最新的Microsoft Administering Microsoft 365 and AI Services - AB-650免費考試真題
問題1
You have a Microsoft 365 subscription that contains agents built by Microsoft, agents built by trusted non- Microsoft developers, agents published by your organization, and agents shared by your organization.
The agents are available across Microsoft 365 Copilot, Microsoft Teams, Outlook, and SharePoint.
You need to prepare a CSV audit file that contains only agents that meet both of the following conditions:
Were built by using trusted non-Microsoft developers
Are discoverable and usable in Teams
Which filter criteria should you configure?
You have a Microsoft 365 subscription that contains agents built by Microsoft, agents built by trusted non- Microsoft developers, agents published by your organization, and agents shared by your organization.
The agents are available across Microsoft 365 Copilot, Microsoft Teams, Outlook, and SharePoint.
You need to prepare a CSV audit file that contains only agents that meet both of the following conditions:
Were built by using trusted non-Microsoft developers
Are discoverable and usable in Teams
Which filter criteria should you configure?
正確答案: C
說明：（僅 PDFExamDumps 成員可見）
問題2
You have a Microsoft 365 subscription that uses Microsoft Entra Agent ID and Microsoft Entra ID Governance.
The subscription uses mover automation to notify sponsors and transfer agent identity sponsorships when a sponsor changes roles.
You need to assign a role to a user named Admin1. The solution must meet the following requirements:
Admin1 must be able to create and update the automation used for agent identity sponsorship changes.
Admin1 must be prevented from managing access packages, access reviews, and entitlement management catalogs.
The solution must follow the principle of least privilege.
Which role should you assign to Admin1?
You have a Microsoft 365 subscription that uses Microsoft Entra Agent ID and Microsoft Entra ID Governance.
The subscription uses mover automation to notify sponsors and transfer agent identity sponsorships when a sponsor changes roles.
You need to assign a role to a user named Admin1. The solution must meet the following requirements:
Admin1 must be able to create and update the automation used for agent identity sponsorship changes.
Admin1 must be prevented from managing access packages, access reviews, and entitlement management catalogs.
The solution must follow the principle of least privilege.
Which role should you assign to Admin1?
正確答案: C
說明：（僅 PDFExamDumps 成員可見）
問題3
You have a Microsoft 365 E5 subscription that contains the groups shown in the following table.
All the groups are deleted.
Which groups can be restored, and what is the retention period? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You have a Microsoft 365 E5 subscription that contains the groups shown in the following table.
All the groups are deleted.
Which groups can be restored, and what is the retention period? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正確答案:
Explanation:
Microsoft Entra ID supports soft deletion of Microsoft 365 groups, retaining their directory objects and associated service resources for a defined recovery period.
First selection: Group3 only.
The original examination answer reflects the established Microsoft 365 group restoration capability.
Microsoft 365 groups can be restored with their membership, Exchange mailbox, SharePoint site, calendar, and supported associated resources.
Traditional distribution groups and mail-enabled security groups do not use the same Microsoft Entra Microsoft 365 group soft-delete recovery workflow.
Second selection: 30 days.
Microsoft maintains deleted Microsoft 365 groups in a recoverable state for 30 days. Administrators can restore them during that period by using the Microsoft Entra admin center or supported PowerShell commands.
Current Microsoft documentation correction: Microsoft now also supports restoration of cloud security groups through a public-preview capability. Therefore, Group1 may also be recoverable if it is a cloud security group in a supported tenant.
The exhibit identifies Group1 only as Security and does not specify whether it is cloud-managed or synchronized from Active Directory.
As a result, Group3 only is the intended historical answer, but it is no longer unconditionally correct under current Microsoft documentation. The 30-day retention period remains correct.
Microsoft References:
https://learn.microsoft.com/en-us/entra/identity/users/groups-restore-deleted
https://learn.microsoft.com/en-us/microsoft-365/admin/create-groups/restore-deleted-group
問題4
Your organization develops custom enterprise agents that are registered and governed by using Microsoft Entra Agent ID.
The security team mandates that an autonomous finance agent named FinanceAgent01 must only be allowed to authenticate and access Microsoft Graph APIs when originating from your corporate Azure virtual network's public IP range.
You need to enforce this network location restriction on FinanceAgent01 without affecting human user sign-ins or standard enterprise applications.
What should you do in the Microsoft Entra admin center?
Your organization develops custom enterprise agents that are registered and governed by using Microsoft Entra Agent ID.
The security team mandates that an autonomous finance agent named FinanceAgent01 must only be allowed to authenticate and access Microsoft Graph APIs when originating from your corporate Azure virtual network's public IP range.
