How to Pass AB-900: A 5-Point Study Checklist

If the thought of a 45‑minute timer and 40‑something questions on Microsoft 365, Copilot, agents, security, and compliance makes your stomach tighten, you’re not alone. The AB‑900 (Microsoft 365 Certified: Copilot and Agent Administration Fundamentals) has a reputation for being deceptively broad—even for a “fundamentals” exam. But a clear five‑point checklist can walk you through exactly what to study, how to get the hands‑on reps that matter, and when to trust that you’re actually ready. This article won’t hand you a magic bullet, but it will show you how to pass AB‑900 by following a realistic checklist—no shortcuts, just a plan you can execute.

We’ll cover each check, explain why it matters, and point you to official resources and practice tools that have helped other IT professionals pass on their first attempt. Let’s begin with the most overlooked step: knowing exactly what the exam is testing.

1. Pin Down the Exam’s Blueprint and Scope

Before you open a single study module, get a clear picture of the exam’s structure. The AB‑900 isn’t a shallow quiz on Microsoft 365 basics—it spans copilot orchestration, agent administration, data governance, and security controls. The facts you need to anchor your prep come straight from the Microsoft official study guide:

  • Official name: Microsoft 365 Certified: Copilot and Agent Administration Fundamentals
  • Exam code: AB‑900
  • Duration: 45 minutes (some candidates report being given 60 minutes)
  • Questions: 40–60, including unscored pilot items
  • Passing score: 700 on a 1,000‑point scale
  • Delivery: Online proctored or Pearson VUE test center
  • Status: Generally available since February 2026

Microsoft uses scaled scoring, so a handful of harder questions won’t sink you, but you can’t afford to be weak across entire domains. The Examinotion AB‑900 guide confirms that the unscored pilot questions don’t count against you, so if you encounter something that feels completely foreign, don’t panic—it might be one of those. The official Microsoft guidance also notes that some exam items carry different weight, which means a question about troubleshooting an agent’s knowledge source could contribute more to your score than a straightforward terminology question.

The skills measured fall into three broad areas, which I’ll paraphrase from the official study guide:

  • Microsoft 365 services and concepts, including Copilot and agent fundamentals
  • Compliance and security features in Microsoft 365
  • Administration of Microsoft 365 Copilot and agents

If you’ve passed the retired MS‑900, don’t assume this is just a refresh. One experienced Microsoft Certified Trainer noted that the AB‑900 “covers a ton of content” and that “the breadth is huge” compared to other fundamentals exams. The copilot and agent administration pieces are unique and require dedicated attention. Even seasoned Microsoft 365 admins can get tripped up because they haven’t configured agents from scratch or explored how sensitivity labels interact with Copilot responses.

Take fifteen minutes to read through the skills outline and highlight every term you’ve never configured yourself. For example, if you see “sensitivity labels” and haven’t created one in Microsoft Purview, write that down as a lab task. If “agent lifecycle” feels abstract, flag it for hands‑on practice. I watched a colleague, Priya, do exactly this exercise. She had years of Exchange and Teams admin experience, but she’d never touched Copilot Studio. Highlighting the odd terms—like “knowledge source configuration” and “agent scope”—told her exactly where to spend her lab time. Two weeks later, those topics became her strongest areas on practice tests. A simple two‑column list—what you’ve touched vs. what’s still theory—can cut weeks of wasted review time by turning vague anxiety into a concrete study map.

2. Assemble the Right Study Materials and Build a Weekly Plan

A scattered approach—watching a few YouTube videos, skimming some documentation—is a fast way to waste weeks. The second check is about gathering the right resources and giving yourself a structured plan.

Your primary source is free and directly aligned with the exam: the Microsoft Learn modules linked from the official study guide. Those modules cover each skill domain with text, short videos, and knowledge checks. They won’t go deep enough on their own, but they are the foundation you build on. The study guide specifically points to learning paths like “Introduction to Microsoft 365 Copilot,” “Manage Microsoft 365 Copilot extensibility,” and “Implement data compliance in Microsoft Purview”—start there.

