Microsoft 365 and AI Services Administrator Associate (AB-650)

B is correct.

Explanation: A communication site is built to broadcast to a broad audience and does not have an associated Microsoft 365 group. Permissions are managed directly through the site's built-in Owners, Members, and Visitors groups. Adding employees to the Visitors group grants Read permission, ensuring they can only view announcements while the small group of owners manages what gets published.

A is incorrect: A team site connects to a Microsoft 365 group, which conflicts with the requirement for direct permissions and no connected group.

C is incorrect: Group members on a team site can co-author content, and the scenario requires that most employees should only view the announcements.

D is incorrect: The Members group has Edit permission, so employees could add, change, and delete content that they are only supposed to read.

C is correct.

Explanation: The AI Adoption score measures how often people use qualifying features, based on qualifying active days over the previous 28 days. A higher score can show more regular use. However, it does not establish time savings, better work, or prove that the training session caused the change.

A is incorrect: A later increase is a reason to investigate further. Other changes such as new licenses, outages, or seasonal workloads could also explain it.

B is incorrect: The score measures the frequency of use. Establishing time savings requires other information, such as feedback from the teams using Copilot.

D is incorrect: AI Adoption does not currently honor those exclusions or the people-experience opt-out. It calculates the score across all Copilot-licensed users in the tenant.

D is correct.

Explanation: The logo in the top navigation bar belongs to the Microsoft 365 organization theme, not the sign-in page. You configure this under Organization profile in the Microsoft 365 admin center. Customizing the organization theme currently requires the Global Administrator role, rather than the Organizational Branding Administrator role.

A is incorrect: Language-specific branding overrides the default sign-in page for a specific browser language. It does not affect the signed-in top navigation bar experience.

B is incorrect: The Domain Name Administrator role manages the custom domain lifecycle. It does not provide the permission required to customize the organization theme.

C is incorrect: Sign-in text appears on the sign-in form during authentication. This is a completely different surface from the signed-in top navigation bar logo.

C is correct.

Explanation: The pilot team already has eligible Chat access, so the missing piece is funding for supported declarative-agent consumption. A pay-as-you-go billing policy scoped to the pilot group and connected to Chat funds that usage through the existing Azure scope without requiring a separate per-user product license.

A is incorrect: the Microsoft 365 Copilot add-on is a per-user product entitlement and is not part of this request or a funding control.

B is incorrect: maker authorization permits building agents in Copilot Studio, and this pilot team only needs to run a published declarative agent.

D is incorrect: Microsoft Agent 365 addresses observation, governance, and security for agents, and it does not fund agent consumption or create identities.

D is correct.

Explanation: Restricted Content Discovery does not take effect immediately, as update latency depends on site size and index propagation. Furthermore, users can still discover content they own or recently interacted with. RCD preserves direct access for authorized users, so the saved URL working and the Copilot citation do not establish that the setting failed.

A is incorrect: RCD does not revoke access or change permissions. It limits broad discovery, and authorized users can still open a saved URL to access content.

B is incorrect: RCD does not remove content from the search index. It limits organization-wide discovery after index propagation, but preserves access for authorized users.

C is incorrect: RCD applies to a selected SharePoint site and is not supported for OneDrive sites, which contradicts the claim presented in this option.

B is correct.

Explanation: A full SharePoint restore can use the original URL or a new location. Choosing a new location lets Finance inspect or retrieve the recovered content without replacing the live version. Restoring to the original URL would replace the scoped live content and metadata with the selected prior state.

A is incorrect: Restoring to the original URL replaces live content and metadata, which Finance wants to avoid until it has inspected the recovered content.

C is incorrect: Version history helps recover individual item versions and is not a tenant-scale recovery plan, so it does not return a whole site.

D is incorrect: Legal holds preserve content for investigation and eDiscovery rather than returning content to active use, so they do not restore a site.

C is correct.

