In the full course
What you get
- 400 exam-style questions, each with a full explanation
- 20 performance-based tasks, marked with partial credit
- 200 flashcards, filtered by domain
- The full study guide, 24 chapters
- Timed mock exams matched to the real exam length
- A readiness score weighted by the official exam blueprint
Get full access to Microsoft AB-650
All questions, timed exams, flashcards, PDF study guide download & progress tracking.
Lifetime · all courses
$29.99
One payment · future courses included
30 seconds, then straight to checkout.
Pass, or your money back
Reach 85% readiness on this course, sit the real exam, and if you don't pass we refund it in full. Applies to this single-course purchase. Terms.
More free samples
Marked, and passed
Real feedback from people who passed
“I failed my CISSP on the first attempt with another platform. Switched to CertCrush, focused on my weak domains using the tracking feature, and passed three months later. The explanations for wrong answers are genuinely useful, not just 'A is correct because A is correct'.”
“Honestly wasn't expecting much but this is probably the best ten bucks I've spent on exam prep. Did 20–30 questions every morning before work for 6 weeks. Passed with a comfortable margin. The timed exam mode is what really got me comfortable with the pressure.”
“The flashcards are underrated. I used them during my commute and it made a huge difference for the theory-heavy ITIL questions. Passed first try. Already using it again for CISM.”
Microsoft AB-650 leads to the Microsoft 365 Certified: AI Services Administrator Associate certification and takes over from MS-102 as the Microsoft 365 administrator exam. It covers tenant and workload configuration, governance and security across Microsoft Entra, Defender for Office 365 and Microsoft Purview, and the administration of Microsoft 365 Copilot, Copilot connectors and agents in Agent 365.
Practice content last updated · Independently written and aligned to Microsoft’s published exam objectives.
About the Microsoft AB-650 Exam
AB-650 is the exam behind the Microsoft 365 Certified: AI Services Administrator Associate credential, and it is the exam that replaces MS-102 when MS-102 retires in October 2026. It is in beta, which means your result is held back until Microsoft has enough data from the question pool to set a cut score. The blueprint splits three ways, and the split is what most candidates misjudge. Tenant and workload configuration, the familiar Microsoft 365 admin material, is only 20 to 25 percent of the exam. Governance and security take 40 to 45 percent. AI services take 35 to 40 percent. Roughly three quarters of AB-650 therefore sits outside what an MS-102 revision plan used to cover, and a candidate who studies domains, licensing and mailboxes will run into Purview and Agent 365 questions they have never seen. The AI half is genuinely new material rather than a rebadge. Microsoft asks about Data Loss Prevention requirements that reach Copilot, Data Security Posture Management for AI activity, agent identity lifecycle workflows in Microsoft Entra Agent ID, the approval and publishing flow in the agent registry, and how to read Copilot adoption through the Copilot Control System. Reading the documentation for those features is not the same as knowing which admin centre owns which setting, and the exam asks the second question. This course covers all three domains at their published weights, with practice questions written against the current beta objectives, flashcards for the terminology, and scenario items in the formats Microsoft uses on role-based exams.
Exam Domains Covered
- Configure and manage Microsoft 365 tenants and workloads22%
- Govern and secure Microsoft 365 tenants and workloads41%
- Manage and secure AI services in Microsoft 36537%
Exam Format & Details
Microsoft does not publish an exact question count for AB-650. Its published guidance is that most certification exams contain 40 to 60 questions, and that associate role-based exams without labs allow 100 minutes of exam time within a 120 minute seat time. Question types on role-based exams include multiple choice, multiple select, drag and drop, build list, active screen, hot area and multi-part case studies. The passing score is 700 on a scale of 100 to 1000. AB-650 is currently a beta exam, so your score is released once Microsoft has finished collecting data on the question pool rather than at the end of your session. Booking is through Microsoft Learn and delivery is by Pearson VUE, either at a test centre or online with OnVUE. The standard voucher price for a Microsoft associate role-based exam is 165 USD, and pricing varies by the country or region in which the exam is proctored.
