Microsoft 365 Certified: Microsoft 365 and AI Services Administrator Associate (AB-650) Practice Tests

Explanation

Search visibility is separate from authorization. Restricted Content Discovery stops a site from appearing in Copilot and organization-wide search, but users who already have access can still open its files directly. Restricted Access Control changes authorization by limiting access to members of a specified group. A site access review asks site owners to confirm or remove access. A data access governance report finds oversharing but does not change discovery itself.

Explanation

Attack simulation training has two dedicated roles, so you can follow least privilege. Attack Payload Author lets a user create and manage payloads that someone else can use later, but not launch simulations. Attack Simulation Administrator can create and manage every part of simulation and training campaigns, which is more than this specialist needs. Security Reader is view-only and can't author payloads. Security Operator is for running security operations and doesn't give the narrow payload-authoring permission required here.

Explanation

Tenant-wide Copilot settings are managed on the Copilot page of the Microsoft 365 admin center. That page includes the AI disclaimer, image and video generation, release preferences, self-service purchase controls, and Copilot in admin centers. The Microsoft Entra admin center manages identities, roles, and Conditional Access, not Copilot features. Purview manages data security and compliance for AI. The Power Platform admin center manages environments and Copilot Studio, not Microsoft 365 Copilot tenant settings.

Explanation

The Sharing setting in Security & privacy controls whether users can add new guests to the organization. Turning it off stops new invitations, but existing guest accounts are not deleted. The Privacy profile only publishes a privacy statement link and a privacy contact for people outside the organization. Release preferences decide who gets updates early through targeted release. Customer Lockbox controls whether Microsoft support engineers can access content, not who can invite guests.

Explanation

Agent settings separate creating, sharing, and using agents. The Sharing setting controls which users can share agents more broadly, such as with the whole organization, so it can be limited to the Agent Champions group. Allowed agent types decides which categories of agents are allowed, such as Microsoft-built, external publisher, or organization-built. User access decides who can use agents, not who can share them. Templates are predefined configurations applied to agents and do not restrict who can share.