Explanation: The Domain Name Administrator role grants permission to add, verify, update, and delete custom domains. It also provides read-only access to directory objects that reference a domain. This role covers the required domain lifecycle tasks without unlocking unrelated password resets or security and compliance changes.

A is incorrect: Global Administrator can manage domains, but it also permits password resets and security changes that this specific delegation explicitly excludes.

B is incorrect: User Administrator belongs to the identity family for users. It does not grant the permissions required to add, verify, or delete domains.

D is incorrect: Compliance Administrator covers data governance and regulatory controls. These permissions are unrelated to the domain lifecycle tasks the colleague must perform.

A is correct.

Explanation: Restricted Access Control requires a user to belong to an allowed group and to have an underlying SharePoint permission. A user outside the allowed groups is blocked even if they have a previously working sharing link. This enforces access for the former member while allowing the current deal team to open the site.

B is incorrect: Restricted Content Discovery limits broad discovery but preserves direct access, so the former member could still open the site using the saved link.

C is incorrect: Restricted SharePoint Search is a legacy discovery control that does not change permissions or direct access, and its new enablement has been blocked.

D is incorrect: External sharing settings govern access from outside the organization and do not block an internal former member who already holds a working link.

C is correct.

Explanation: The Helpdesk Administrator role can view Service Health and set up notification preferences, so Global Administrator is not needed. Incident notifications cover active problems affecting availability. Each admin can register up to two email addresses, which allows routing alerts to both the lead and a shared mailbox.

A is incorrect: Global Administrator carries access the task does not need, and one address does not cover both the lead and the shared mailbox.

B is incorrect: Daily manual checks can miss issues flagged between visits. Notifications are what deliver incidents to the inbox as soon as Microsoft posts them.

D is incorrect: Advisories cover lower-impact issues, so advisory-only notifications would not report the active problems affecting service availability that the lead needs to monitor.

C is correct.

Explanation: The custom notification domain setting applies to supported system notifications, such as Teams missed-activity messages. However, OneDrive and SharePoint one-time passcodes continue to use the default no-reply@notify.microsoft.com address. Choosing a custom notification domain does not automatically rewrite every single message sent by Microsoft 365.

A is incorrect: While missing DNS records affect email readiness, the evidence states that one-time passcodes keep the Microsoft sender regardless of the custom domain setup.

B is incorrect: The custom notification domain setting can take up to 24 hours to take effect. The evidence provides no 72-hour delay for one-time passcodes.

D is incorrect: Ordinary user-to-user email remains completely unchanged by this setting. The custom domain configuration only applies to supported system notifications sent by products.

A is correct.

Explanation: A WSS finding means WebSocket connections to the reported domain failed. Microsoft Copilot requires WSS connectivity to copilot.cloud.microsoft. The investigation should focus on proxy, firewall, timeout, and routing settings along the connection. You should then rerun the connectivity test after identifying and correcting the underlying cause.

B is incorrect: Network tests do not include user identities or licensing information, so the finding does not establish an individual licensing cause for the connection failure.

C is incorrect: Network tests do not include device details, so the finding does not establish an individual device state as the cause of the connection failure.

D is incorrect: Mailbox permissions are unrelated to failed WebSocket connections to a documented Copilot domain, so investigating them would not address the network finding.

B is correct.

Explanation: A shared mailbox stores up to 50 GB in its primary mailbox without a license. Because this primary mailbox holds 72 GB, it exceeds that free storage limit. Exchange Online Plan 2 raises the primary limit to 100 GB, so you must keep or assign it on the backing account.

A is incorrect: The backing account anchors the shared mailbox and must be kept. Removing the license leaves the 72-GB primary mailbox unlicensed.

C is incorrect: Removing the license is allowed only when the primary mailbox is below 50 GB and needs no archive or hold features.

D is incorrect: Plan 1 with Archiving supports archive and hold needs but does not raise the primary mailbox limit to 100 GB.

C is correct.