Why Practice Questions Matter
AB-650 is new enough that Microsoft has no practice assessment for it yet, and no candidate has years of exam feedback to draw on. That leaves the documentation, and reading Microsoft Learn will not tell you whether you can choose between the Microsoft 365 admin centre, the Purview portal and the Entra admin centre while a clock is running. Practice questions will. They also expose the weighting problem quickly: if your revision has been mostly tenant configuration, an hour of Purview, Copilot and Agent 365 questions shows you that now rather than on exam day.
Try 2 performance tasks free
Drag-and-drop, sequencing and configuration tasks that mirror the interactive questions on the real Microsoft AB-650 exam, marked with partial credit.
Sample Practice Questions
The following questions are a preview of the type of syllabus-aligned questions you will practise in CertCrush. They reflect the format and reasoning style of the Microsoft AB-650 exam, not actual exam content.
Q1.A DLP alert reports that a document containing a health record identifier was shared externally. The analyst suspects the document is a template populated with sample values rather than a genuine record. Which tab in the alert confirms exactly what was detected in the content?
- A.Sensitive info types
- B.Events
- C.Details
- D.Actions
Domain: Govern and secure Microsoft 365 tenants and workloads
Q2.Contoso publishes announce@contoso.com so that a message sent to it is fanned out to 400 staff. No central copy of the message needs to be retained at the address. Which object meets this requirement with the least storage overhead?
- A.A distribution group
- B.A shared mailbox
- C.A Microsoft 365 group
- D.A room mailbox
Domain: Configure and manage Microsoft 365 tenants and workloads
Q3.Before announcing a usage-based AI feature, an administrator wants to guarantee that no single employee can burn the whole monthly credit allowance in one afternoon. Which setting in the spending policy addresses this directly?
- A.A monthly limit per user within the spending policy
- B.An alert threshold percentage with the administrator as recipient
- C.The Don't limit monthly spending option, reviewed weekly
- D.A per-agent credit cap defined in the Agents usage report
Domain: Manage and secure AI services in Microsoft 365
Q4.A manufacturer wants .iso and .vbs attachments blocked outright on arrival, whether or not a scan finds anything malicious inside them. Which setting does that?
- A.The common attachments filter in an anti-malware policy
- B.Zero-hour auto purge (ZAP)
- C.Safe Attachments set to Dynamic Delivery
- D.The Files tab of the Tenant Allow/Block List
Domain: Govern and secure Microsoft 365 tenants and workloads
Q5.Which two statements about synced Copilot connectors are correct? (Choose two.)
- A.They require admin access to the external service, such as a Google Workspace Super Admin or Confluence Admin account
- B.Typical defaults are an incremental crawl every 15 minutes and a full crawl daily
- C.They ignore source permissions and expose all indexed content to every licensed user
- D.They carry a per-gigabyte indexing charge on top of Microsoft 365 licences
- E.They query the source at runtime using the Model Context Protocol
Domain: Manage and secure AI services in Microsoft 365
Q6.A user with a Copilot licence reports that Copilot returns only generic answers and never references any company documents. Support confirms the app is on Current Channel and fully updated. What should be checked next?
- A.Whether the user is signed in to the app with their work account rather than a personal Microsoft account
- B.Whether the device has been moved to Semi-Annual Enterprise Channel for stability
- C.Whether the user has been flagged as a suggested candidate in the readiness report
- D.Whether the Copilot licence was assigned by a Global Administrator rather than an AI Administrator
Domain: Manage and secure AI services in Microsoft 365
Q7.An administrator wants every member of an Entra group to receive a Microsoft 365 licence automatically, with a specific service plan turned off for all of them. Which sequence achieves this?
- A.Billing, then Licenses, select the product, Groups tab, Assign licenses, then toggle the service plan off
- B.Billing, then Your products, select the subscription, then Buy licenses for the group
- C.Microsoft Entra admin center, select the group, then Licenses, then Assign
- D.Billing, then Licenses, select each member in turn and untick the service plan
Domain: Configure and manage Microsoft 365 tenants and workloads
Q8.On the General tab when adding a Microsoft 365 custom theme, what is configured besides the theme name?
