AB-650 Exam Dumps - Administering Microsoft 365 and AI Services

Microsoft Purview Data Security Posture Management (DSPM) provides centralized visibility into sensitive information and its use across Microsoft 365 workloads, including interactions with Microsoft 365 Copilot.

DSPM includes reporting and investigation capabilities that help administrators understand how users interact with organizational information through AI applications.

The AI activity exploration capabilities provide information about Copilot interactions, including associated users, referenced files, sensitivity labels, and potentially sensitive information.

Because the financial files are classified with the Confidential sensitivity label, administrators can investigate activity involving labeled content and determine which users referenced sensitive organizational files during Copilot interactions.

DSPM minimizes administrative effort by providing predefined dashboards, reports, and integrated investigation workflows instead of requiring administrators to construct individual audit searches.

Option A is incorrect because Microsoft Entra audit logs primarily record identity and directory administrative activities, rather than providing detailed Copilot file-reference investigations.

Option C is incorrect because Content explorer identifies and examines classified organizational content. It is not the primary solution for correlating Copilot interactions with users and referenced files.

Option D is incorrect because Data Lifecycle Management manages retention and deletion requirements rather than providing dedicated AI interaction monitoring.

Therefore, Data Security Posture Management is the appropriate solution.

Microsoft References:

https://learn.microsoft.com/en-us/purview/data-security-posture-management-learn-about

https://learn.microsoft.com/en-us/purview/ai-m365-copilot

Modify the password protection policy: User1 only; Invite an external user: User1, User2, User3, and User4

Microsoft Entra ID uses role-based access control (RBAC) to authorize administrative operations. The two activities in this question have different permission requirements.

First selection: User1 only.

Modifying the tenant-wide password protection policy requires privileged authorization. The Global Administrator role held by User1 includes the permissions required to configure Microsoft Entra Password Protection, including the custom banned-password list and smart lockout settings.

The Authentication Policy Administrator role can also manage these settings, but none of the other listed users holds that role. User2 ' s Security Administrator role does not provide this specific permission, while User4 ' s Password Administrator role concerns password administration rather than configuration of the tenant-wide password protection policy.

Second selection: User1, User2, User3, and User4.

Microsoft Entra external collaboration settings allow users to invite external guests. Under the default configuration, organizational users can invite external users, including users without administrative roles.

User1 can invite guests as a Global Administrator, and User2 also has the Guest Inviter role. User3 and User4 can invite external users under the default invitation settings.

Therefore, all four users qualify for the second activity.

Microsoft References:

https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference

https://learn.microsoft.com/en-us/entra/external-id/external-collaboration-settings-configure

The Microsoft 365 admin center provides dedicated features for reporting service disruptions and requesting technical assistance. The correct selection depends on whether the administrator is reporting an operational service issue or seeking guidance from Microsoft Support.

First selection: Service health.

The Service health dashboard enables administrators to monitor incidents, service degradation, outages, and advisories affecting Microsoft 365 workloads, including Exchange Online, Microsoft Teams, and SharePoint Online.

Administrators can navigate to Health → Service health. If they experience a problem that Microsoft has not reported, they can select Report an issue and submit information about the affected service. Microsoft evaluates these reports and may publish an incident or advisory when a service-side problem is confirmed.

Second selection: New service request.

The New service request feature allows administrators to request assistance from Microsoft Support, including guidance about creating and configuring Microsoft Entra user accounts.

Administrators can navigate to Support → New service request, describe their question, review suggested troubleshooting information, and contact Microsoft Support when additional assistance is required.

Message center publishes service announcements and planned changes, while Product feedback collects suggestions and feedback about Microsoft products. Neither is the most appropriate option for the stated requirements.

Therefore, Service health and New service request are the correct selections.

Microsoft References:

Microsoft Learn — How to check Microsoft 365 service health .

Microsoft Learn — Get support for Microsoft 365 for business .

A Tenant payload is the appropriate configuration because it enables administrators to create and customize simulated phishing messages specifically for their organization. Microsoft Defender for Office 365 Plan 2 provides Attack simulation training, including the Credential Harvest technique, to assess how users respond to realistic phishing attempts.

When creating a tenant payload, administrators can customize the simulated email content, select a phishing URL, insert phishing links into the message body, and incorporate organization-specific language, branding, and contextual information. These capabilities satisfy the requirement for a custom phishing link and company-based terminology.

Option A is incorrect because a tenant landing page controls the destination experience after a user interacts with a simulated phishing link. It does not configure the phishing email itself.

Option B is incorrect because custom end-user notifications provide simulation-related communications, such as training or reinforcement messages, rather than defining the simulated attack payload.

Option D is incorrect because Global payloads are Microsoft-provided templates. Although useful for standardized simulations, they are not the appropriate mechanism for creating an organization-specific phishing message.

Creating a Tenant payload therefore fulfills both customization requirements.

Microsoft References:

https://learn.microsoft.com/en-us/defender-office-365/attack-simulation-training-payloads

Microsoft Entra Privileged Identity Management (PIM) provides just-in-time access to privileged roles through eligible assignments and configurable role activation requirements.

Statement 1: Yes.

User1 has an eligible Global Administrator assignment. The PIM configuration specifies Require justification on activation: Yes. Therefore, User1 must submit a business justification when activating the role. The user must also satisfy the configured multifactor authentication requirement.

Statement 2: No.

User2 has an assigned (active) Global Administrator role rather than an eligible assignment. Active assignments provide permissions without requiring role activation. Consequently, the configured MFA-on-activation requirement does not apply to User2 in the manner described. Separate Conditional Access policies may still require MFA during sign-in.

Statement 3: No.

User3 has an eligible Global Administrator assignment. The activation maximum duration is eight hours, meaning each activation can remain active for no longer than eight hours.

However, this does not terminate the underlying eligibility. The eligible assignment is configured to expire after 15 days.

After an eight-hour activation expires, User3 can activate the role again, provided the eligible assignment remains valid and the activation requirements are satisfied.

The distinction between activation duration and eligibility duration is fundamental to Microsoft Entra PIM.

Microsoft References:

Microsoft Learn — Configure PIM role settings .

Microsoft Learn — Activate Microsoft Entra roles in PIM .

Microsoft Learn — Assign eligible and active roles .