Explanation: An internal relay domain can have known recipients in Microsoft 365 and other recipients on an organization's own mail system. To ensure mail reaches the on-premises server, relaying unknown cloud recipients requires an outbound connector from Microsoft 365 to that specific destination system. This matches the hybrid routing requirement.

A is incorrect: For an authoritative domain, every valid address is a recipient object in Microsoft 365, and mail for unknown recipients is rejected.

B is incorrect: The MX record directs incoming mail to Microsoft 365 but does not relay unknown recipients. An outbound connector is required.

D is incorrect: An authoritative domain rejects unknown recipients, so a connector would not make this domain relay mail to the on-premises system.

B is correct.

Explanation: Configuring Chat pay-as-you-go requires both a supported Microsoft 365 role and Azure rights. The Billing Administrator, AI Administrator, or Global Administrator role satisfies the Microsoft 365 requirement. Owner or Contributor rights on the selected Azure subscription and resource group satisfy the Azure side of the setup requirement.

A is incorrect: the License Administrator role alone is not sufficient, and Azure ownership does not replace the required Microsoft 365 administrator role.

C is incorrect: the Groups Administrator role is a license-assignment role and is not supported for configuring Chat pay-as-you-go billing policies in the tenant.

D is incorrect: both Microsoft 365 roles and Azure rights are strictly required, and only the specifically listed Microsoft 365 administrator roles qualify.

B is correct.

Explanation: A private channel limits participation to selected members of the host team, which satisfies the sensitive membership requirement. It also provisions a dedicated SharePoint site behind the scenes. This architecture ensures its files are kept completely separate from the parent team's main document library.

A is incorrect: A standard channel is visible to every team member and shares the team's SharePoint site and document library, violating the constraints.

C is incorrect: A shared channel is for selected people inside or outside the host team. This requirement is strictly limited to host team members.

D is incorrect: A standard channel stores files in a folder in the parent team's library, so it does not provide a dedicated, separate site.

D is correct.

Explanation: An Azure Cost Management budget only sends an email alert and does not enforce a spending limit or stop consumption. Disconnecting the billing policy from Chat stops funding through that policy. The change can take up to two hours to take effect, and usage that already occurred still bills.

A is incorrect: lowering the budget amount does not change behavior, because a budget only sends an email alert and never enforces a limit.

B is incorrect: the Available to setting controls who can find and install the agent, and it does not disconnect funding from the policy.

C is incorrect: the 24-hour delay applies to billed amounts appearing, and waiting does not stop the usage from continuing to be funded.

B is correct.

Explanation: Successful ownership verification only proves that the organization controls the domain. Service configuration is a separate step. You must add an MX record to direct incoming email to the mail service. Ensure you create the required user accounts and mailboxes before changing the MX record.

A is incorrect: Selecting the default domain determines the domain initially selected when creating new users. It does not route any incoming email messages to the service.

C is incorrect: Ownership is already verified using the TXT record. A second verification method does not configure mail routing or the required service records.

D is incorrect: You cannot remove the tenant's initial onmicrosoft.com domain. Furthermore, removing a domain does not route incoming email to the newly verified custom domain.

C is correct.

Explanation: User.ReadUpdate.All is the least-privileged delegated permission for updating general user properties such as a department change. Reusing a CSV loop does not make permissions interchangeable, so the administrator must disconnect and reconnect with the specific scope that authorizes the update operation before running the cmdlet.

A is incorrect: User.Create authorizes creating workforce users only, so it does not cover updating properties of existing accounts in a subsequent run.

B is incorrect: User.ReadBasic.All is the least-privileged permission for reading basic user properties, so it cannot authorize an update operation for the department.

D is incorrect: User.ReadWrite.All is the permission required for deleting users, and it grants more access than the general department update requires under least privilege.

A is correct.

Explanation: Guest Inviter is the least-privileged Microsoft Entra role for inviting an external guest, ensuring the coordinator does not receive broader administrative rights. It authorizes the invitation only. The owner of the Teams team decides who gets access to it, so the owner must grant the guest access separately.

