How hard is the AB-900 exam?
AB-900 (Microsoft 365 Copilot and Agent Administration Fundamentals) is an entry-level exam of modest difficulty. It asks what Microsoft 365, Copilot and agent features do and which admin tool to use, rather than how to configure them step by step. Microsoft 365 administrators typically prepare in one to three weeks; newcomers to Microsoft 365 should allow three to five. What makes it harder than its level suggests is the data protection material: a large share of the exam is about Microsoft Purview and how Copilot interacts with permissions, which many candidates have never used.
What makes AB-900 approachable
AB-900 is a Fundamentals exam. Most skills in the outline begin with "understand" or "identify": the core objects of Microsoft 365 (users, groups, teams, sites and libraries), Zero Trust and identity basics, Purview features, and the basic administrative tasks for Copilot and agents. Anyone who has worked in a Microsoft 365 tenant will recognise much of it.
What makes it harder than it looks
Candidates lose most marks on detail they rarely meet in daily work:
- Purview tools that sound alike: Information Protection, Data Loss Prevention, Insider Risk Management, Communication Compliance, DSPM for AI and Data Lifecycle Management each answer a different question.
- How Copilot reaches data: Copilot works through Microsoft Graph and returns only what the signed-in user already has permission to see, which is why SharePoint oversharing is a Copilot risk.
- Licensing and billing: the monthly Copilot licence versus pay-as-you-go, which Copilot features can be turned on or off, and when Researcher, Analyst or a custom agent fits.
- Which admin centre does what: the Microsoft 365, Exchange, SharePoint, Teams, Entra, Purview and Power Platform admin centres each own different settings.
How long it takes to prepare
Working Microsoft 365 administrators usually need one to three weeks, mostly on Purview and Copilot administration. Newcomers, or people who use Microsoft 365 only as end users, should allow three to five weeks so that the admin centres and identity concepts make sense before the Copilot material.
Copilot and agent features change often, and Microsoft revises the outline to match, so study from material that follows the current skills outline.
Who finds it hardest
Business users and Copilot champions find the identity and security material hardest: authentication methods, Conditional Access, Privileged Identity Management and app registrations. Experienced Exchange or Teams administrators tend to know the admin centres but find Purview and the Copilot licensing and billing options new.
How to tell you are ready
Check you can name the right Purview tool and the right admin centre for each scenario in the outline without hesitating, and explain why Copilot can surface an overshared file. Fundamentals exams do not give you access to Microsoft Learn during the exam, so practise answering from memory. Book once you pass timed mixed practice consistently.
Plan your prep
Questions, answered
Source
Exam facts in this guide come from the vendor's published exam guide. Vendors revise these — check the source for the current version before you book.