AB-900 30-Day Study Plan: Pass Copilot and Agent Administration Fundamentals in 2026

Last Updated: July 2026

TL;DR: This 30-day AB-900 study plan splits Microsoft's Copilot and Agent Administration Fundamentals exam into four weekly blocks: core Microsoft 365 objects, data protection with Purview, Copilot and agent administration, then mock exams. Spend 45 to 60 minutes a day, practise inside real admin centres, and book your exam for day 30 [1] [2].

Exam AB-900, whose full title is Microsoft 365 Copilot and Agent Administration Fundamentals, is a deceptively broad certification. It wears the "Fundamentals" label, yet it expects you to move confidently through the Microsoft 365 admin centre, Microsoft Entra, Microsoft Purview and the Power Platform admin centre [2]. A month of steady, structured preparation beats a weekend cram, and this plan gives you a day-by-day route to the pass mark.

Every fact in this guide is checked against Microsoft Learn and the official AB-900 study guide. Where Microsoft does not publish a detail, this guide says so rather than guessing. If you are still deciding which certification to sit, you can browse Examinotion's Microsoft AI exam preparation courses alongside this plan.

Is 30 days enough to pass AB-900?

Thirty days is enough to pass AB-900 for most candidates who already use Microsoft 365 at work, provided you study consistently. The exam is broad rather than deep, so the challenge is coverage, not complexity. A daily 45 to 60 minute session across four weeks gives you time to see every objective at least twice, which is what a wide Fundamentals exam rewards.

Microsoft does not publish an official recommended number of study hours for AB-900 [2]. The only official time signal is the instructor-led course AB-900T00-A, "Introduction to Microsoft 365 and AI administration", which runs for a single day [6]. Independent candidates who have sat the exam consistently report that one day is not enough to absorb the breadth on offer, which is exactly why a paced 30-day plan works better than a rushed course.

The exam assumes real administrative familiarity. Microsoft's audience profile states that you should already know the admin centres used to access Microsoft 365 workloads, including Exchange Online, SharePoint, Microsoft Teams, Microsoft Entra and Microsoft Purview [2]. If you have never opened those consoles, add a preparation week and treat this as a 37-day plan rather than a 30-day one.

What AB-900 actually tests in 2026

AB-900 measures three areas of skill, and the weightings tell you where to spend your time. Microsoft refreshed the study guide for July 2026, so always confirm the live blueprint before you book, but the current structure is stable across the update [2]. Data protection and governance carries the largest share, which is the single most important planning insight for this exam.

The middle domain is where candidates most often lose marks, because Microsoft Purview is a large product family in its own right. Your plan should give week two entirely to data protection and governance, and you should expect roughly two in five questions to come from that area [2]. Treat the other two domains as important but lighter loads.

One structural point shapes the whole plan. AB-900 is a Fundamentals exam, so you get no access to Microsoft Learn during the test [3]. Associate and expert exams such as AB-100 or AI-103 let you search the documentation mid-exam, but Fundamentals and GitHub exams do not [3]. Everything, from admin-centre menu locations to Purview feature names, has to be in your memory on exam day, which raises the value of active recall in your revision.

Before you start: build your practice environment

Set up a free Microsoft 365 practice tenant before day one so you can click through the admin centres as you learn. A read-only screenshot in a study guide will not stick the way a live console does, and AB-900 rewards people who recognise where settings live. The Microsoft 365 Developer Program and free trials give you a sandbox tenant with Exchange, SharePoint, Teams, Entra and Purview enabled.

Have these five consoles bookmarked and open throughout the plan:

• Microsoft 365 admin centre, for organisation settings, users, groups and licensing
• Microsoft Entra admin centre, for identity, conditional access and single sign-on
• Microsoft Purview portal, for information protection, DLP and data lifecycle management
• SharePoint admin centre, for sites, permissions and oversharing reports
• Microsoft Power Platform admin centre, for agent monitoring and lifecycle

Also bookmark the two official self-paced learning paths, because they map almost one to one onto the exam domains. "Explore Microsoft 365 administration" covers the first domain [7], and "Explore Microsoft 365 Copilot and Agent Administration" covers Copilot licensing, deployment and agent governance [8]. These two paths, plus the official study guide, are the free spine of your revision [2].