B is incorrect: Redemption connects the guest's sign-in identity to the guest account, but it is not itself a grant to a Teams team.

C is incorrect: Guest permission levels control directory visibility for the external user and do not grant access to a Teams team, SharePoint site, or application.

D is incorrect: Allow and deny domain lists only limit which external domains can receive invitations, and they do not authorize access to a specific resource.

A is correct.

Explanation: User impersonation is detected by an anti-phishing policy that protects the sender identity. The policy checks the display name and email address combination, then applies the configured action. You must separately set that action to quarantine, because the protected entity and detection condition do not themselves specify the action.

B is incorrect: Anti-spam thresholds use bulk-mail signals, sender reputation, and content patterns. They do not evaluate a display name for user impersonation.

C is incorrect: The common attachments filter blocks specific file types on attachments, so it does not detect a display-name spoof in a message.

D is incorrect: Quarantine policies control what recipients can do with quarantined messages. They do not detect impersonation or quarantine the message.

D is correct.

Explanation: A blank device ID means the event did not carry device information. It does not mean Intune marked the device noncompliant. Chrome 111 or later needs CloudApAuthEnabled or the supported extension, and private browsing or disabled cookies can also make the device check fail. You must verify these prerequisites.

A is incorrect: Intune shows Compliant. A blank value means the browser did not pass device identity to Microsoft Entra, not that the device is noncompliant.

B is incorrect: What If has a client-app category input but no Edge-versus-Chrome selector, so it cannot reproduce or confirm a browser-specific runtime result.

C is incorrect: A Temporary Access Pass is for onboarding and recovery. It does not supply device identity to the browser or fix a missing device claim.

A is correct.

Explanation: Exact data match narrows matches to values present in a securely hashed reference table. Because the roster is a known, fixed list, EDM confirms specific values instead of only a format. Actual precision still depends on the schema, proximity settings, and test results, so Relecloud must validate it.

B is incorrect: Keywords and regular expressions recognize a shape, so they cannot confirm that a number is actually in the Woodgrove Bank roster.

C is incorrect: Trainable classifiers learn from examples and suit free-form content with varied structure, not a fixed list of known values like an account roster.

D is incorrect: Document fingerprinting is a supported auto-labeling detection method, but it is not the technique used for matching against a fixed, enumerable list.

C is correct.

Explanation: Applicable Conditional Access policies combine with AND logic. The MFA policy applies to all client apps, which includes the legacy client Exchange ActiveSync. Legacy authentication clients cannot present MFA claims, so the grant control cannot be satisfied and the sign-in is blocked by the enforced policy.

A is incorrect: The device policy is Not applied, but the MFA policy still applies to the session, and all applicable policies must be satisfied.

B is incorrect: Legacy authentication clients cannot present MFA or device claims, so no prior token claim can satisfy the MFA requirement in this specific scenario.

D is incorrect: The device policy selects only modern clients, so it does not apply to the legacy sign-in. The block comes entirely from the MFA policy.

A is correct.

Explanation: Passkey (FIDO2) has its own Include and Exclude targeting, so you scope it to the engineering group without changing other methods. When a user is in both an included and an excluded group for the same method, the exclusion wins, so the engineer can't register until the overlap is resolved.

B is incorrect: Include does not take priority. For the same method, the exclusion wins, so the engineer in both groups loses passkey registration.

C is incorrect: Including All users opens passkey registration to every account in the tenant, which the requirement forbids, and it does not override the exclusion.

D is incorrect: Authenticator is already enabled tenant-wide. Scoping it does not give a passkey option, and enabling a method does not require users to use it.

C is correct.

Explanation: When no specific approvers are named, active Privileged Role Administrators and Global Administrators become the default approvers. The fallback depends on an active assignment because eligibility alone is not enough. If none holds an active assignment, no approver exists, and administrators can be locked out of the roles needed to correct it.

A is incorrect: The fallback mechanism depends strictly on an active assignment, meaning eligible-only administrators do not become default approvers for the activation request.

