サンプル問題 1： Your organization has a Microsoft 365 subscription. Which two tasks can you perform by using the Exchange admin center? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A: Create a mail flow rule.
B: Add a custom domain.
C: Assign a Microsoft Exchange license.
D: Create a shared mailbox.
正解：A, D
Explanation: The correct answers are A and D because both tasks are supported directly in the Exchange admin center (EAC). Microsoft Learn states that administrators can manage mail flow rules in Exchange Online from the EAC under Mail flow > Rules, which includes creating and managing transport rules for organizational email handling. Microsoft Learn also states that administrators can create shared mailboxes in the EAC under Recipients > Mailboxes, where a shared mailbox can be added and then delegated to users. Option B is incorrect because adding a custom domain is normally done in the Microsoft 365 admin center, specifically on the Domains page. Although Exchange can later work with accepted domains and related mail flow settings, the act of adding and verifying a custom domain is not an Exchange admin center task. Option C is incorrect because license assignment is handled through Microsoft 365 or Microsoft Entra administrative tools, not the Exchange admin center.
サンプル問題 2： What can you use to block a user account automatically when a risky sign-in is detected?
A: Microsoft Entra ID Protection
B: Microsoft Defender for Office 365
C: Microsoft Entra Privileged Identity Management (PIM)
D: Microsoft Defender for Identity
正解：A
Explanation: The correct answer is A. Microsoft Entra ID Protection. Microsoft Learn explains that Microsoft Entra ID Protection detects sign-in risk and user risk and can work with Conditional Access risk policies to automatically respond when suspicious authentication activity is identified. Microsoft documents specifically state that organizations can configure sign-in risk policies and user risk policies to automate responses such as blocking access, requiring multifactor authentication, or forcing password changes when risky activity is detected. Microsoft also notes that some very high-confidence risky sign-ins are automatically blocked by built-in protections. The other options do not match this function. Microsoft Defender for Office 365 focuses on email, collaboration, and threat protection for tools like Exchange Online and Teams, not sign-in risk blocking. Microsoft Entra Privileged Identity Management (PIM) manages privileged role activation and governance, not risky sign-in detection. Microsoft Defender for Identity detects identity-related threats in hybrid identity environments, but the Microsoft feature used to automatically block risky sign-ins is Microsoft Entra ID Protection.
サンプル問題 3： Your organization has a Microsoft 365 subscription. You need to evaluate your organization s Identity Secure Score. Which two factors affect the score? Each correct answer presents a complete the solution. NOTE: Each correct selection is worth one point.
A: the number of global administrators
B: the SharePoint site permissions
C: the location of the users
D: passwords that are never expired
正解：A, D
Explanation: The correct answers are A and D because Microsoft Entra Identity Secure Score is based on identity security recommendations, and Microsoft Learn specifically lists recommendations such as “Designate more than one Global Administrator” and “Do not expire passwords.” That means the number of global administrators in the tenant and whether password expiration is disabled directly influence the Identity Secure Score. Microsoft also notes that the score measures how closely an organization aligns with Microsoft’s recommended identity security best practices. Option B is incorrect because SharePoint site permissions are related to SharePoint and Microsoft 365 workload permissions, not to the Entra identity-focused scoring model. Option C is incorrect because user location may be evaluated in Conditional Access and Zero Trust scenarios, but it is not itself listed as a direct Identity Secure Score factor in the Microsoft Entra recommendations referenced by Microsoft Learn. Identity Secure Score is driven by tracked identity recommendations and security configurations, not by simple geographic placement of users.
GOWUKAKUのAB-900問題集は、Microsoft Microsoft 365 Copilot and Agent Administration Fundamentals認定試験の準備に向けた復習用問題集です。AB-900問題集を使用して出題形式を確認し、知識の定着度を確認しながら復習を進めることができます。
