Free Microsoft AB-900 Practice Exam Questions and Answers 2026

The HR team at Tailwind Traders has 200 specialists who use Copilot heavily every day across Outlook, Word, Teams, and SharePoint. The CFO wants Copilot costs for this team to be stable and easy to forecast for the next 12 months. Other small project teams will experiment with SharePoint agents, but their usage will be occasional and unpredictable.

Which licensing approach best fits the HR specialists?

A security architect enables Microsoft Entra ID Protection and assumes that, from that moment onward, any sign-in flagged as “high risk” will automatically be blocked or forced to perform multifactor authentication, even if no Conditional Access policies have been configured to act on risk. The architect states, “ID Protection on its own will enforce MFA or block access when risk is detected.” This statement is:

“Privileged Identity Management lets organizations assign admin roles as eligible instead of permanent, require approval and MFA for activation, enforce time limits on elevated sessions, and review or audit privileged role activations over time.”

Your Operations team uses Copilot daily, generating hundreds of queries each week. What is the most cost-effective licensing step?

A group of high-impact administrators in a Microsoft 365 tenant are repeatedly targeted by modern phishing kits that can proxy sign-in pages and steal MFA codes in real time. The security team wants a sign-in method that is resistant to credential theft and MFA code replay, and that ties authentication to a hardware-backed credential. Which authentication method best meets this requirement?