
Explore Microsoft 365 security, data protection, and governance using Entra and Purview, then master Copilot administration, agents, and studio tools to prepare for AB 900.
Learn how to maximize your Udemy course experience by mastering video controls, subtitles, playback speed, and quality, navigating course content and resources, taking notes, asking questions, and earning certificates.
Explore core features, governance, and data protection in Microsoft 365 for the AB-900 exam, covering Copilot and agents, admin centers including Exchange Online, SharePoint, Teams, Entra, and Purview.
Sign in with a work or school email, sign up for a free office 365 e5 trial, enable multi-factor authentication with the Microsoft Authenticator, and cancel to avoid charges.
Explore the zero trust methodology and its three principles—verify explicitly, least privileged access, and assume breach—while understanding six foundational elements: identities, devices, apps, infrastructure, network, and data.
Explore how Microsoft Entra enables zero-trust security and secure access by unifying identity and access management across Entra ID, protection, governance, external ID, and more, with MFA and pricing options.
Identify threats to data and systems, including malware, data breaches, ransomware, phishing, and password spraying, and learn how threat protection with Microsoft Defender XDR uses intelligence to safeguard assets.
Discover how authentication proves who you are with password, multi-factor authentication, and biometric options on Microsoft Entra ID, and authorization via role-based access control assigns owner, contributor, and reader roles.
Identify how to use Microsoft Entra and Azure to manage users and groups as core security objects, covering internal and external users, members and guests, and dynamic groups with owners.
Understand the purpose of single sign-on in Microsoft Entra ID, enabling sign-in to multiple apps with one credential across cloud and on premises, with centralized security and productivity benefits.
Explore how conditional access policies in the Microsoft Entra Admin Center and Azure enforce login decisions. Apply policies to users, resources, locations, devices, apps, and MFA or risk remediation.
Identify and apply the right tools in Microsoft Entra ID to troubleshoot sign-in issues, using risk-based conditional access, MFA policies, and Identity Protection reports.
Explore how the identity secure score in Microsoft Entra ID measures security against Microsoft recommendations, updated daily, guiding actions like enabling MFA, self-service password reset, and least-privileged admin roles.
Review audit and sign-in logs for user and admin activity using Microsoft Entra admin center, Entra ID in monitoring and health. Export logs as CSV or JSON for ranges.
Explore privileged identity management (PIM) in Microsoft Entra ID governance to implement just-in-time, time-bound assignments with justification and multi-factor authentication, enabling approved, least-privilege access and role activation.
Register apps to establish trust with Microsoft Entra ID through app registrations, API permissions, redirect URI, and secrets, then manage enterprise apps as service principal to authenticate and access resources.
Explore Microsoft Purview's information protection within the data security, governance, and risk and compliance suite, covering sensitive information types, trainable classifiers, Data Explorer, sensitivity labels, encryption, and data loss prevention.
Identify the use cases for sensitivity labels in Microsoft Purview and understand how they classify and protect content across files, emails, Teams, SharePoint, Power BI, and Copilot, including eDiscovery applicability.
Explore how Microsoft Purview classifies data using manual, automated pattern matching, and trainable classifiers, including pre-trained options across file types and custom training with positive and negative samples.
Identify sensitive information with Microsoft Purview Data Explorer by drilling down, filtering, and exporting results for sensitive info types and PII across Exchange, OneDrive, Copilot, and Teams.
Identify user activities in Microsoft Purview Activity Explorer within Information Protection Explorer, filter by date, location, user, and labels, and view details for Word, Excel, Outlook, SharePoint, and OneDrive files.
Explore Microsoft Purview data loss prevention to protect sensitive data across apps and devices, create policy rules for financial data with Japan-specific categories, and simulate outcomes before enforcement.
Identify and respond to Microsoft Purview DLP alerts, applying policy actions such as notifying users, emailing, and restricting or encrypting content in Microsoft 365.
Identify and mitigate insider risk with Microsoft Purview Insider Risk Management by applying policies, integrating the Microsoft 365 Human Resources data connector, and using alerts and triage for data leaks.
Leverage Microsoft Purview Compliance Manager to run multi-cloud regulatory assessments, map common controls, track compliance scores, and implement improvement actions with alerts and regulatory updates.
Explore Microsoft Purview communication compliance to detect potentially inappropriate text and content across emails, Teams, Copilot, Viva Engage, and third-party sources, using policy templates and alerts for remediation.
Explore Microsoft Purview DSPM for AI to implement recommended AI policies, run weekly data risk assessments on top SharePoint sites, create custom assessments, and monitor data risk through built-in dashboards.
Explore Microsoft Purview data lifecycle management, including retention policies and labels across Exchange, SharePoint, OneDrive, Teams, and more, with automatic retention, priority cleanup, and eDiscovery considerations.
