Exam Name: Administering Microsoft 365 and AI Services
Certification Provider: Microsoft
Corresponding Certification: Microsoft 365 Certified
Over 59689+ Satisfied Customers
Instant Download Microsoft : AB-650 Questions & Answers as PDF & Test Engine
Updated: Oct 15, 2026
No. of Questions: 65 Questions & Answers with Testing Engine
Download Limit: Unlimited
Instant Download: Upon successful payment, Our systems will automatically send the product you have purchased to your mailbox by email. (If not received within 12 hours, please contact us. Note: don't forget to check your spam.)
100% Money Back Guarantee
Prep4away has an unprecedented 99.6% first time pass rate among our customers. 
We're so confident of our products that we provide no hassle product exchange.
- Best exam practice material
- Three formats are optional
- 10 years of excellence
- 365 Days Free Updates
- Learn anywhere, anytime
- 100% Safe shopping experience
AB-650 Online Test Engine
- Online Tool, Convenient, easy to study.
- Instant Online Access AB-650 Dumps
- Supports All Web Browsers
- AB-650 Practice Online Anytime
- Test History and Performance Review
- Supports Windows / Mac / Android / iOS, etc.
- Try Online Engine Demo
- Total Questions: 65
- Updated on: Oct 15, 2026
- Price: $69.00
AB-650 Desktop Test Engine
- Installable Software Application
- Simulates Real AB-650 Exam Environment
- Builds AB-650 Exam Confidence
- Supports MS Operating System
- Two Modes For AB-650 Practice
- Practice Offline Anytime
- Software Screenshots
- Total Questions: 65
- Updated on: Oct 15, 2026
- Price: $69.00
AB-650 PDF Practice Q&A's
- Printable AB-650 PDF Format
- Prepared by Microsoft Experts
- Instant Access to Download AB-650 PDF
- Study Anywhere, Anytime
- 365 Days Free Updates
- Free AB-650 PDF Demo Available
- Download Q&A's Demo
- Total Questions: 65
- Updated on: Oct 15, 2026
- Price: $69.00
Simulated real examination conditions give you a special exam-day experience — before exam day. Practice with the Microsoft Administering Microsoft 365 and AI Services torrent from Prep4away: 65 practice questions for the AB-650 exam in 2026.
Microsoft AB-650 Exam Overview:
| Certification Vendor: | Microsoft |
|---|---|
| Exam Name: | Administering Microsoft 365 and AI Services |
| Exam Number: | AB-650 |
| Passing Score: | 700 (on a scale of 1-1000) |
| Certificate Validity Period: | Certification expires one year after it is earned |
| Related Certifications: | Microsoft Certified: AI Services Administrator Associate |
| Exam Price: | USD 165 |
| Real Exam Qty: | 40-60 |
| Exam Format: | Drag and drop, Active screen, Labs (if applicable), Case study, Multiple choice, Hot area, Build list, Multiple response |
| Available Languages: | English (Beta) |
| Exam Duration: | 100 minutes |
| Sample Questions: | DOWNLOAD DEMO |
| Exam Way: | Online proctored or at an authorized Pearson VUE test center. |
| Pre Condition: | No prerequisite exam is required. Candidates should have experience administering Microsoft 365 services, Microsoft Entra ID, Microsoft Intune, Microsoft 365 Copilot, Microsoft Purview, and related AI services. |
| Official Syllabus URL: | https://learn.microsoft.com/en-us/credentials/certifications/administering-microsoft-365-and-ai-services/ |
Microsoft AB-650 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Manage Microsoft 365 workloads | 20-25% | - Manage devices and applications
|
| Topic 2: Administer Microsoft 365 Copilot and AI services | 25-30% | - Prepare Microsoft 365 for AI
|
| Topic 3: Implement security, compliance, and governance for AI and Microsoft 365 | 25-30% | - Protect organizational data
|
| Topic 4: Manage Microsoft 365 tenant and identity services | 20-25% | - Configure and manage Microsoft 365 tenants
|
AB-650 Exam FAQ — Concise and Clear
No prerequisite exam is required. Candidates should have experience administering Microsoft 365 services, Microsoft Entra ID, Microsoft Intune, Microsoft 365 Copilot, Microsoft Purview, and related AI services. Eligibility rules change over time, so verify the current requirements on the official page (official AB-650 exam page) before registering.
The Microsoft Administering Microsoft 365 and AI Services is Microsoft's certification exam for Microsoft 365 Certified, at the Associate level. Related credentials include Microsoft Certified: AI Services Administrator Associate. Start simply: free demo first, full set when convinced.