B is incorrect: Requiring approval does not convert eligible assignments to active assignments automatically. The user must still activate the role, and approval is still required.

D is incorrect: The activation maximum duration controls how long an approved activation lasts, but it does not supply an approver or bypass the approval requirement.

B is correct.

Explanation: Scope and method readiness are separate conditions. Group2 is nested in Group1, so the user is already in scope. The user has only one registered method, which does not meet the current two-method requirement, so the user must register another eligible method before resetting.

A is incorrect: Microsoft Entra supports nested groups for SSPR, so enabling Group1 already includes Group2 members, and no scope error was reported by the user.

C is incorrect: A temporary block follows failed identity-proof attempts within defined limits. Nothing in the scenario indicates failed attempts, and the registration shortfall explains the failure.

D is incorrect: Lowering the requirement is not the correct fix. A policy change also does not automatically reenroll users or prompt them to add methods.

D is correct.

Explanation: A retention label applies to individual items, so it can mark case files for seven years while the site keeps its three-year policy. An auto-apply label policy applies the label automatically by conditions such as a sensitive information type, so no one has to tag files manually.

A is incorrect: A seven-year site policy over-retains everything in the site. A shorter label cannot shorten an active retain action from the container policy.

B is incorrect: A published label policy only makes the label available for manual application, which depends on someone remembering to apply it to files.

C is incorrect: A container-level policy cannot give specific records longer retention, and a second three-year policy does not create the required seven-year period.

B is correct.

Explanation: Opening encrypted content requires the VIEW usage right, but Copilot also requires the EXTRACT usage right to use that content in a response. If the sensitivity label restricts extraction, the user can open the file in Word while Copilot cannot ground a response in it at all.

A is incorrect: The user successfully opened the protected case file in Word, which confirms that the VIEW usage right is already granted to them.

C is incorrect: A Groups & sites label protects the container, is not displayed in Office apps, and does not explain a file-level extraction result.

D is incorrect: Label rank determines which label Copilot displays and inherits across multiple sources, not whether it can extract protected content for a response.

D is correct.

Explanation: Group-based licensing does not support nested groups, meaning only first-level users in the All Engineering group receive its assigned licenses. While Conditional Access applies to nested users and groups, the nested users still require first-level membership in the licensed group or a separate group-based license assignment.

A is incorrect: Group-based licensing assigns licenses only to first-level users and does not cascade through a nested group to reach the new hires.

B is incorrect: Microsoft 365 groups cannot nest inside anything and cannot nest with security groups, so converting the group type does not resolve the licensing issue.

C is incorrect: Conditional Access already reaches nested users successfully, and removing the policy does not change how group-based licenses are assigned to the members.

A is correct.

Explanation: Adding a group to an administrative unit brings only the group object into the management scope, not its members. The technician can reset passwords only for in-scope nonadministrator users. To fix this, the administrator must add the users directly or use dynamic user membership to place them in scope.

B is incorrect: A dynamic administrative unit supports exactly one object type, and a dynamic device rule matches devices rather than the required user accounts.

C is incorrect: A tenant-wide assignment reaches beyond the specific office, which defeats the purpose of scoping the delegated role to one slice of the directory.

D is incorrect: Group members are two steps removed from the administrative unit, so the group's presence does not automatically bring its members into management scope.

D is correct.

Explanation: Only an Agent 365 policy can evaluate a supported Agent 365 interaction in Teams. The agent instance must be scoped directly or through a security group. The workload, direction, and rule conditions must all match for the data loss prevention policy to act and generate an alert.

A is incorrect: The Copilot location does not implicitly cover all Agent 365 interactions. It governs supported Copilot prompt, web-search, email, and grounding scenarios.

B is incorrect: Agent messaging is not a generic data loss prevention location, so it cannot be added to the custom Copilot policy directly.

C is incorrect: A matching SIT alone does not establish that a policy evaluated the activity. Scope, workload, conditions, and alert configuration must align.

