AB-900 cheat sheet
AB-900 · Keep the key ideas within reach.
Core features and objects of Microsoft 365 services
A Microsoft 365 tenant is the top-level cloud container for an organization's users, groups, licenses, domains, and services.
Exchange Online hosts mailboxes; SharePoint Online hosts site collections; OneDrive hosts each user's personal files; Teams provides chat, meetings, and channels.
Microsoft 365 groups provide shared membership for a mailbox, calendar, SharePoint site, and Teams workspace.
A team is a collaboration workspace; channels are subsections of a team and can be standard, private, or shared.
Licenses are assigned per user and determine which Microsoft 365 services and Copilot features the user can access.
Guest users are external identities invited into the tenant and can access shared resources when permitted.
The Microsoft 365 admin center manages users, groups, domains, licenses, and service health.
SharePoint permissions are inherited from site to library to item unless inheritance is broken.
Microsoft 365 objects include users, groups, mailboxes, sites, teams, channels, and files.
Understand data protection and governance tasks for Microsoft 365 and Copilot
Microsoft Purview is the compliance portal for sensitivity labels, DLP, retention, eDiscovery, audit, and insider risk.
Sensitivity labels classify and protect content; labels can encrypt, apply markings, and restrict sharing.
Copilot honors sensitivity labels and DLP policies because it operates within Microsoft 365 permissions and compliance boundaries.
A DLP policy detects sensitive information and can block, warn, or audit sharing across Exchange, SharePoint, OneDrive, and Teams.
Retention policies apply at the location level; retention labels apply at the item level to retain or delete content.
eDiscovery identifies, preserves, reviews, and exports content for legal or investigative requests.
The unified audit log records user and administrator activity across Microsoft 365 services.
Oversharing occurs when site or file permissions grant broader access than intended, exposing content to Copilot users.
Records management uses retention labels to declare content as records and control deletion.
Perform basic administrative tasks for Copilot and agents
Copilot in Microsoft 365 is managed from the Microsoft 365 admin center and the Copilot admin center.
Users need a qualifying Microsoft 365 license plus a Copilot license to use Copilot in the apps.
Agents are AI assistants built in Copilot Studio or Microsoft 365 Copilot that perform tasks and answer questions.
Admins control whether users can publish agents and whether agents are available to the organization.
Copilot Studio environments store agents, connectors, and data; environment security roles control access.
Connectors let agents access external systems and data through predefined or custom APIs.
Agent authentication determines how an agent signs in to access protected organizational data.
Copilot analytics report usage, adoption, and agent performance across the tenant.