AB-650
Microsoft 365 Certified: AI Services Administrator Associate
- DESCRIPTION
- VIDEO
- FEEDBACKS
- RELATED NEWS
AB-650 Exam Overview
The AB-650 Administering Microsoft 365 and AI Services exam validates your ability to administer Microsoft 365 tenants, workloads, and AI services while enabling secure and compliant productivity across an organization.
The exam measures whether candidates can configure, manage, secure, and govern Microsoft 365 services, Microsoft 365 Copilot, AI agents, and connected AI capabilities. Candidates must also understand how to control data access, protect organizational information, and support collaboration between users and agents.
Passing the AB-650 exam earns the Microsoft 365 Certified: AI Services Administrator Associate certification. The exam is intended for administrators working with Microsoft 365, Microsoft Entra ID, Defender XDR, Microsoft Purview, Copilot, and enterprise AI services.
CertQueen AB-650 preparation materials help candidates review the current objectives, practice certification-style questions, identify knowledge gaps, and prepare more efficiently for the official exam.
Page Contents
4. Technologies and Services Covered
10. CertQueen Preparation Materials
AB-650 Exam Information
| Exam name | Administering Microsoft 365 and AI Services |
| Exam code | AB-650 |
| Certification earned | Microsoft 365 Certified: AI Services Administrator Associate |
| Certification level | Associate |
| Question formats | May include multiple-choice, multiple-response, case study, drag-and-drop, and scenario-based questions |
| Number of questions | Microsoft does not publish a guaranteed fixed number |
| Time limit | Confirm the current exam duration during registration |
| Passing score | 700 |
| Exam fee | $165 USD in the United States; regional pricing may vary |
| Language | English |
| Delivery methods | Online proctored testing or an authorized testing center, subject to availability |
| Certification validity | One year |
| Recommended experience | Microsoft 365 workloads, Microsoft Entra ID, Defender XDR, Microsoft Purview, and Microsoft Graph PowerShell |
The passing score is based on Microsoft’s scaled scoring system. A score of 700 does not necessarily mean that candidates must answer exactly 70 percent of the questions correctly.
Microsoft may change the exam price, available languages, duration, question formats, and delivery options. Candidates should verify the current information during registration.
Who Should Take the AB-650 Exam?
AB-650 is intended for administrators who configure, manage, secure, and govern Microsoft 365 tenants, workloads, Copilot services, AI agents, and other connected AI capabilities.
Suitable candidates may include:
- Microsoft 365 administrators
- Microsoft 365 and AI services administrators
- Microsoft 365 Copilot administrators
- Microsoft Entra identity administrators
- Security and compliance administrators
- Microsoft Teams and collaboration administrators
- Enterprise application administrators
- IT professionals responsible for AI governance
- MS-102 candidates transitioning to the new certification path
Candidates should have practical experience with Microsoft 365 workloads and Microsoft Entra ID. They should also understand Defender XDR capabilities and be familiar with Microsoft Graph PowerShell.
An AB-650 candidate may collaborate with architects and administrators responsible for infrastructure, identity, security, compliance, endpoints, applications, and business workloads.
AB-650 Technologies and Services
AB-650 covers cloud services that Microsoft updates continuously. The exam is therefore not associated with one fixed software version.
Candidates should be familiar with the following technologies and services:
- Microsoft 365 admin center
- Microsoft 365 Copilot
- Microsoft 365 Copilot Control System
- Microsoft Copilot Studio
- Microsoft Agent 365
- Microsoft Entra Agent ID
- Microsoft Entra ID
- Microsoft Entra Conditional Access
- Microsoft Entra Privileged Identity Management
- Microsoft Defender XDR
- Microsoft Defender for Office 365
- Microsoft Purview
- Microsoft Exchange Online
- Microsoft Teams
- Microsoft SharePoint Online
- Microsoft OneDrive
- Microsoft 365 Backup
- Microsoft Graph PowerShell
Microsoft certification exams may include generally available features and widely used Preview features. Candidates should review the official study guide before taking the exam because cloud interfaces, product names, and administrative workflows may change.
AB-650 Exam Objectives
The AB-650 exam is organized into three domains covering Microsoft 365 administration, security and governance, and AI services.
Domain 1 – Configure and Manage Microsoft 365 Tenants and Workloads (20–25%)
This domain evaluates whether candidates can configure a Microsoft 365 tenant and manage its principal productivity and collaboration workloads.