Week 1 (Days 1 to 7): Core Microsoft 365 features and identity

Week one builds the foundation the rest of the exam sits on: the objects, licences and security controls of Microsoft 365. This domain is worth 30 to 35 percent of the mark, and it is the most concrete part of the syllabus, so it is a confidence-building place to start [2]. Aim to open each admin centre and locate every object you read about.

• Day 1: Licensing and the Microsoft 365 admin centre. Learn how licence types assigned to users and groups affect access to features, and explore organisation settings and domain names [2].
• Day 2: Exchange and SharePoint objects. Identify mailboxes and distribution groups in the Exchange admin centre, and sites, libraries and folders in the SharePoint admin centre [2].
• Day 3: Teams and permissions. Work through teams, channels and policies in the Teams admin centre, and revise SharePoint roles and permissions [2].
• Day 4: Zero Trust and security principles. Understand the core Zero Trust principles, authorisation, and authentication methods [2].
• Day 5: Microsoft Entra ID. Study conditional access policies, single sign-on, and the security objects you configure for users and groups [2].
• Day 6: Troubleshooting identity. Learn the tools for common sign-in issues, multifactor authentication, risky sign-ins, Identity Secure Score, audit logs and Privileged Identity Management [2].
• Day 7: Consolidation. Re-open every admin centre from memory, then take a short topic quiz on domain one to find weak spots.

By the end of week one you should be able to name which console owns which object without hesitation. That instant recognition is what the identification-style questions on AB-900 test, and it is far easier to build now than to cram in the final week.

Week 2 (Days 8 to 14): Data protection and governance with Purview

Week two tackles the largest domain, data protection and governance, worth 35 to 40 percent of the exam [2]. This is Microsoft Purview territory, and it is where a broad exam suddenly gets deep. Give it the full week and resist the urge to skim, because roughly two of every five questions live here.

• Day 8: Microsoft Purview overview. Understand Information Protection, Data Loss Prevention, Insider Risk Management, Communication Compliance and Data Lifecycle Management at a capabilities level [2].
• Day 9: Sensitivity labels and classification. Learn the use cases for sensitivity labels, how data classification works, and how retention is applied [2].
• Day 10: How Copilot accesses data. Study how Microsoft 365 Copilot accesses content, and how Microsoft Graph influences Copilot responses [2].
• Day 11: Copilot data security controls. Understand how Copilot uses permissions and controls across Microsoft 365, Purview and Microsoft Defender, and revise responsible AI principles [2].
• Day 12: Governance risks and DSPM for AI. Work through Compliance Manager, Data Explorer, DLP alerts and Data Security Posture Management (DSPM) for AI [2].
• Day 13: SharePoint oversharing. Learn to run a data access governance report, use SharePoint Advanced Management, and troubleshoot oversharing, a genuine 2026 focus area [2].
• Day 14: Consolidation and first mock. Re-test domain two, then sit a first full practice assessment to benchmark where you stand across all three domains.

Pay special attention to how Copilot inherits existing permissions. Understanding that Copilot only surfaces content a user could already reach is the conceptual thread that ties Purview, Microsoft Graph and oversharing together. For a deeper look at that grounding mechanism, our guide to how Microsoft 365 Copilot works is useful companion reading.

Week 3 (Days 15 to 21): Copilot and agent administration

Week three covers the newest and most distinctive domain, basic administrative tasks for Copilot and agents, worth 25 to 30 percent of the mark [2]. This is the "agent administration" half of the exam title, and it reflects Microsoft's 2026 push to make custom-agent governance a first-class admin skill. Practise these tasks in your tenant rather than only reading about them.

