely.”
Rahul H.
AB-650 Certified (beta)
“I came in strong on classic Microsoft 365 admin work but had never touched Agent 365 or Purview's agent protections. The scenario questions on sensitivity-label usage rights and DLP for Copilot closed that gap fast.”
Sara M.
Passed AB-650 first try
“The Govern and secure domain is huge on this exam and the practice bank reflected that — heavy on Entra Conditional Access and Purview DLP scenarios, not just definitions. Explanations taught the reasoning, not just the letter.”
Daniel K.
AI Services Administrator Associate
Choose Your Plan
Start free, upgrade when you're ready to get serious
Free
Good for exploring the platform
- 40 practice questions
- Practice mode only
- Progress tracking
- No exam simulation mode
AB-650 Full Access
Best if your exam is in the next 2-4 weeks
- 500 practice questions
- Practice & Exam modes
- Detailed explanations
- Lifetime access
7-day money-back guarantee
Pro — All Certs
Best if you're planning multiple Microsoft exams
- ALL certifications included
- Unlimited questions
- New certs added free
- Cancel anytime
Save 30% vs buying individually
Your AB-650Exam Won't Wait
Candidates who complete at least 2 full mock exams pass at significantly higher rates than those who only study passively.
Don't risk $165 on the real exam without testing yourself first.
Start Free Practice NowNo credit card required • 40 free questions • Upgrade for $19.99 when ready
Official Microsoft Resources
Our practice questions are aligned with official Microsoft exam objectives. We recommend studying with Microsoft Learn first, then using MSCertQuiz to test your readiness.
View Official AB-650 Exam DetailsAB-650 Frequently Asked Questions
Everything you need to know about the AB-650 AI Services Administrator certification
What is AB-650?
Is AB-650 a beta exam, and what does that mean for candidates?
How much does the AB-650 exam cost and how long is it?
What is the passing score for AB-650?
What topics are covered on AB-650?
How hard is AB-650?
How long should I study for AB-650?
What are the prerequisites for AB-650?
Who should take AB-650?
Also Preparing For
Candidates studying AB-650 often prepare for these certifications next.