100 minutes for 40-60 questions. The Prep4away engine simulates real examination conditions, so the pacing feels familiar before exam day.
Yes — download our demo freely as your reference; you may be impressed by the conciseness and clearness of the Microsoft Administering Microsoft 365 and AI Services exam VCE. Purchases include 365 days of free updates by email; renew afterward at 50% off.
The Microsoft Administering Microsoft 365 and AI Services blueprint spans 4 domains — including Manage Microsoft 365 tenant and identity services (20-25%), Administer Microsoft 365 Copilot and AI services (25-30%), Manage Microsoft 365 workloads (20-25%). Our material keeps close to this syllabus; the complete outline above lists every subtopic.
Checkout is brief: add your chosen Microsoft Administering Microsoft 365 and AI Services version to cart, check your email address, apply a discount code if you have one, pay by credit card — the system emails the product automatically within about a minute, with 24/7 help if nothing arrives within 2 hours. All operations are safe and secure. If you fail the corresponding AB-650 exam within 60 days of purchase, we refund in full: send a scanned enrollment slip plus the official Score Report PDF within 2 days of the exam, processed within 7 days. Excluded: exams within 3 days of purchase, candidate names that don't match the payer, and free or expired products. Or exchange for two equal-value products free.
USD 165 per attempt, 700 (on a scale of 1-1000) to pass. Retakes cost the full fee — prepare day to day with the 65 practice questions for the AB-650 exam at Prep4away and review your wrong items thoroughly.
Microsoft Administering Microsoft 365 and AI Services Sample Questions:
You have a Microsoft 365 subscription that uses Microsoft Defender for Office 365.
Users collaborate on files in Microsoft Teams. Files that are identified as malicious cannot be opened, moved, copied, and shared, but users can still save local copies.
You need to configure file-based protection for the collaboration workloads. The solution must meet the following requirements:
Apply malware protection to the files stored in Teams.
Prevent users from retaining local copies of files identified as malicious.
What should you do? To answer, select the appropriate options in the answer area.
Correct Answer:
Explanation:
To apply malware protection: Configure Safe Attachments for Microsoft SharePoint, OneDrive, and Teams.; To prevent local copies: Run the Set-SPOTenant cmdlet to prevent users from downloading infected files.
Microsoft Defender for Office 365 provides Safe Attachments protection for files stored in SharePoint Online, OneDrive for Business, and Microsoft Teams. The feature identifies malicious files and restricts their availability across Microsoft 365 collaboration workloads.
First selection: Configure Safe Attachments for Microsoft SharePoint, OneDrive, and Teams.
Administrators must enable Safe Attachments protection for the collaboration workloads through the Microsoft Defender portal. This configuration enables malware detection and protection for supported files stored in these services.
Second selection: Run the Set-SPOTenant cmdlet to prevent users from downloading infected files.
By default, users cannot open, move, copy, or share files identified as malicious, but downloading may still be permitted. To prevent users from retaining local copies, administrators must enable the tenant-level download restriction by using SharePoint Online PowerShell:
Set-SPOTenant -DisallowInfectedFileDownload $true
This setting prevents ordinary users from downloading files that have been detected as infected.
The two configurations work together: Safe Attachments provides malware detection and file protection, while the SharePoint tenant setting closes the download restriction gap.
The configuration can be verified by checking the DisallowInfectedFileDownload property using Get- SPOTenant.
Microsoft References:
https://learn.microsoft.com/en-us/defender-office-365/safe-attachments-for-spo-odfb-teams-configure
You are deploying Microsoft 365 Copilot across a global enterprise network that uses strict firewall and proxy rules.
Users at a branch office report that the Microsoft 365 Copilot chat pane loads in Word and Teams, but prompts consistently time out or fail to stream responses.
You run the Microsoft 365 network connectivity test tool and need to verify the network protocol requirement that allows real-time streaming between client devices and the Copilot service endpoints.
Which protocol and port configuration must be allowed without TLS inspection or proxy interference to resolve the issue?
- A. Inbound and outbound TCP port 25 (SMTP) with STARTTLS enabled.
- B. Outbound UDP port 3478 to 3481 for STUN/TURN media relays.
- C. Outbound WebSocket Secure (WSS) connections over TCP port 443 to `*.office.com` and `*.microsoft.com` endpoints.
- D. Inbound TCP port 445 (SMB) from Microsoft data centers.
Correct Answer: C 🗳️
Explanation: Only visible for Prep4away members. You can sign-up / login (it's free).
You have a Microsoft 365 subscription that has at least one paid Microsoft 365 Copilot license.
Microsoft 365 Copilot is configured as shown in the following table.