Here’s a sample six‑week learning path you can adapt to your schedule:

  • Weeks 1–2: Microsoft 365 core services and identity. Get comfortable with tenant structure, user and group management, licensing, and the admin portals. Don’t skip Azure AD (now Microsoft Entra ID) basics—Copilot permissions depend on them. If you can’t explain how a group‑based license assignment works, pause and master that before moving forward.
  • Weeks 3–4: Copilot and agents. Understand how Microsoft 365 Copilot integrates with Word, Teams, Outlook, and how agents extend it. Explore the Copilot admin center and the agent lifecycle, from publish to deprecation. Pay special attention to knowledge source configuration—the exam favors scenario questions about which data an agent can access based on how it’s set up. Try to map each agent capability to a real use case, like a SharePoint site or a ServiceNow ticket queue, so the logic sticks.
  • Week 5: Security, compliance, and governance. Focus on Microsoft Purview (data classification, retention, sensitivity labels, data loss prevention), Defender XDR, and audit logging. Understand how sensitivity labels interact with Copilot—whether a Copilot can surface content depends on label settings. Spend extra time on the label‑to‑Copilot interaction because it appears in multiple forms: a user asks Copilot about a confidential document, and you need to predict whether Copilot will honor the restriction.
  • Week 6: Practice exams, weak‑domain review, and hands‑on reinforcement (more on that in points three and four).

Why this order? The exam builds from core services upward. If you don’t understand Microsoft 365 Groups or Entra ID basics, you’ll struggle with copilot permissions and agent scoping. Laying that foundation first saves you from having to double back later.

I worked with James, a help desk analyst who jumped straight into the Copilot modules because they sounded exciting. Two weeks in, he hit a wall when questions referenced conditional access policies and group‑based licensing. He reset, spent a week on identity fundamentals, and then the copilot configuration steps suddenly made sense. The detour cost him time, but the lesson stuck: you can’t build a third‑floor understanding on a first‑floor foundation. James finished the plan in seven weeks instead of six, but he passed on his first try. That extra week was far cheaper than a retake fee.

Resist the urge to collect dozens of third‑party study guides before finishing the official modules. Start with Microsoft Learn. Use the “Collections” feature inside Microsoft Learn to group related modules so you can track progress visually. Your notes become your personal hit list for deeper dives and practice tests later. And don’t skip the knowledge checks at the end of each module—they’re quick, low‑stakes questions that mirror the exam’s phrasing style and often preview concepts you’ll see again.

3. Get Hands‑On with Microsoft 365, Copilot, and Agents

Reading about the admin center and actually navigating it under pressure are two different things. This exam expects you to know where settings live, what a configuration change looks like, and how to troubleshoot a misconfigured agent permission.

Consider Mike, a desktop support tech who decided the AB‑900 would help him move into a cloud admin role. He read every Microsoft Learn module twice, but when he tried a practice test, he couldn’t recall which Purview portal held the sensitivity label settings—because he’d never opened it. Mike spun up a free Microsoft 365 developer tenant (available through the Microsoft 365 Developer Program, which grants a renewable 90‑day E5 subscription perfect for labs) and spent two weeks walking through the exact workflows mentioned in the exam outline. His practice test scores jumped from the low 60s to the mid‑80s.

The Platform Pulse Solutions AB‑900 guide captures this well: their reviewer, who passed in early 2026, urged candidates to “go beyond just the modules. Hands‑on experience with products like Microsoft Defender XDR, Microsoft Purview, and Microsoft Copilot is invaluable.” That advice echoes what many AB‑900 passers report—pure theory doesn’t stick when a question presents a real‑world scenario. You might know the definition of a sensitivity label, but if a question asks which portal to open to adjust a label’s encryption settings, you’ll either know the path from muscle memory or you’ll guess.

Your hands‑on checklist for this step:

  • Activate a developer tenant or use a corporate test environment (with permission). Don’t practice in your production tenant—you don’t want to accidentally reconfigure a live copilot agent or change a retention policy that affects real user data.
  • Build a copilot agent from scratch: create an agent in Copilot Studio, define its knowledge sources (e.g., a SharePoint site), set user permissions, and test it in Microsoft Teams. Walk through what happens when a user without permission tries to access the agent—does the error message tell you exactly where to check? Answer that same question without looking at the screen afterward; the exam will often ask you to identify the root cause from a list of possible issues.
  • Apply a sensitivity label to a document in SharePoint and verify that the copilot respects the restriction when a user queries that content. This directly tests a common exam scenario: “A user asks Copilot about a confidential document. Will Copilot answer?” Note the label’s priority and any inheritance rules because the exam often asks about label conflicts. If you can predict whether Copilot will block the answer based on the label settings, you’ve gone deep enough.
  • Navigate the Microsoft 365 admin center and Copilot admin center until you can find licensing reports, agent activity logs, and user‑level copilot access settings without searching. Try to disable copilot for a specific user and then re‑enable it—knowing those exact menu paths saves time when a question asks “where would you go to block copilot for a single user?”
  • Explore the Microsoft Learn sandbox if you can’t get a tenant. It offers free, time‑limited access to key features, enough to familiarize yourself with the interfaces. While it’s not a full‑fidelity replacement for a real tenant, it lets you click through menus and see how settings are grouped. Even a ten‑minute session inside the sandbox reinforces the UI patterns that the exam references.