Use content search in Microsoft Purview eDiscovery to locate files and emails across Exchange Online, SharePoint, and OneDrive. Build keyword or KQL queries with date ranges and export results.
Explore how different Microsoft 365 license types—business, individual, enterprise, and academic—govern feature access, how admins assign licenses, and the implications for mail, SharePoint, and desktop apps.
Explore organizational configurations in the Microsoft 365 admin center, including adding and verifying domains, managing users, and configuring security and sharing settings.
Explore how to configure Exchange Online objects in the admin center, including user mailboxes, mailbox settings, delegation, archiving, and distribution lists.
Configure a SharePoint site from the Microsoft 365 admin center by creating a team site using a training course template, then assign privacy, owners, and permissions.
Configure SharePoint document libraries and folders within a site, including creating from templates, setting names, descriptions, and default sensitivity labels, and managing versioning, permissions, and sharing links.
Configure teams and channels in the Microsoft Teams admin center, create teams with owners and privacy, manage standard, private, and shared channels, and apply settings and policies for organization-wide collaboration.
Identify oversharing in Microsoft 365 and SharePoint. Use Purview data loss prevention, classification, content explorer, auditing, insider risk management to run Entra ID access reviews for guests and group memberships.
Run data access governance reports in SharePoint via the admin center, monitor sharing links and sensitivity labels, and download CSVs to review site permissions under Copilot or advanced management licenses.
Explore SharePoint advanced management and licensing, including trial setup, site lifecycle, oversharing, change history, and access governance to secure SharePoint and OneDrive.
Explore what Copilot is and compare license types from personal and Microsoft 365 plans to business and enterprise, highlighting grounding in web or work files and app integration.
Purchase and assign a Microsoft 365 Copilot license in the admin center, noting no free trial, choose yearly billing, and wait 24 hours for full Copilot access.
Explore Microsoft 365 Copilot and Copilot chat to query the web, cite sources, and manage prompts while using OneDrive files and work tab capabilities.
Manage prompts by adding content to pages or notebooks, uploading images, and chatting with an agent. Craft prompts with a goal, context, and tone for professional, concise outputs.
Discover how to save, share, and schedule Copilot prompts, manage access to the prompt gallery and team prompts, and use the prompt gallery for recurring daily, weekly, or monthly prompts.
Explore enabling and disabling Copilot features across user access, data access, data security and compliance, and image generation controls, including web search, chat pinning, and agent access.
Explore how the researcher prebuilt agent analyzes non-structured data to create structured reports with sources. Grasp data security implications and service boundaries within Microsoft 365 Copilot.
Explore use cases for Analyst in Microsoft Copilot, transforming numerical and structured data from spreadsheets, csv, jsonl, xml, and more, answering specific questions and generating visuals.
See how Copilot accesses data via Microsoft Graph, grounding prompts within the Microsoft 365 boundary and protecting privacy with permissions, Entra ID MFA, Purview, Defender, and encryption.
Explore Microsoft responsible AI through six principles: fairness, reliability and safety, privacy and security, inclusiveness, transparency, and accountability, and learn how governance policies guide engineering teams.
Monitor Copilot usage and adoption using reports in the Microsoft 365 admin center, including Copilot analytics, readiness, usage, chat, search, and credits. Track active users and prompts to optimize adoption.
The Microsoft AB-900 certification is the new certification for Microsoft 365. Microsoft says that this certification demonstrates that you have the skills needed to get the most out of Microsoft Entra, Purview, 365 Copilot and Copilot Chat by earning the Copilot and Agent Administration Fundamentals certification.
In this course, we will look at all of the topics in the AB-900 certification.
Please note: This course is not affiliated with, endorsed by, or sponsored by Microsoft.
This course has been updated in line with the exam update as per 22 July 2026.
In this AB-900 exam preparation course;
We'll start by looking at security. We'll look at the Microsoft 365 security principles and identify the core security features of Microsoft 365 services, using Microsoft Entra.
We'll then turn to data protection and governance tasks using Microsoft Purview. We'll start with Microsoft Purview Information Protection, then look at Data security, and end with Data governance and compliance.
We'll then look at Microsoft 365. We'll look at the core objects of Microsoft 365 services, including Exchange Online and Teams, and look at identifying and monitoring oversharing in SharePoint.
Finally, we'll go to Copilot. We'll understand the features and capabilities of Copilot, together with basic administrative tasks. We'll turn to built-in agents such as Researcher and Analyst, and the data security implications of Copilot. Finally, we'll create agents using Copilot Studio Lite and Copilot Studio Full.
No prior knowledge is required. This course completes with quizzes and practice tests, so you can be sure that you are learning.
Once you have completed this course, you will have an expanded knowledge of Copilot and Agent Administration. With some practice, you could even take the official Microsoft AB-900 exam, which gives you the "Copilot and Agent Administration Fundamentals" certificate. This would look good on your CV or resume.