Preparation should include:
- Configuring organizational profiles, branding, domains, security, and privacy settings
- Managing user, group-based, and pay-as-you-go licenses
- Managing Microsoft 365 Copilot, Agent 365, and Copilot Studio licenses
- Configuring Microsoft 365 Backup
- Restoring protected Microsoft 365 data
- Reviewing network connectivity insights
- Monitoring Microsoft 365 service health
- Managing Exchange Online mailboxes and shared mailboxes
- Managing Microsoft Teams, channels, owners, and members
- Configuring Copilot options for Teams meetings
- Managing SharePoint sites and permissions
- Managing OneDrive and Microsoft Search
- Preparing SharePoint and OneDrive content for Copilot
- Using SharePoint Advanced Management
- Excluding inappropriate sites from Copilot experiences
Domain 2 – Govern and Secure Microsoft 365 Tenants and Workloads (40–45%)
This is the largest AB-650 domain. It covers identity, access, threat protection, information protection, data governance, and compliance.
Preparation should include:
- Creating and managing users, groups, guests, and contacts
- Managing administrative units and Microsoft 365 roles
- Using Privileged Identity Management
- Performing bulk operations with Microsoft Graph PowerShell
- Configuring authentication methods
- Configuring self-service password reset
- Using Microsoft Entra Password Protection
- Configuring multifactor authentication
- Creating and managing Conditional Access policies
- Reviewing identity risks with Microsoft Entra ID Protection
- Configuring Defender for Office 365 policies and alerts
- Investigating email and collaboration threats
- Responding to phishing, malware, and other threats
- Configuring attack simulation training
- Planning Microsoft Purview Data Loss Prevention policies
- Managing sensitive information types and sensitivity labels
- Managing retention policies and retention labels
- Investigating DLP alerts involving Microsoft 365 and AI activities
- Using Data Security Posture Management to monitor AI-related risks
Domain 3 – Manage and Secure AI Services in Microsoft 365 (35–40%)
This domain evaluates whether candidates can prepare, configure, govern, secure, and monitor Microsoft 365 Copilot and enterprise AI agents.
Preparation should include:
- Assessing organizational readiness for Microsoft 365 Copilot
- Identifying data oversharing and excessive permissions
- Resolving data leakage and compliance risks
- Configuring web search and Copilot Search
- Managing Copilot tenant settings and release preferences
- Managing self-service purchasing for AI services
- Managing Copilot user experiences
- Configuring third-party AI providers
- Managing Microsoft 365 Copilot connectors
- Managing agent identities with Microsoft Entra Agent ID
- Assigning owners to AI agents
- Controlling agent access with access packages and Conditional Access
- Managing agent types, templates, sharing, and user access
- Using the agent registry to discover and review agents
- Publishing, installing, rejecting, and blocking agents
- Protecting organizational data accessed by AI agents
- Evaluating agent security and compliance gaps
- Monitoring Copilot and agent activity
- Monitoring AI service costs, adoption, usage, and service health
AB-650 vs. MS-102
| Comparison | AB-650 | MS-102 |
| Exam name | Administering Microsoft 365 and AI Services | Microsoft 365 Administrator |
| Certification path | Microsoft 365 Certified: AI Services Administrator Associate | Microsoft 365 Certified: Administrator Expert |
| Certification level | Associate | Used as the principal exam in an Expert certification path |
| Exam status | New Microsoft 365 and AI services exam | Scheduled to retire in October 2026 |
| Primary focus | Microsoft 365 administration combined with Copilot, AI agents, security, and AI governance | Microsoft 365 tenant, identity, security, and compliance administration |
| Tenant and workload administration | 20–25% | 25–30% |
| Identity and access | Included in the 40–45% governance and security domain | 25–30% |
| Security and threat management | Combined with identity, governance, and compliance | 30–35% |
| Compliance | Integrated with Microsoft 365 and AI governance | 10–15% |
| Dedicated AI services domain | 35–40% | No dedicated AI domain |
| Microsoft 365 Copilot | A major exam component | Not a dedicated exam domain |
| AI agents | Agent identity, access, lifecycle, registry, security, and governance | Not a principal exam objective |
| Hybrid identity | Less prominent in the published objectives | Includes Microsoft Entra Connect Sync and Cloud Sync |
| Defender coverage | Primarily Defender for Office 365 within the governance domain | Broader Defender XDR, Defender for Endpoint, Defender for Cloud Apps, and Defender for Office 365 coverage |
| Passing score | 700 | 700 |
The most important change is the addition of Microsoft 365 Copilot and AI agent administration. AB-650 expects candidates to manage AI services as enterprise resources with identities, owners, permissions, lifecycle controls, data protections, compliance requirements, and monitoring.