The subscription contains the users shown in the following table.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation:
User2 can enable Copilot image generation for the subscription: Yes; User1 can use Microsoft 365 Copilot in the Exchange admin center: Yes; User3 can buy a Microsoft 365 Copilot license without admin approval: No Original cropped AB-650 video exhibit: AB650 Q28 hotspot.png
Microsoft 365 Copilot administrative controls determine who can manage AI functionality, access Copilot within administrative portals, and purchase licenses independently.
First statement: Yes. User2 holds the AI Administrator role, which provides permission to configure Microsoft Copilot settings, including image generation. An AI Administrator can navigate to the Microsoft
365 admin center, open Copilot settings, and modify the Copilot image generation configuration.
Second statement: Yes. User1 holds the Global Reader role. This is a recognized administrative role that provides read-only access to supported Microsoft 365 administrative portals, including Exchange admin center. Because Copilot in admin centers is configured as Allowed for all admins, User1 can access supported Copilot functionality within the permissions of the role. This does not grant permission to modify Exchange settings.
Third statement: No. The self-service purchasing configuration is Allow trials only. This permits eligible users to start supported trials but prevents them from purchasing Microsoft 365 Copilot licenses independently.
User3 has no administrative role and cannot bypass the purchasing restriction.
Therefore, the correct sequence is Yes, Yes, No.
Microsoft References:
https://learn.microsoft.com/en-us/microsoft-365/copilot/microsoft-365-copilot-page
https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference
Your company has a branch office named Branch1.
You have a Microsoft Entra tenant that contains the following security groups:
Group1: Contains only the users in Branch1
Helpdesk1: Contains users that support only Branch1
You need to configure an administrative unit to delegate administration to Helpdesk1. The solution must meet the following requirements:
Helpdesk1 must be able to reset passwords for only the Branch1 users.
Helpdesk1 must be able to update the membership of Group1.
How should you configure the administrative unit? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Correct Answer:
Explanation:
Administrative unit members: The Branch1 users and Group1; Role to assign to Helpdesk1: User Administrator Microsoft Entra administrative units enable organizations to delegate administrative permissions to specific subsets of directory objects, avoiding tenant-wide administrative assignments.
First selection: The Branch1 users and Group1.
The administrative unit must contain both the individual Branch1 user objects and the Group1 security group.
Including Branch1 users enables delegated administrators to manage those users within the administrative unit
' s scope. Including Group1 enables administrators to manage the group ' s properties and membership.
Microsoft specifically distinguishes between adding a security group and adding its members to an administrative unit. Adding Group1 does not automatically add its users. Therefore, selecting Group1 alone would not satisfy the password-reset requirement.
Second selection: User Administrator.
The User Administrator role provides permissions to manage supported user properties, reset passwords for eligible nonprivileged users, and manage group memberships.
When assigned at the administrative-unit scope, the role restricts its administrative operations to the applicable objects within that unit.
The Helpdesk Administrator role supports password-related helpdesk tasks but does not grant the broader group membership management capability required.
The Groups Administrator role focuses on group management without the necessary user password-reset capability.
Privileged Role Administrator provides excessive permissions for the scenario.
Therefore, the administrative unit must contain the Branch1 users and Group1, with Helpdesk1 assigned the scoped User Administrator role.
Microsoft References:
https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/administrative-units
https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/admin-units-members-add
You have a Microsoft 365 subscription.
A data loss prevention (DLP) policy generates multiple alerts.
You need to review and respond to the alerts. The solution must meet the following requirements:
Investigate related DLP alerts that have correlated security signals.
Perform in-place remediation for the affected user, file, or device.
What should you use?
- A. Microsoft Defender alerts
- B. Content explorer
- C. Activity explorer
- D. the Microsoft Purview DLP Alerts dashboard
- E. Microsoft Defender incidents
Correct Answer: E 🗳️
Explanation: Only visible for Prep4away members. You can sign-up / login (it's free).
Viewing page 1 out of 13 pages.
Viewing questions 1-5 out of 65 questions.
0 Customer ReviewsCustomers Feedback (* Some similar or old comments have been hidden.)
Instant Download AB-650
After Payment, our system will send you the products you purchase in mailbox in a minute after payment. If not received within 2 hours, please contact us.
365 Days Free Updates
Free update is available within 365 days after your purchase. After 365 days, you will get 50% discounts for updating.
Money Back Guarantee
Full refund if you fail the corresponding exam in 60 days after purchasing. And Free get any another product.
Security & Privacy
We respect customer privacy. We use McAfee's security service to provide you with utmost security for your personal information & peace of mind.