These exercises take maybe eight hours total, spread across a couple of weekends. That’s a small investment for the confidence you’ll gain. When a question describes an agent that “unexpectedly can’t access SharePoint data,” you’ll know to check the agent’s knowledge source configuration because you’ve seen that exact issue in your lab. And because Microsoft often asks follow‑up questions about remediation, learning not just the cause but the exact menu path to fix it pays double. One candidate I spoke with, Elena, skipped the hands‑on work and tried to power through with flashcards alone. She failed her first attempt by eight points—the margin that a few lab‑based insights could have covered.

4. Use Practice Tests to Diagnose Weaknesses, Not Just Memorize Answers

I’ve seen too many well‑prepared candidates bomb an exam because they’d never faced a timed, multi‑choice interface before. Practice tests are your diagnostic tool—they show you where your real knowledge breaks down and how the clock pressure affects your decision‑making.

Start with a full‑length, timed practice exam after you’ve finished the official modules and done some hands‑on work. Don’t aim for a perfect score; aim for honest data. One run on an AB‑900 practice test will tell you more than a week of reading because it highlights the exact domains where you hesitate or guess. If the platform gives you a breakdown by sub‑topic—say, scoring 60% on “governance” and 90% on “identity”—you treat that as your study directive for the next few days.

Here’s the practice testing rhythm I recommend:

  1. Take a timed practice exam without pausing. Treat it like the real thing. Mark questions you’re unsure about and move on—you can review them later if the platform allows. Pay attention to whether you run out of time or finish with ten minutes to spare; both extremes need adjustment. If you’re racing through with minutes left, you might be reading too quickly and missing subtle qualifiers like “except” or “not.”
  2. Review every incorrect answer slowly. The explanation matters more than the letter. When a rationale clicks, write a one‑sentence note in your own words. For example, “An agent’s knowledge sources define which SharePoint sites it can search; permissions only control user access, not the agent’s data scope.” If you keep getting tripped up by the same concept across different phrasings, go back to the official module and re‑read that exact section.
  3. Spot your weak domains. If you miss four out of five questions about data lifecycle management in Purview, that’s your focus for the next two days—not another full practice test. Re‑open the official module on that topic and work through the knowledge checks again. Create a quick set of flashcards for the key terms you consistently confuse.
  4. Vary your practice with adaptive tools. If the platform you’re using offers an AI tutor that can expand explanations, increase difficulty, or generate fresh question variants, take advantage of it. Tools that rephrase a question you got wrong and ask it from a different angle force you to understand the underlying concept instead of recognizing the original wording. That kind of reinforcement builds the real recall that scaled scoring rewards. I’ve seen learners improve their weakest domains by 20 percentage points just by working through five or six AI‑generated variant questions on a single topic.
  5. Wait a day or two and take a second practice test. Spacing out attempts reduces the risk of memorizing answers. Aim for a consistent score of 80% or higher before you schedule the real exam. If you hit 80% twice across two different practice tests, you’re in a strong position—but don’t let that make you complacent. The real exam often feels slightly more difficult because of the pressure, so a small buffer is smart.

The big pitfall here is treating practice tests as a memory exercise. If you recognize an answer because you’ve seen the question before, you’re training recognition, not recall. Force yourself to explain why the other choices are wrong. That habit will serve you on exam day when Microsoft phrases a familiar concept in an unfamiliar way. For instance, a question about “agent scope” might appear on your practice test as a straightforward definition, but on the real exam it could show up as a troubleshooting scenario with five‑step answer choices—knowing the logic behind the correct step matters more than recognizing the term.

Also, remember that the exam includes unscored pilot questions. If a question feels completely out of left field, give it your best shot and keep moving—time is your most precious resource in a 45‑minute sprint. The goal isn’t a perfect score; it’s that 700 on the scaled report. Every domain you solidify through deliberate practice pushes you closer to that bar, and the practice test results tell you exactly where to invest your final study hours.

5. Rehearse Test‑Day Conditions and Lock In the Logistics

The last check before you book: can you replicate the actual test environment well enough that nothing surprises you? That means the technical setup, the clock, and your mental state.

Logistics to button down:

  • Schedule through Pearson VUE. Decide between online proctored or a test center. For at‑home testing, run the system test at least 48 hours before. Microsoft’s exam sandbox lets you experience the exam UI so you’re not fumbling with the “Mark for Review” button on test day. The sandbox isn’t full‑fidelity, but it demystifies the layout—where the question counter sits, how the navigation panel works, and what the review screen looks like at the end.
  • Request accommodations if needed. Microsoft allows extra time for candidates whose preferred language isn’t available—review the study guide’s accommodation section early. The same section covers assistive devices and modified exam experiences, so if you have a documented need, file the request as soon as you book.
  • Check your ID and workspace rules. Online proctoring is strict: a cluttered desk or a second monitor will get your session revoked, and you can’t have anyone else in the room. If you’re at a test center, know the check‑in procedure: lockers for personal items, photo and signature capture, and a quiet room with assigned workstations. Arrive 30 minutes early so a surprise traffic delay doesn’t eat into your exam time.