You need to enforce this network location restriction on FinanceAgent01 without affecting human user sign-ins or standard enterprise applications.
What should you do in the Microsoft Entra admin center?
正確答案: D
說明：（僅 PDFExamDumps 成員可見）
問題5
You have a Microsoft 365 E5 subscription and use Microsoft Defender for Office 365.
You are configuring Attack simulation training that will target all users and use the Credential Harvest social engineering technique.
You need to ensure that the simulation sends an email message that contains a custom phishing link and company-based terminology and branding.
How should you configure the simulation?
You have a Microsoft 365 E5 subscription and use Microsoft Defender for Office 365.
You are configuring Attack simulation training that will target all users and use the Credential Harvest social engineering technique.
You need to ensure that the simulation sends an email message that contains a custom phishing link and company-based terminology and branding.
How should you configure the simulation?
正確答案: C
說明：（僅 PDFExamDumps 成員可見）
問題6
You have an Azure subscription and a Microsoft 365 E5 subscription that contains the resources shown in the following table.
You need to configure Microsoft 365 Copilot licensing and pay-as-you-go billing for document processing services. The solution must meet the following requirements:
* Provide Microsoft 365 Copilot licenses to eligible users as their eligibility changes.
* Enable pay-as-you-go billing for document processing services without adding a Microsoft 365 license.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
You have an Azure subscription and a Microsoft 365 E5 subscription that contains the resources shown in the following table.
You need to configure Microsoft 365 Copilot licensing and pay-as-you-go billing for document processing services. The solution must meet the following requirements:
* Provide Microsoft 365 Copilot licenses to eligible users as their eligibility changes.
* Enable pay-as-you-go billing for document processing services without adding a Microsoft 365 license.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
正確答案:
Explanation:
To provide the Microsoft 365 Copilot licenses: Assign licenses to Group1.; To enable pay-as-you-go billing for document processing: Create a billing policy and select the Azure subscription.
Microsoft 365 supports group-based licensing through Microsoft Entra ID and Azure-backed pay-as-you-go billing for document processing services.
First selection: Assign licenses to Group1.
Group1 is a dynamic security group containing users eligible for Microsoft 365 Copilot licensing. By assigning Microsoft 365 Copilot licenses to Group1, administrators can automate license assignment based on dynamic group membership.
When users meet the configured membership rules, Microsoft Entra ID adds them to the group, and group- based licensing automatically processes their license assignment. When membership changes, licensing is reevaluated.
Assigning licenses directly to User1 and User2 would require additional administrative intervention as eligibility changes. Agent1 is an agent identity, not the appropriate target for assigning ordinary user Copilot licenses.
Second selection: Create a billing policy and select the Azure subscription.
Pay-as-you-go document processing uses Azure subscription billing rather than ordinary per-user license assignments. The administrator must associate the service with the appropriate Azure subscription and resource group.
The corresponding setup is managed through the Microsoft 365 admin center. Microsoft documents the Azure billing configuration and service activation requirements separately.
A prepaid Copilot Credit pack or a Microsoft Cost Management budget does not replace the required billing configuration.
Microsoft References:
https://learn.microsoft.com/en-us/microsoft-365/admin/manage/manage-group-licenses
https://learn.microsoft.com/en-us/microsoft-365/documentprocessing/syntex-azure-billing
問題7
You have a Microsoft 365 subscription that uses Microsoft Exchange.
The subscription contains a licensed user mailbox named Mailbox1 that has a primary SMTP address of [email protected]. Mailbox1 is 72 GB.
Mailbox1 will no longer be used by a single user. Three support users must manage the existing support email sent to Mailbox1.
You need to configure Mailbox1 access for the support users. The solution must meet the following requirements:
Enable the support users to open Mailbox1.
Preserve all the existing content in Mailbox1.
Configure replies to appear as sent from [email protected].
What should you do?
You have a Microsoft 365 subscription that uses Microsoft Exchange.
The subscription contains a licensed user mailbox named Mailbox1 that has a primary SMTP address of [email protected]. Mailbox1 is 72 GB.
Mailbox1 will no longer be used by a single user. Three support users must manage the existing support email sent to Mailbox1.
You need to configure Mailbox1 access for the support users. The solution must meet the following requirements:
Enable the support users to open Mailbox1.
Preserve all the existing content in Mailbox1.
Configure replies to appear as sent from [email protected].
What should you do?
正確答案: B
說明：（僅 PDFExamDumps 成員可見）