AB-900 study plan
AB-900 · Give each week a clear focus.
8 weeks · About 7 hours per week
Identify the core features and objects of Microsoft 365 services
Map each core Microsoft 365 service (Exchange Online, SharePoint Online, OneDrive, Teams, Microsoft Entra ID) to the primary object types it stores.
Distinguish the purpose of the Microsoft 365 admin center, Entra admin center, Exchange admin center, Teams admin center, and SharePoint admin center.
Describe how a user account, a group, and a license relate inside a single tenant.
Differentiate Microsoft 365 Groups, security groups, distribution lists, and teams by membership model and use case.
Your checkpoint
A one-page service-and-object reference table with at least 15 rows, each row verified against Microsoft Learn documentation.
Identify the core features and objects of Microsoft 365 services
Navigate a trial or sandbox tenant to locate users, groups, licenses, and per-service settings.
Trace how assigning or removing a license enables or blocks a specific service for a user.
Compare team sites and communication sites, and list the primary objects in each (lists, libraries, pages, permissions).
Identify Teams core objects (teams, channels, channel types, tabs, apps) and state what each one controls.
List the built-in admin roles in Microsoft 365 and match each to the task it permits.
Your checkpoint
A written walkthrough of 10 admin tasks performed in the tenant (or documented step-by-step if no tenant is available), scored at 80% or higher on a 25-question Domain 1 self-quiz.
Identify the core features and objects of Microsoft 365 services & Understand data protection and governance tasks for Microsoft 365 and Copilot
Connect Microsoft 365 objects (sites, mailboxes, teams, files) to the content Copilot is allowed to ground on.
Distinguish retention policies from retention labels by scope, target, and outcome.
Separate sensitivity labels from retention labels by purpose and by what each does to a file.
Describe data loss prevention at a conceptual level and name the workloads a DLP policy can cover.
Your checkpoint
A comparison table of retention policies, retention labels, sensitivity labels, and DLP policies, plus a set of 10 flashcards covering the differences.
Understand data protection and governance tasks for Microsoft 365 and Copilot
Configure one retention policy and one retention label in the compliance portal and record where each applies.
Apply a sensitivity label with encryption to a document and verify the resulting behavior for a second user.
Explain how labels and permissions affect what Copilot can surface in a response.
Summarize the roles of data lifecycle management, eDiscovery, and audit log search in Microsoft Purview.
Your checkpoint
A lab log documenting 5 configured compliance items with results observed, plus a score of 80% or higher on a 25-question Domain 2 quiz.
Understand data protection and governance tasks for Microsoft 365 and Copilot
Create a DLP policy for one workload and interpret the policy tip or alert it produces.
Explain the purpose of Insider Risk Management and Communication Compliance in governance terms.
Identify how SharePoint and OneDrive oversharing increases Copilot exposure, and list the controls that reduce it (site access review, permission trimming, sensitivity labels, restricted content discovery).
Describe how to search the unified audit log and how long audit records are retained by default.
Your checkpoint
An oversharing mitigation checklist containing at least 8 concrete, ordered actions, with one DLP test executed and its results recorded.
Perform basic administrative tasks for Copilot and agents
Assign Microsoft 365 Copilot licenses and verify the prerequisites: licensing, identity, network, and app version.
Navigate the Copilot admin surfaces to locate usage reports, feedback settings, and agent management.
Differentiate Copilot in the Microsoft 365 apps from Microsoft 365 Copilot Chat and state when each is appropriate.
Describe declarative agents and custom engine agents conceptually and give one scenario for each.
Identify which admin roles are required to deploy, share, and monitor an agent.
Your checkpoint
A licensing and prerequisites checklist plus a labeled diagram of the Copilot admin surfaces and the task each one supports.
Perform basic administrative tasks for Copilot and agents
Build a declarative agent from a template and scope its knowledge source to a single SharePoint site.
Configure agent sharing and permissions, then publish or deploy the agent to a defined audience.
Interpret Copilot adoption and usage metrics from the admin center reports and state one action each metric would drive.
Delegate an admin role for Copilot or agent management and confirm the delegated scope.
Your checkpoint
A working agent in the test tenant (or a full documented build runbook) accompanied by a one-page operations runbook covering sharing, monitoring, and rollback.
Identify the core features and objects of Microsoft 365 services & Understand data protection and governance tasks for Microsoft 365 and Copilot & Perform basic administrative tasks for Copilot and agents
Re-attempt every item missed on earlier quizzes and record the corrected reasoning.
Complete a timed 50-question mixed mock exam covering all three domains.
Reconcile each skills-outline objective against a personal note so every objective has an owner statement.
Explain 10 high-frequency concepts aloud in under 60 seconds each without notes.
Your checkpoint
A mock exam score of 85% or higher and a one-page weak-spots sheet listing each gap with a specific remediation action and date.
Milestones
Week 2: Name the primary object types of Exchange Online, SharePoint Online, OneDrive, Teams, and Microsoft Entra ID from memory, and score 80% or higher on the Domain 1 self-quiz.
Week 4: Demonstrate a configured retention policy, retention label, and sensitivity label in the tenant, and score 80% or higher on the Domain 2 quiz.
Week 6: Explain the Copilot licensing prerequisites and the difference between Copilot in the apps and Copilot Chat without notes, and show a labeled diagram of the admin surfaces.
Week 8: Score 85% or higher on the timed 50-question mock exam with no domain scoring below 75%.