C is correct.

Explanation: An applicable preset is evaluated before custom anti-spam policies, so the Standard preset still governs the finance group. Excepting the group from the preset for the anti-spam feature lets Defender for Office 365 reach custom anti-spam policies. Priority then chooses among the custom policies that match the group.

A is incorrect: Priority orders only custom policies of the same feature and cannot outrank an applicable preset, so changing the number does nothing here.

B is incorrect: Impersonation settings belong to anti-phishing policies. Adding them to an anti-spam policy does not change which anti-spam policy applies to the group.

D is incorrect: A second custom policy still sits below the applicable Standard preset, so its priority 0 cannot override the preset's anti-spam settings.

C is correct.

Explanation: The Copilot location is available only in the Custom template, and selecting it automatically disables every other location in that policy. Exchange coverage therefore has to stay in a separate policy. Using a custom Copilot-only policy alongside the existing Exchange policy meets both requirements without creating a conflict.

A is incorrect: Selecting the Copilot location disables every other location in the policy, so Exchange cannot be selected alongside it in one policy.

B is incorrect: An Exchange policy does not cover Copilot prompts, and prompt DLP evaluates only text entered directly, not the uploaded file contents.

D is incorrect: Adding SharePoint and OneDrive is not possible in the same policy, because the Copilot selection disables every other location automatically.

D is correct.

Explanation: When policies conflict on a setting, only the highest-priority policy's setting applies to that user, and the highest order number wins. Moving the justification policy up on the Label policies page gives it the higher order number. Its requirement then applies correctly to the finance users covered by both policies.

A is incorrect: Overlapping policies give users the union of labels, and removing a label does not change which policy's setting wins for the user.

B is incorrect: Settings never combine or average across overlapping policies, so rewriting the lower-priority policy cannot create a merged result for the finance team.

C is incorrect: Label-list priority governs downgrade detection and auto-labeling match resolution, not which policy's settings apply to a user when policies overlap.

C is correct.

Explanation: For a low-adoption observation, you must state the metric and data-through time, name at least two plausible explanations, and request evidence that separates them. Then select one scoped action and define the follow-up metric, cohort, and observation window. An organizational message suits only a diagnosed awareness gap.

A is incorrect: The absence of a posted issue means only that no matching issue is posted. It does not prove end-to-end Copilot health.

B is incorrect: An organizational message raises awareness, but it does not fix a license, incident, report-latency, workflow, or quality problem on its own.

D is incorrect: The three pillars organize governance and are not a single status screen. Changing them does not diagnose the cause of low adoption.

B is correct.

Explanation: Selecting the agent identity blueprint principal in the agent picker provides blueprint-level scope. This scope covers current and future child agent identities after the policy propagates and their fresh token requests are evaluated. A policy applied directly to one identity covers only that specific identity.

A is incorrect: Targeting each identity leaves every new agent outside the policy until an administrator adds it, creating the exact coverage gap you want to avoid.

C is incorrect: The legacy service principal remains a separate policy subject. Blueprint scope applies to the new child agent identities, not to the legacy principal.

D is incorrect: Targeting the blueprint does not cover agent user accounts. Furthermore, targeting only user accounts fails to protect the underlying agent identities requesting resource access.

C is correct.

Explanation: Exceptions can occur due to missing information, security risks, or agents that are no longer required. Because this specific exception is caused by missing platform and owner information, you must select Assign owner. Choosing the owner and platform supplies the missing information and resolves the exception while keeping the required agent.

A is incorrect: Blocking an agent applies to agents that present security risks. This exception stems from missing information, rather than an identified security risk.

B is incorrect: Deleting an agent applies when an agent is no longer required. Because this agent is still required, deletion would remove it unnecessarily.

D is incorrect: Retiring an agent is an action taken for agents that violate policy. This agent only has missing information and does not violate policy.

B is correct.