AB-650 is therefore a successor to MS-102 rather than a direct renaming. Candidates moving from MS-102 should retain their tenant, identity, Defender, and Purview knowledge while adding substantial Copilot and agent administration experience.
The MS-102 percentages in this comparison reflect Microsoft’s objectives updated for April 28, 2026. Older MS-102 study materials may show different percentages.
AB-650 Preparation Plan
The following six-week plan can be adjusted according to your Microsoft 365 and AI administration experience.
Week 1 – Microsoft 365 Tenant Administration
- Review tenant profiles, branding, domains, privacy, and organizational settings.
- Practice creating users, groups, guests, contacts, and administrative units.
- Study Microsoft 365 and AI service licensing options.
- Review administrative roles, service health, and network connectivity.
Week 2 – Microsoft 365 Workloads
- Practice managing Exchange Online mailboxes.
- Review Teams, channels, memberships, and Copilot meeting settings.
- Manage SharePoint sites, OneDrive, permissions, and Microsoft Search.
- Study Microsoft 365 Backup and restoration workflows.
Week 3 – Identity and Access
- Review authentication methods, SSPR, MFA, and Password Protection.
- Practice creating Conditional Access policies.
- Study Microsoft Entra ID Protection and identity risk remediation.
- Review privileged role management with PIM.
- Practice bulk operations with Microsoft Graph PowerShell.
Week 4 – Security and Compliance
- Review Defender for Office 365 policies, alerts, and investigations.
- Practice responding to email and collaboration threats.
- Study sensitive information types, sensitivity labels, retention, and DLP.
- Review Microsoft Purview tools for monitoring AI-related data risks.
Week 5 – Copilot and AI Agents
- Assess Copilot readiness and review data oversharing risks.
- Study Copilot tenant settings, search, licensing, and user experiences.
- Review Microsoft Entra Agent ID and agent access controls.
- Practice agent discovery, review, publishing, installation, and blocking.
- Study agent lifecycle, ownership, security, and compliance.
Week 6 – Monitoring and Final Review
- Review Copilot and agent usage, adoption, costs, and service health.
- Complete scenario-based practice sessions.
- Spend additional time on the 40–45% governance and security domain.
- Review every incorrect answer and return to the related objective.
- Recheck the official AB-650 study guide before taking the exam.
Original AB-650 Sample Questions
The following original questions illustrate knowledge covered by the published objectives. They are not copied from the official Microsoft exam.
Question 1
An administrator wants Microsoft 365 Copilot licenses to be automatically assigned when employees join a specific department group and removed when they leave the group. What should the administrator configure?
A. Group-based licensing
B. A retention policy
C. An attack simulation
D. A mail flow rule
Answer: A
Explanation: Group-based licensing automatically assigns and removes licenses according to group membership, reducing manual administration.
Question 2
An organization plans to deploy Microsoft 365 Copilot. An assessment identifies SharePoint sites that grant all employees access to confidential information. What should the administrator do first?
A. Enable Copilot for all users
B. Correct the excessive permissions
C. Disable Microsoft Search
D. Delete every affected site
Answer: B
Explanation: Copilot respects existing permissions. Excessive access may allow Copilot to surface confidential information to unintended users.
Question 3
An AI agent accesses protected Microsoft 365 information. The security team needs to manage the agent as an identity and apply access policies. Which capability should be used?
A. Microsoft Entra Agent ID
B. Microsoft 365 Backup
C. Exchange transport rules
D. SharePoint version history
Answer: A
Explanation: Microsoft Entra Agent ID provides identity and access management capabilities for enterprise AI agents.
Question 4
An organization must prevent users and AI services from exposing credit card numbers through Teams, SharePoint, OneDrive, and Copilot. Which solution should the administrator configure?
A. Microsoft Purview Data Loss Prevention
B. Microsoft Entra Password Protection
C. Microsoft 365 Backup
D. Microsoft Defender Antivirus
Answer: A
Explanation: Microsoft Purview DLP can identify sensitive information and apply protective controls across supported Microsoft 365 and AI experiences.
Question 5
An administrator needs to update the department property for 2,000 Microsoft Entra user accounts through a repeatable scripted process. Which tool should be used?
A. Microsoft Graph PowerShell
B. Copilot Studio
C. Microsoft Purview Audit
D. SharePoint Advanced Management
Answer: A
Explanation: Microsoft Graph PowerShell supports repeatable, scripted, and scalable administration of Microsoft 365 and Microsoft Entra resources.