- A.The Microsoft 365 groups the theme applies to, up to five
- B.The navigation bar, accent, text and icon colours
- C.The default logo and the on-click link destination
- D.The favicon and page background colour for the sign-in page
Domain: Configure and manage Microsoft 365 tenants and workloads
Q9.Which role is required to configure the On-premises integration page for self-service password reset password writeback?
- A.Hybrid Identity Administrator
- B.Authentication Policy Administrator
- C.Helpdesk Administrator
- D.Security Administrator
Domain: Govern and secure Microsoft 365 tenants and workloads
Q10.An administrator must stop a specific Cowork plugin from being used by anyone in the tenant while leaving other plugins untouched. Where is that restriction applied?
- A.Agents > Tools, on the plugin's Users tab, by selecting Block
- B.Agents > All agents, by clearing the Installed for selection
- C.Copilot > Settings > Data access, by removing the plugin publisher
- D.Copilot > Cost Management, by setting the plugin's spending limit to zero
Domain: Manage and secure AI services in Microsoft 365
Microsoft AB-650 guides & exam news
Microsoft AB-650 Exam Topics and Domain Weightings in 2026: The MS-102 Replacement, Now in Beta
AB-650 replaces MS-102 as Microsoft's tenant administration exam, and the weightings tell a different story. Security and governance take 40 to 45 percent, AI services take 35 to 40 percent, and classic tenant admin is down to a fifth of the exam.
MS-102 Is Being Replaced by AB-650 in 2026: Domains, Cost and Should You Sit MS-102 Before 30 November?
Microsoft is retiring MS-102 on 30 November 2026 and replacing the Microsoft 365 Administrator Expert path with AB-650, a new single-exam Associate certification. Here is what changes, what it costs, and whether to sit MS-102 now.
SC-500 vs SC-200 in 2026: Which Microsoft Security Exam Should You Take?
SC-500 is for engineers who build and harden Azure, hybrid and AI workloads. SC-200 is for analysts who detect, investigate and respond. How the two 2026 exams differ, where their objectives overlap, and which to take first.
PL-900 Exam Changes in 2026: New Copilot Studio Topics, Cost and Is It Still Worth It?
Microsoft rewrote the PL-900 exam on 24 July 2026. Power Pages is gone, a Copilot Studio agents domain worth 20 to 25 percent replaced it, and most study material still teaches the old outline. Here is what changed and whether the exam is still worth booking.
Frequently Asked Questions
Does the Microsoft AB-650 course include performance-based questions?
Yes. The Microsoft AB-650 course includes 20 performance-based questions (PBQs): hands-on tasks that mirror the interactive questions on the real exam, including drag-and-drop matching, sequencing and configuration screens. Each one is marked with partial credit, so you can see exactly which placements were wrong, and every task includes a full explanation. The first two are free to try.
What is included in the free Microsoft AB-650 sample?
The free sample includes 10 syllabus-aligned practice questions, sample flashcards, and a preview chapter from the study guide. No account or payment is required to try the sample.
How many questions are in the full Microsoft AB-650 course?
The full Microsoft AB-650 course includes 400 practice questions and 20 performance-based tasks, covering all 3 exam domains. Every question carries a full explanation for the right answer and the wrong ones.
Are these official Microsoft exam questions?
No. CertCrush questions are independently written and syllabus-aligned. They mirror the format, difficulty, and reasoning style of the official exam. We are not affiliated with or endorsed by Microsoft.
Which domains does the Microsoft AB-650 course cover?
The course covers 3 exam domains: Configure and manage Microsoft 365 tenants and workloads, Govern and secure Microsoft 365 tenants and workloads, Manage and secure AI services in Microsoft 365.
Can I study on mobile?
Yes. CertCrush is fully responsive and works on phones, tablets, and desktops. The timed exam, flashcards, and study guide all work on mobile without installing an app.
What happens when I create an account?
Creating a free account lets you access full courses, track your weak areas by domain, and resume practice sessions across devices. No credit card is required to register.
Start with 10 free questions
No account, no card. The full Microsoft AB-650 course is $9.99, once.