• Day 15: Copilot and agent capabilities. Compare the built-in capabilities of Copilot and agents, and identify which features can be enabled or disabled [2].
• Day 16: Licensing models. Compare the Copilot monthly licence model with pay-as-you-go billing, including for SharePoint, and revise the use cases for Researcher and Analyst [2].
• Day 17: Administering Copilot. Practise assigning Copilot licences, managing pay-as-you-go billing policies, and monitoring usage with Copilot Analytics and the Microsoft 365 admin centre [2].
• Day 18: Managing prompts. Learn how administrators manage prompts, including saving, sharing, scheduling and deleting them [2].
• Day 19: Agent administration. Configure user access to agents, create an agent, and understand the agent approval process [2].
• Day 20: Agent lifecycle and monitoring. Monitor agents, usage and operational insights across the Microsoft 365 admin centre and the Power Platform admin centre [2].
• Day 21: Consolidation and second mock. Re-test domain three, then sit a second full practice assessment and record your score.

By now you have seen all three domains. If your second mock sits comfortably above 700 on Microsoft's 1 to 1,000 scale, you are on track [4]. If it does not, week four is designed to close exactly that gap.

Week 4 (Days 22 to 30): Mock exams, weak areas and booking

Week four is deliberate repetition. You stop learning new material and start hardening what you know through mock exams, targeted review and timed practice. The goal is to turn broad familiarity into fast, confident recall, because AB-900 gives you only 45 minutes to answer the paper [1].

• Day 22: Full mock exam under timed conditions, then mark it and list every missed objective.
• Day 23: Weak-area review, domain one. Return to any core-features or identity topics you missed.
• Day 24: Weak-area review, domain two. Re-drill Purview, sensitivity labels and oversharing, the highest-weighted content.
• Day 25: Weak-area review, domain three. Re-practise Copilot licensing, agent creation and lifecycle monitoring.
• Day 26: Second full timed mock, aiming to beat your day 22 score.
• Day 27: Rapid recall. Quiz yourself on admin-centre ownership, Purview feature names and licensing rules without notes.
• Day 28: Final targeted review of your two weakest sub-objectives, plus a light re-read of responsible AI principles.
• Day 29: Rest and logistics. Confirm your booking, test your equipment if sitting online, and stop before you tire yourself out.
• Day 30: Exam day. Arrive early, work steadily, and flag questions for review rather than stalling.

Free practice assessments on Microsoft Learn are useful for style, but they are limited in number [1]. To rehearse under realistic pressure across the full blueprint, work through Examinotion's AB-900 practice questions as well, so you see more question variety before the real paper.

The 30-day AB-900 plan at a glance

This table summarises the four-week structure so you can see the whole route on one screen. Each block maps to an exam domain, and the daily commitment is 45 to 60 minutes.

If you have less than a month, compress by combining the consolidation days, but keep week two intact. Sacrificing Purview time to save a few days is the fastest way to fall below the pass mark on this exam [2].

Free and paid resources for AB-900

You can prepare for AB-900 entirely on official free material, then add paid practice tests to sharpen your exam technique. The free spine is Microsoft Learn, and it is genuinely comprehensive for this exam. Paid resources earn their place by giving you more realistic question practice than the single free assessment allows.

For strategy beyond the syllabus, our AB-900 exam guide explains why this is often called Microsoft's hardest Fundamentals exam, and how to pass AB-900 covers the overarching approach that complements this dated schedule.

Exam-day logistics: what to expect

AB-900 is a 45-minute exam with a total seat time of 65 minutes, which includes the non-disclosure agreement, instructions and optional comments at the end [1] [3]. You need a score of 700 or greater on a 1 to 1,000 scale to pass, and the score is scaled rather than a simple percentage [4]. The exam is currently offered in English only [1].