Explanation: Deferred release delays supported, deferred-capable updates by 30 days for most users. Group exceptions use a Microsoft Entra security group, so assigning the pilot group to Standard release gives those users generally available features first. The 40 users are well under the 100-user limit for exceptions, making this the correct configuration.

A is incorrect: Frontier is managed through Frontier controls and is not selectable in the General Availability setting, which offers only Standard or Deferred.

C is incorrect: Standard for the wider workforce gives no 30-day delay, and a Deferred exception would slow the pilot users instead of providing early access.

D is incorrect: Frontier gives pre-general availability access, not generally available features, and the pilot group needs the Standard exception to validate features early.

B is correct.

Explanation: Audit logs are reviewed in the Microsoft Purview portal. From the Security tab, you select Review under Microsoft Purview protections, and then use Audit > Search with a date range and search name. These records show exactly who created, changed, published, or deleted the agent.

A is incorrect: Agent identities in Microsoft Entra manage permissions and access packages. They are not used to search audit logs of agent activity.

C is incorrect: The agent Map shows clusters of agents by platform to select risky agents to block. It does not display audit history.

D is incorrect: The Requests tab lists pending agent requests for review and approval. It does not provide searchable audit logs for agent activity.

B is correct.

Explanation: The evidence establishes that Microsoft Purview Audit reports individual events for compliance investigators. A CopilotInteraction search returns the user, event time, workload, AppHost, and AppIdentity. Setting a UTC range keeps the search scoped to the specific interaction in question, which the other report sources cannot provide at the required event level.

A is incorrect: The Copilot Dashboard reports adoption and aggregate work patterns, not individual interaction events with an app host and event time.

C is incorrect: The Microsoft 365 admin center report shows license readiness and basic activity counts, not per-event records for a single interaction.

D is incorrect: Microsoft Foundry monitoring covers resources that Foundry operators own, not Microsoft Copilot interaction events recorded for a compliance investigation.

C is correct.

Explanation: A failed or missing check is a no-go. The team must stop assigning licenses to the next group, hold the rollout at its current population, and return to validate until the evidence closes the gap. The denied-user test failing shows the control does not match the intended audience.

A is incorrect: Positive sentiment alone does not pass the gate, and the access test result must match the intended audience before expansion.

B is incorrect: Expansion is allowed only after validation meets its thresholds, so licensing the next group first skips the required validation gate.

D is incorrect: A pilot supports conclusions only about its selected users and content, not tenant-wide access correctness for the entire organization.

C is correct.

Explanation: An agent's user account is an optional 1:1 account paired with an agent identity. It is needed when a system such as a Teams channel strictly requires a user object. Both objects exist side by side, and each does a job the other cannot.

A is incorrect: A blueprint principal records the blueprint's tenant presence and audit object. It does not replace the agent identity or provide a user object.

B is incorrect: An agent identity has no credentials of its own. The blueprint holds credentials, and this action does not create a user object.

D is incorrect: An agent identity is already a special service principal. Converting it to a standard one does not satisfy the strict user object requirement.

C is correct.

Explanation: The User access setting controls who can use agents and supports staged rollouts by security group. When you select Specific users and groups and add the Procurement group, users who are restricted can't view or use any agents in the store. This ensures only authorized users have access.

A is incorrect: Allowed agent types limits which kinds of agents users can view, such as Microsoft or external, not which users have access.

B is incorrect: Sharing controls who can share agents with others, and does not block users from viewing or using agents in the store.

D is incorrect: A policy template applies security policies during activation or publication, and does not restrict which users can access agents.

C is correct.

Explanation: Cloud Policy controls Cowork web-search behavior, while a spending policy that selects Cowork controls access. Setting the web-search policy without adding the group to such a spending policy changes web search and leaves Cowork access unchanged. This ensures no usage-based charges are authorized for the pilot group.

A is incorrect: A spending policy is an access control. A user in its scope can use Cowork and generate charges even when the credit limit is small.

B is incorrect: Cowork is no longer managed there. The legacy agent entry configuration has no effect on access or on this web-search policy.

