AB-900 Certification Exam Guide + Practice Questions Updated 2026

Explanation:
The correct setting is Restricted site access configured with Group1. Microsoft Learn states that you can restrict access to a SharePoint site by specifying Microsoft Entra security groups or Microsoft 365 groups as the Restricted Access Control group. Microsoft also states that, after the policy is applied, a user can access the site content only if the user both already has permission to the site or content and is a member of the specified restricted access group. This exactly matches the requirement: users who currently have access to Site1 must also be members of Group1 to continue accessing the content.
The Restrict content from Microsoft 365 Copilot setting is unrelated to direct user access to the SharePoint site. That control limits whether Copilot can use site content, but it does not block users from opening the site themselves. Microsoft separately explains that Restricted SharePoint Search and Copilot restrictions are not the same as changing actual SharePoint permissions or access boundaries. So for this scenario, keep the Copilot restriction Off and configure Restricted site access with Group1.

Explanation:
The correct answer is Microsoft Graph. Microsoft documents that Microsoft 365 Copilot accesses organizational content and context through Microsoft Graph. Microsoft Graph provides the user’s work context, including items such as emails, chats, meetings, files, contacts, and calendar data, along with relationship and activity signals that help Copilot ground and rank responses. Microsoft also explains that Copilot combines organizational content with the user’s working context, such as recent chat conversations, email exchanges on a topic, and the meeting the user is currently in. Those are exactly the kinds of signals described in the question, including collaboration history and document relevance.
The other options do not fit this sentence. Microsoft Copilot Studio is used to build and customize copilots and agents. Microsoft Purview is for compliance, governance, and data protection. Microsoft Viva Insights provides workplace analytics and insights, but it is not the core service described by Microsoft as supplying the contextual signals that ground Microsoft 365 Copilot responses. Therefore, the only option that correctly completes the sentence is Microsoft Graph.

Explanation:
The correct selections are No, Yes, Yes. Microsoft documents that the Audit page in the Microsoft Defender portal can be used to search the unified audit log for user and admin actions in the organization. Microsoft also states that audit log search in the Defender portal is the same as audit log search in the Microsoft Purview portal, which means both portals can be used to review administrative actions taken in Microsoft 365.
Microsoft further explains that Microsoft Purview Audit enables organizations to search for audit records of activities that users and admins perform across Microsoft services, making it a correct tool for this requirement.
By contrast, Search & intelligence in the Microsoft 365 admin center is not the feature used to investigate administrator actions through the unified audit log. It is not Microsoft’s documented audit search tool for this purpose. Therefore, for this hotspot the right answers are No for Search & intelligence, Yes for Audit in Microsoft Defender, and Yes for Audit in Microsoft Purview.

Explanation:
The correct selections are No, Yes, Yes. Statement 1 is No because Microsoft documents tenant controls for web search on or off, but not a general Microsoft 365 Copilot setting to block only selected websites for normal Copilot responses. Microsoft also says it doesn’t recommend or support managing Copilot through selective URL or domain blocking at the network level. Website allow/block lists shown in Microsoft documentation apply to Researcher with Computer Use virtual-device settings, not to standard Microsoft 365 Copilot web grounding overall.
Statement 2 is Yes because Microsoft provides the Allow web search in Copilot policy in Cloud Policy service and in the Microsoft 365 admin center, which can disable web search for Microsoft 365 Copilot and Copilot Chat.
Statement 3 is Yes because Microsoft states that admins can block Researcher and Analyst, and agent governance includes a Block action. Microsoft also notes that for Researcher and Analyst, user scoping isn’t edited through the usual panel; availability is managed by blocking the selected agent at the tenant level.

Explanation:
The correct answer is B. the Microsoft Purview DSPM for AI solution. Microsoft documents that Data Security Posture Management for AI (DSPM for AI) in Microsoft Purview provides a central place to secure data for AI apps and proactively monitor AI use, including Copilots and agents. Microsoft also states that DSPM for AI helps organizations identify where sensitive content is used in AI
interactions, review Copilot prompts and responses, analyze usage patterns, assess exposure and oversharing risks, and get recommendations for protections such as sensitivity labels and DLP policy coverage.
The other options do not fit this requirement. Microsoft Viva Insights focuses on productivity and work-pattern analytics, not sensitive-data protection in Copilot interactions. Microsoft Security Copilot is a security assistant for analysts, not the Purview governance solution that analyzes sensitive content use in Copilot and recommends data protections. Insider Risk Management is for identifying risky user behavior, not for broad AI interaction posture analysis and protection recommendations. Microsoft specifically positions DSPM for AI as the “front door” for discovering, monitoring, and protecting AI-related data usage in Microsoft 365 Copilot.