Question 6
An administrator discovers an unapproved AI agent in the organization’s agent registry. The agent has not passed the company’s security review. What should the administrator do?
A. Publish the agent to all users
B. Block or reject the agent
C. Assign additional Copilot licenses
D. Create a shared mailbox
Answer: B
Explanation: The agent registry supports reviewing, approving, publishing, rejecting, and blocking agents according to organizational governance requirements.
AB-650 Frequently Asked Questions
Is AB-650 difficult?
AB-650 can be challenging because it combines Microsoft 365 administration with identity, security, compliance, Copilot, and AI agent governance. Candidates without practical Copilot or Purview experience may need additional preparation.
How many questions are on the exam?
Microsoft does not guarantee a fixed number of questions. Candidates should confirm the available exam information during registration.
How long do candidates have?
The current appointment and examination duration should be confirmed on the official scheduling page.
What is the passing score?
The passing score is 700 on Microsoft’s scaled scoring system.
How long is the certification valid?
Microsoft role-based certifications are generally valid for one year from the date they are earned.
How can the certification be renewed?
Eligible certification holders can renew by passing a free online renewal assessment on Microsoft Learn before the certification expires.
What is the retake policy?
Under Microsoft’s general policy, candidates usually wait 24 hours after the first failed attempt. A 14-day waiting period generally applies after subsequent failed attempts. Candidates are normally limited to five attempts per exam within 12 months. Verify the latest policy before rescheduling.
Is AB-650 replacing MS-102?
AB-650 succeeds MS-102 as Microsoft shifts its administration certification content toward Microsoft 365 Copilot and AI services. It is not a direct one-to-one replacement because AB-650 leads to an Associate certification and includes a substantial AI administration domain.
When will MS-102 retire?
Microsoft has announced that MS-102 is scheduled to retire in October 2026. Candidates should verify the exact deadline on Microsoft Learn.
Can MS-102 materials still be used?
Yes. MS-102 materials can help with Microsoft 365 tenants, Entra identity, Defender XDR, and Microsoft Purview. However, separate AB-650 materials are required for Copilot, Agent 365, agent identity, AI governance, and AI monitoring.
Can Preview features appear on the exam?
Microsoft exams may include widely used Preview features when they are relevant to the tested role. Review the official study guide shortly before the exam.
How are CertQueen materials updated?
CertQueen reviews its AB-650 preparation materials when Microsoft changes relevant exam objectives, administrative services, or product information. Customers receive free updates for one year from the purchase date.
Are the sample questions actual exam questions?
No. The sample questions on this page are original study questions. They support legitimate exam preparation and do not reproduce confidential live exam content.
CertQueen AB-650 Preparation Materials
CertQueen AB-650 preparation materials are organized around the official objectives and provide focused practice across Microsoft 365 administration, governance, security, Copilot, and AI agent management.
Using the preparation materials can help you:
- Review all three AB-650 exam domains.
- Understand the differences between AB-650 and MS-102.
- Strengthen Microsoft 365 tenant and workload administration skills.
- Review Microsoft Entra identity and access scenarios.
- Practice Defender for Office 365 and Microsoft Purview topics.
- Understand Copilot readiness and data oversharing risks.
- Review AI agent identity, access, lifecycle, and governance.
- Practice certification-style scenario questions.
- Identify weak areas before taking the exam.
- Develop more effective time-management skills.
Use CertQueen materials together with the official AB-650 study guide, Microsoft Learn training, Microsoft documentation, hands-on labs, and practical tenant administration experience.
Ready to begin? Review the latest AB-650 practice questions, study the explanations, and build a preparation plan around the objectives you have not yet mastered.
Start Your AB-650 Exam Preparation Today
Disclaimer
CertQueen is an independent exam preparation provider and is not affiliated with, endorsed by, sponsored by, or authorized by Microsoft Corporation.
Microsoft, Microsoft 365, Microsoft Entra, Microsoft Defender, Microsoft Purview, Microsoft Copilot, and related product names may be trademarks or registered trademarks of Microsoft Corporation. They are used on this page for identification and educational purposes only.
The sample questions on this page are independently written study questions. They are not copied from the live AB-650 exam and should not be interpreted as actual or guaranteed exam content.
Certification details are subject to change. Candidates are responsible for reviewing the current official study guide, registration requirements, exam policies, pricing, and certification terms before purchasing materials or scheduling the examination.
No training course, practice question set, or study guide can guarantee a passing result. Exam success depends on the candidate’s knowledge, practical experience, preparation, and performance during the official examination.