What changed from MS-900
MS-900 was a broad Microsoft 365 awareness exam — good for getting your bearings, not much else. AB-900 is built for administrators actually managing Copilot deployments. The M365 core services content is still there but trimmed. Everything else is new or significantly deeper. Security and identity (Entra ID, Zero Trust, Conditional Access, Defender XDR, PIM) is now tested in real depth, not just mentioned. Microsoft Purview governance — DLP, sensitivity labels, Insider Risk, DSPM for AI, eDiscovery — makes up the heaviest domain at 35–40% of the exam. Copilot licensing, pay-as-you-go billing, agent creation, agent approval workflows, and agent lifecycle monitoring are entirely new content that no previous Microsoft exam covered. Dynamics 365 content from MS-900 is gone completely. The exam also runs 15 minutes shorter, so it's denser.
Most common mistake: Candidates study Copilot features and skip Purview. The data protection and governance domain is the heaviest section of AB-900. Most first-attempt failures come from underestimating it.
The three domains
Domain 1 — Microsoft 365 core services (30–35%). Admin center navigation (M365, Exchange Online, SharePoint, Teams), license types, user and group management, Zero Trust, MFA, Conditional Access, SSO, Defender XDR, Microsoft Entra, Identity Secure Score, PIM, App registrations, and audit log review. Familiar territory if you've worked in a real M365 tenant. Harder than MS-900's equivalent section due to the security depth.
Domain 2 — Data protection and governance (35–40%). The heaviest domain and the one to prioritize. Microsoft Purview across the board: Information Protection, DLP, Insider Risk Management, Communication Compliance, Data Lifecycle Management, sensitivity labels, data classification, retention, and eDiscovery Content Search. Plus Copilot-specific governance: how Copilot accesses data, how Microsoft Graph shapes its responses, responsible AI principles, and DSPM for AI — a brand-new Purview tool for discovering and managing AI activity in your tenant. SharePoint oversharing tools and SharePoint Advanced Management are also in scope here.
Domain 3 — Copilot and agent administration (25–30%). Entirely new content. Copilot license assignment, monthly vs. pay-as-you-go billing model, which Copilot features admins can enable or disable, Copilot Analytics, prompt governance, and monitoring usage and adoption. On the agent side: configuring user access, creating and publishing agents in Copilot Studio, the organisational approval process, and monitoring agent lifecycle through the M365 Admin Center and Power Platform Admin Center.
How to prepare
Three weeks is enough for most people with M365 experience. Spend week one on Domain 1 using Microsoft Learn modules. Spend week two entirely on Domain 2 — Purview is where the most study time pays off. Spend week three on Domain 3 content and full timed practice exams. The official AB-900 study guide on Microsoft Learn is your content map. Use the free practice assessment on the certification page to track where you stand. For timed mock exams across all three domains, AB-900 practice questions aligned to the current objectives — use it early in your prep to find gaps, not the night before the exam.
Scheduling tip: If you're hitting 75–80% on practice tests consistently, you're ready. Book the exam before you feel fully ready — a date on the calendar stops indefinite studying. You can retake 24 hours after a failed attempt.
Who should take it
M365 administrators supporting Copilot rollouts, IT helpdesk staff dealing with Copilot licensing questions, anyone who held MS-900 and wants to stay current, Microsoft partners working toward Modern Work designation, and non-technical professionals in governance or AI transformation roles. The cert is at Microsoft Learn, scheduled through Pearson VUE. Register with a personal MSA account, not a work account — Microsoft is clear on this so your record stays with you if you change jobs.
AB-900 is a real credential for a real job function that didn't formally exist two years ago. If you're managing Microsoft 365 in an organisation deploying Copilot, this exam tests exactly what your role now requires. Prepare using the official study guide or other reliable resources and book your seat at Microsoft Learn.
Read more: Microsoft Certification Updates 2026: What’s New, What’s Retiring, and Which Exams Replace Them
Top comments (0)