Microsoft does not publish an exact question count for AB-900, but its general guidance is that most exams contain between 40 and 60 questions, and first-hand accounts of AB-900 sit in that range [1]. Expect a mix of multiple choice, true or false, and identification-style questions. There are no hands-on labs, because performance-based labs are a feature of associate and expert exams, not Fundamentals [3].

If you do not pass first time, you can retake AB-900 after a 24-hour wait, with longer waits for later attempts [1]. One genuine advantage of this credential is permanence: Fundamentals certifications do not expire, unlike associate, expert and specialty certifications that require annual renewal [5]. Passing AB-900 once means it stays valid on your transcript indefinitely.

Frequently Asked Questions

How many hours do you need to study for AB-900?

Microsoft publishes no official study-hours figure for AB-900 [2]. A realistic estimate for someone who already uses Microsoft 365 is 20 to 30 hours, spread across a month at roughly 45 to 60 minutes a day. Candidates without admin-centre experience should budget more time, because the exam assumes familiarity with several consoles.

Can you pass AB-900 in 30 days?

Yes, 30 days is a realistic timeframe to pass AB-900 if you study consistently and practise inside real admin centres. The exam is broad rather than deep, so a paced four-week plan covering each domain twice suits it well. Candidates with existing Microsoft 365 administration experience often need less than a month.

Is AB-900 harder than AB-730?

AB-900 is generally considered broader and more technical than AB-730, because it targets IT administrators working across Microsoft Entra, Purview and the Power Platform, whereas AB-730 targets business users of Copilot [2]. Neither is officially rated harder by Microsoft, but AB-900 has a reputation as an unusually wide Fundamentals exam.

Is Microsoft Learn available during the AB-900 exam?

No, Microsoft Learn is not available during the AB-900 exam. In-exam access to Learn is granted only on role-based associate and expert exams, not on Fundamentals or GitHub exams [3]. You must memorise admin-centre locations, Purview features and licensing rules in advance, which is why active recall matters in your revision.

Does the AB-900 certification expire?

No, the AB-900 certification does not expire. Microsoft Fundamentals certifications are exempt from the annual renewal cycle that applies to associate, expert and specialty credentials [5]. Once you pass AB-900, the certification remains valid on your Microsoft transcript indefinitely, with no free online reassessment required each year.

What score do you need to pass AB-900?

You need a score of 700 or greater to pass AB-900. Microsoft reports all technical exam scores on a scaled range of 1 to 1,000, so 700 is not a simple 70 percent [4]. The scaled score reflects question difficulty, and you receive a breakdown by skills area if you do not pass.

Conclusion

AB-900 rewards steady, structured preparation over last-minute cramming, and this 30-day plan gives you a clear route through its three domains. Spend week one on core Microsoft 365 objects and identity, give week two entirely to data protection with Microsoft Purview, cover Copilot and agent administration in week three, then use week four to convert broad knowledge into fast, confident recall. Keep a live tenant open throughout, and always check the current objectives on the official study guide before you book [2].

When you are ready to rehearse under exam conditions, start practising for AB-900 with Examinotion's full-length practice tests, then browse the wider Microsoft AI exam catalogue to plan your next certification with confidence.

Sources

1. Microsoft 365 Certified: Copilot and Agent Administration Fundamentals — Microsoft Learn, accessed 2026-07-14
2. Study guide for Exam AB-900: Microsoft 365 Copilot and Agent Administration Fundamentals — Microsoft Learn, accessed 2026-07-14
3. Exam duration and exam experience — Microsoft Learn, accessed 2026-07-14
4. Exam scores and score reports — Microsoft Learn, accessed 2026-07-14
5. Renew your Microsoft certification — Microsoft Learn, accessed 2026-07-14
6. Course AB-900T00-A: Introduction to Microsoft 365 and AI administration — Microsoft Learn, accessed 2026-07-14
7. Explore Microsoft 365 administration — Microsoft Learn, accessed 2026-07-14
8. Explore Microsoft 365 Copilot and Agent Administration — Microsoft Learn, accessed 2026-07-14