Microsoft Open Module
Log In Create Account
Certification learning module

Microsoft Services and Tool Selection

Practice choosing the correct Microsoft 365 admin center, identity, protection, governance, Copilot, or agent capability.

Module 3 of 6 About 5 min Microsoft 365 Certified: Copilot and Agent Administration Fundamentals (AB-900)
50%
Course position
Module 3

Microsoft Services and Tool Selection

Practice choosing the correct Microsoft 365 admin center, identity, protection, governance, Copilot, or agent capability.

Microsoft 365 Certified: Copilot and Agent Administration Fundamentals (AB-900)

AB-900 Microsoft Services and Tool Selection

AB-900 questions often present a business need rather than a product name. Read for the object, control, or operational outcome first, then select the Microsoft 365 administrative surface that fits.

Selection Map for AB-900

If the scenario is about... Start your reasoning with... AB-900 examples
Tenant settings, domains, licenses, users, or groups Core Microsoft 365 objects and the Microsoft 365 admin center Organization settings, license assignment, users, and groups.
Mailboxes or distribution groups Exchange administration Identify the appropriate Exchange admin center object.
Sites, libraries, folders, sharing, or oversharing SharePoint administration and data access governance Site permissions, data access governance reports, and restricted access control.
Teams, channels, or Teams policy Teams administration Choose the right Teams admin center object or policy category.
Sign-in, authentication, Conditional Access, SSO, roles, or risky sign-ins Microsoft Entra ID and identity-security tools MFA troubleshooting, Identity Secure Score, PIM, app registrations, and enterprise apps.
Threat signals, correlated security incidents, or user and administrator activity Threat intelligence, Microsoft Defender XDR, and the appropriate audit log Distinguish active threat detection and cross-workload investigation from reviewing the historical record of a user or admin action.
Classification, DLP, retention, compliance risk, AI activity, or eDiscovery Microsoft Purview Information Protection, DLP, Compliance Manager, Data Explorer, activity explorer, DSPM for AI, and Content search.
Copilot licenses, billing, prompts, adoption, or usage Copilot administrative tasks Monthly versus pay-as-you-go licensing, usage and adoption monitoring, Copilot Analytics, and prompt management.
Agent access, creation, approval, governance, or lifecycle Agent administrative tasks and the stated administration surface User access, agent creation, approval process, and monitoring through Microsoft 365 and Power Platform admin centers.

Apply the Zero Trust Lens

AB-900 explicitly includes the core Zero Trust principles. Use them as a decision lens: verify explicitly with the available identity, device, location, service, and risk signals; grant only the least privilege needed; and assume breach by limiting impact and looking for evidence. Zero Trust is not a single portal or product. A scenario can pair it with Microsoft Entra controls, Microsoft Defender XDR, threat intelligence, or audit logs, depending on whether the required outcome is access control, threat investigation, or activity review.

How to Avoid Tool-Selection Traps

  • Match the object: a mailbox, site, team, user, group, prompt, and agent are different administrative objects. Do not choose a tool simply because it is broadly related to collaboration.
  • Match the outcome: distinguish configuration, access control, protection, investigation, monitoring, and lifecycle management. A service can support several activities, but the prompt usually asks for one primary outcome.
  • Honor permissions: if the scenario mentions access or sensitive data, evaluate identity, permissions, and governance before productivity features.
  • Use the least expansive answer: prefer the capability that solves the stated task without assuming broad new access, an unnecessary custom agent, or unrelated platform work.
  • Read labels carefully: AB-900 may ask about an admin center, a Microsoft Purview capability, a Microsoft Entra control, or a Copilot and agent operation. Similar wording is intentional.

Read

Read the first and third AB-900 domains in the official study guide. Then use the two Microsoft Learn paths to see how core Microsoft 365 administration, data governance, Copilot, and agents are organized. Keep a glossary in which each term has four fields: object, usual administrator, outcome, and common distractor.

Scope

For each AB-900 service named above, write one sentence beginning with “Use this when...” and another beginning with “Do not choose this when...”. The second sentence is often more valuable because it makes the boundary visible. For example, a tool for monitoring activity is not automatically the tool for changing access.

Drill

  1. A company wants to review why a user cannot sign in. Identify the identity-security concern and list the official AB-900 troubleshooting signals before choosing an action.
  2. A security team needs correlated incident evidence across Microsoft 365 workloads. Contrast Microsoft Defender XDR and threat intelligence with an audit-log review of a known user or admin action.
  3. A site has sensitive content that is accessible too broadly. Identify the SharePoint governance outcome, then separate protection, investigation, and access-management answers.
  4. A department wants an agent for a defined workflow. Identify access, creation, approval, and lifecycle as separate stages. Choose the stage the question actually asks about.
  5. A Copilot rollout needs evidence of adoption and consumption. Distinguish license assignment, pay-as-you-go billing, usage monitoring, and prompt management.

Prove

Test yourself with a mixed AB-900 set. For every answer, say the service name only after you can state the object and the requirement. If you cannot reject two plausible alternatives, return to the official objective and sharpen the boundary between the services.

Official AB-900 Learning Sources