Manage and secure AI services in Microsoft 365
Domain 3 of AB-650 accounts for 35-40% of the exam. EarnYourCert has 121 original questions for this domain, all with explanations: 81 multiple choice, 18 yes/no and 22 completion or ordering items, like the real exam.
Domain 3 sample questions
8 questions from our 121-question bank for this domain. Try to answer before revealing the solution.
1. You want Copilot Chat to be easy to find in Teams and Outlook for all users. What should you configure?
- A Teams app setup policy that hides other apps
- A mail flow rule that links to Copilot Chat
- Pin Microsoft Copilot Chat in Copilot settings
- A sensitivity label named Copilot Chat
Show answer
Correct answer: C. The Pin Copilot Chat setting pins Copilot Chat to the navigation bar in Teams, Outlook and the Microsoft Copilot app.
2. What does Microsoft Entra Agent ID provide for AI agents?
- A mailbox and OneDrive account for each agent by default
- A separate tenant where agents run isolated from Microsoft 365 data
- Dedicated agent identities that can be governed like other identities
- Free Copilot licenses for every agent created in Copilot Studio
Show answer
Correct answer: C. Entra Agent ID gives agents first-class identities in Microsoft Entra so you can apply Conditional Access, ID Protection, governance and auditing to them.
3. What is the difference between an agent's owner and its sponsor in Microsoft Entra?
- Owners run it technically; sponsors are accountable for it
- There is no difference; both terms describe the same role
- Sponsors must be guests; owners must be Global Administrators
- Owners pay for the agent; sponsors only read its audit logs
Show answer
Correct answer: A. Owners are responsible for technical operations and incident response; sponsors carry business accountability for the agent's access and lifecycle decisions.
4. An agent's sponsor is leaving the company. How can you avoid the agent becoming orphaned without manual work?
- Convert the sponsor's mailbox to a shared mailbox for the agent
- Delete the agent identity before the sponsor's account is disabled
- Use lifecycle workflows that notify cosponsors and transfer sponsorship
- Assign the agent a Copilot license so it no longer needs a sponsor
Show answer
Correct answer: C. Entra ID Governance lifecycle workflows include templates that notify managers and cosponsors and transfer sponsorship when a sponsor changes role or leaves.
5. IT wants every new agent instance to start from approved settings for tools, data access and governance. What should you use in Agent 365?
- A mail contact per agent instance
- A custom theme for agent cards
- A retention label for agent outputs
- IT-approved agent templates
Show answer
Correct answer: D. Agent 365 supports an IT-approved template system so agent instances are created with consistent, governed settings.
6. Compliance must detect and investigate unethical or inappropriate agent interactions. Which Purview capability fits?
- Attack simulation training for agent owners only
- A group expiration policy for agent groups
- Custom themes for the agents' Teams channels
- Communication compliance for AI interactions
Show answer
Correct answer: D. Communication compliance can detect inappropriate content in AI interactions, and retention and eDiscovery let you keep and investigate them.
7. Auditors ask which agents lack an owner, a governance template or required policies. What helps you evaluate these compliance gaps?
- The Restricted entities list in the Defender portal
- The SharePoint site recycle bin for agent sites
- The Microsoft 365 network connectivity test results
- Agent 365 governance insights and filtered registry views
Show answer
Correct answer: D. Agent 365 surfaces governance gaps (ownerless agents, agents at risk, pending requests, exceptions) and compliance details so you can remediate them from filtered registry views.
8. Many licensed users haven't used Copilot in 60 days. What is the best way to use this information?
- Turn off web search so Copilot becomes more attractive
- Target them with adoption training or reassign their licenses
- Delete their mailboxes to free storage for active users
- Block their sign-in until they start using Copilot again
Show answer
Correct answer: B. Usage reports identify inactive licensed users so you can drive adoption (training, champions) or reassign licenses to reduce cost.