Microsoft Azure publishes exactly what the AB-900 tests and how much each part is worth. Here it is — every domain, its weight, the topics inside it, and the lessons that cover them.
Domain 1
Identify the core features and objects of Microsoft 365 services
Licensing and the Microsoft 365, Exchange, SharePoint and Teams admin centers, Zero Trust, authentication and authorization, Defender XDR, Microsoft Entra ID, conditional access, SSO, Identity Secure Score, audit logs, PIM and app registrations. Official weight range 30–35%.
3 topics in this domain
- Core Objects of Microsoft 365 Services
- Microsoft 365 Security Principles
- Core Security Features of Microsoft 365
Domain 2
Understand data protection and governance tasks for Microsoft 365 and Copilot
Microsoft Purview (Information Protection, DLP, Insider Risk Management, Communication Compliance, DSPM for AI, Data Lifecycle Management), sensitivity labels, classification and retention, how Copilot accesses data through Microsoft Graph and permissions, responsible AI, and finding risks and oversharing. Official weight range 35–40%.
2 topics in this domain
- Microsoft Purview and Copilot Data Security
- Data Protection Risks and SharePoint Oversharing
Domain 3
Perform basic administrative tasks for Copilot and agents
Copilot and agent capabilities, Researcher and Analyst, licensing vs pay-as-you-go, enabling features, assigning licenses, billing policies, usage and adoption reporting, prompts, and creating, approving, governing and monitoring agents. Official weight range 25–30%.
2 topics in this domain
- Copilot and Agent Features and Capabilities
- Copilot and Agent Administration