Now, the dress rehearsal. A few days before your scheduled exam, block off 45 uninterrupted minutes and take a practice test exactly as you would on exam day: same time of day, same room (or a similar quiet space), no phone, no notes. If you’re going to a test center, visit the location beforehand so parking and check‑in don’t add stress. I once worked with a candidate who drove 45 minutes to a test center only to discover the building had multiple unmarked entrances—he started the exam five minutes late and rattled. A quick scouting trip the weekend before could have prevented that.

Time management during the exam: with roughly 45 scorable questions in 45 minutes, you’ve got about one minute per item. That’s fast but manageable if you’re disciplined about skipping. If you’ve read a question twice and still aren’t 70% sure, mark it for review and move on. You can circle back if time permits, but you don’t want to lose easy points later because you burned three minutes on one head‑scratcher. Before you hit “end exam,” scan the review screen for any marked items you haven’t revisited.

Consider Sarah, a sysadmin who did everything right in her studies but booked her exam for 8 a.m. without doing a morning test run. She showed up tired, forgot to use the restroom beforehand, and spent the first ten minutes distracted. She still passed—barely—but she later said a single full‑length wake‑up simulation would have saved her a lot of stress. Don’t be Sarah. Do one dry run at the same hour you’ll sit for the real thing, and try a simple breathing exercise: before you click “start,” take three slow breaths. It sounds trivial, but it signals to your brain that you’re in control.

After the exam, you’ll get your score immediately (unless you’re in a beta window, which is unlikely now that the exam is generally available). A passing score of 700 or higher earns you the Microsoft 365 Certified: Copilot and Agent Administration Fundamentals credential. That certification renews annually through a free online assessment on Microsoft Learn, so mark your calendar once you earn it. If you don’t pass, note that Microsoft allows a retake after 24 hours for fundamentals exams—but the retake fee still applies, so thorough prep is far cheaper than a rushed second attempt.

AB‑900 Questions Worth Asking Before You Book

Is the AB‑900 harder than the MS‑900?
Many who’ve taken both say yes. The MS‑900 tested broad Microsoft 365 knowledge; the AB‑900 layers on copilot orchestration, agent administration, and security controls that require deeper product familiarity. The breadth, not the depth, catches people off guard. Even experienced admins who breeze through the core Microsoft 365 sections can stumble on questions that ask them to choose the correct PowerShell cmdlet to view agent telemetry.

Do I need to be a developer to understand agents?
No. The exam focuses on admin tasks: creating, publishing, and securing agents, not writing code. You’ll need to know how agents source data from SharePoint or ServiceNow, but you won’t be asked to build a custom connector from scratch. If you can configure a knowledge source and set user permissions through the admin center, you’re on solid ground.

How long does a typical candidate study?
Four to six weeks of part‑time effort is realistic if you have some Microsoft 365 admin experience. If you’re brand new to the ecosystem, add two more weeks for the core services ramp. Consistency matters more than total hours—daily 30‑minute sessions beat five‑hour weekend cram sessions because your brain retains information better with spaced repetition.

Can I rely on practice tests alone?
Not effectively. Practice tests are a measurement tool, not a teaching tool. Pair them with Microsoft Learn, hands‑on labs, and targeted review of your weak areas. Relying on practice tests alone tends to produce false confidence because you never learn why an answer is correct; you just learn the pattern of the questions you’ve seen. The real exam will rephrase concepts enough that pattern recognition alone won’t carry you to a 700.

Does the certification expire?
Yes. Microsoft associate, expert, and specialty certifications expire annually. You can renew for free by passing a short online assessment on Microsoft Learn—no retake of the full exam required. Set a reminder 90 days before your anniversary so you don’t miss the window.

What roles does the AB‑900 help with?
It’s designed for IT administrators, support engineers, and anyone who manages Microsoft 365 environments. Roles like Microsoft 365 administrator, cloud support specialist, and help desk manager often list this certification as a preferred qualification. As AI‑powered tools become standard in enterprise environments, the ability to administer copilot and agents is shifting from “nice to have” to “expected,” and the AB‑900 signals that you have those foundational skills.

Practice Tools for Your Next Certification Goal

Start a free practice exam on ExamJungle

Get started