D is incorrect: Cloud Policy applies settings to user objects rather than devices. A device-only group does not provide a valid user scope for this policy.

B is correct.

Explanation: Agents built on Microsoft products such as Copilot Studio are integrated automatically and already include agent identity information. Agents built on non-Microsoft platforms such as Amazon Bedrock must be registered in the Agent Registry to get an agent identity. Therefore, you only need to register the Amazon Bedrock agents to ensure both sets are managed.

A is incorrect: Copilot Studio agents are integrated automatically, so manual registration is unnecessary for them, unlike the external agents built on Amazon Bedrock.

C is incorrect: This action registers the agents that are already integrated automatically and leaves the Amazon Bedrock agents without a required agent identity.

D is incorrect: Agent identity is distinct from generic application registrations, so creating generic application registrations does not give the Amazon Bedrock agents an agent identity.

B is correct.

Explanation: The declared lookup capability might be proportionate, but required trust evidence is missing. This requires a Conditional review classification. An administrator cannot approve the request or grant consent until the endpoint owner, rotation owner, and data boundary are provided, so return the request for evidence.

A is incorrect: A reasonable operation does not replace missing ownership, rotation, data boundary, and security evidence, so an Accept decision is not supported.

C is incorrect: The backend uses API-key authentication, and registered-tool approval and required Microsoft Entra consent remain separate checks, so Reject is incorrect.

D is incorrect: Approving the request now would approve it based on incomplete evidence. The approval decision must wait until the required evidence is complete.

B is correct.

Explanation: The Microsoft 365 view and the Azure service-tag view of the m365copilotchat charge are duplicate evidence of the exact same USD 120 charge, so it must be booked only once. The Microsoft Foundry workload total includes the dependent storage cost, adding USD 80 and USD 20 to equal USD 100. The reconciled combined total is USD 220.

A is incorrect: A total of USD 340 counts the same Microsoft 365 charge twice, which is the double-counting error the reconciliation removes.

C is incorrect: Dependent storage is a required part of the Microsoft Foundry workload cost, so leaving out the USD 20 understates the actual total.

D is incorrect: The Microsoft 365 charge is a real billed cost that must be booked once. The Foundry cost does not replace it.

C is correct.

Explanation: A license changes Copilot availability, but assigning a license does not change a device's update channel. The channel value identifies a desktop-app readiness issue to investigate separately. The administrator still has to check the device in the Inventory and plan any required managed change before proceeding.

A is incorrect: Assigning a Microsoft 365 Copilot license does not automatically move a device to the Current Channel or the Monthly Enterprise Channel.

B is incorrect: The activity columns are adoption signals and do not control channel assignment or affect update channel eligibility for the device.

D is incorrect: Browser-based access and desktop-app readiness are different checks, so not every Copilot experience is unavailable when the channel is ineligible.

A is correct.

Explanation: After you approve an MCP server, you must consent to the Microsoft Entra permissions that it requires. The server becomes available to agent building surfaces only after this consent is granted. Therefore, approval alone does not make the tool usable for users in your organization.

B is incorrect: Blocking and unblocking changes whether agents can use the tool, and it does not grant the Entra consent that availability requires.

C is incorrect: Path Access is a policy setting for the server. Disabling it does not provide the missing Microsoft Entra consent.

D is incorrect: Plugins package skills and MCP connectors. Installing a plugin does not grant the required consent for the already approved MCP server.

D is correct.

Explanation: Removing EEEU from a site does not remove permissions granted through another route or an item-specific exception. You must use Check Permissions on the employee to inspect remaining direct and group grants, and verify the actual access experience by opening the site as that user.

A is incorrect: Removing EEEU from the specific site does not affect the tenant-wide EEEU setting, and that setting is not the cause here.

B is incorrect: Microsoft Copilot does not grant access to users, so it cannot restore a permission that an administrator has explicitly removed.

C is incorrect: A pending report does not mean the saved change failed, and the site-permissions report does not control access to the site.