100% Free AB-900 Practice Exam Questions (2026)

A new security engineer claims that the only realistic way to troubleshoot oversharing in SharePoint and OneDrive is to ask each site owner to review their permissions manually, because there are no built-in reports that highlight broadly exposed sites or excessive sharing. You disagree and point out that there are dedicated admin-level tools that surface oversharing patterns and can trigger site access reviews. The engineer’s claim that there are no built-in tools to help identify oversharing is correct. True or False?

Your organization has a Microsoft 365 subscription that contains a user named User1. User1 plans to leave your company in two weeks. You need to capture the activity of User1 to identify whether the user is exfiltrating data. Which Microsoft Purview solution should you use? 

An organization is rolling out Copilot and several custom AI agents. Security and compliance teams want a central place to see which AI apps are accessing sensitive data, track prompts and responses, and identify risky AI usage across multiple clouds. They also want recommendations on how to improve their overall data security posture for AI workloads.To achieve this, they should use Microsoft’s ______.

Your organization has a Microsoft 365 subscription that contains a user named User1. User1 plans to leave your company in two weeks. You need to capture the activity of User1 to identify whether the user is exfiltrating data. Which Microsoft Purview solution should you use? 

Your organization has a Microsoft 365 subscription that contains a user named User1. User1 plans to leave your company in two weeks. You need to capture the activity of User1 to identify whether the user is exfiltrating data. Which Microsoft Purview solution should you use?