AB-650 Exam Dumps and Practice Questions

Microsoft Defender for Office 365 supports outbound spam policies that control sending limits and automatically restrict accounts exhibiting suspicious outbound email activity.

Option A is correct because a custom outbound anti-spam policy can target Group1 specifically, allowing administrators to enforce more restrictive sending limits for marketing department mailboxes without changing the organization-wide configuration.

Administrators can navigate to Microsoft Defender portal Email & collaboration Policies & rules Threat policies Anti-spam, and create a custom outbound policy.

The policy should include Group1, configure the appropriate external recipient limit, and select Restrict the user from sending mail as the action when a limit is reached.

Option B is incorrect because modifying the default outbound policy would affect other users not covered by a higher-priority custom outbound policy.

Option C is incorrect because Strict preset security policies do not contain configurable outbound spam policies.

Option D is incorrect because Standard preset protection cannot provide a custom outbound sending limit.

Option E is incorrect because inbound anti-spam policies protect incoming email rather than restricting compromised users' outgoing messages.

Crucially, Microsoft's documentation confirms that Strict and Standard preset security policies do not override outbound spam policies. Therefore, the custom outbound policy can apply to Group1 without excluding its members from Strict protection.

Microsoft Reference:

Microsoft Learn --- Configure outbound spam policies.

Microsoft Learn --- Preset security policies.

The Microsoft 365 Admin mobile app provides administrators with mobile access to Microsoft 365 administrative functions, including service health monitoring, incident notifications, Message Center updates, and support requests.

Option C is correct because the Microsoft 365 Admin mobile app includes a dedicated Service Health feature that enables administrators to monitor the operational status of Microsoft 365 services directly from a mobile device.

Administrators can view active service incidents, service advisories, outages, and relevant service disruption details.

The app also supports configurable push notifications for service health alerts, enabling administrators to receive timely information about service disruptions without signing in to the web-based Microsoft 365 admin center.

Option A is incorrect because Intune Company Portal provides employees with access to managed corporate applications, device enrollment, and compliance information.

Option B is incorrect because the Intune app focuses on device management and access to organizational resources rather than Microsoft 365 service health monitoring.

Option D is incorrect because Microsoft Authenticator supports multifactor authentication, passwordless sign-in, and authentication approvals. It does not provide Microsoft 365 service health reporting.

Therefore, the Microsoft 365 Admin mobile app is the correct solution.

Microsoft Reference: Microsoft Learn --- About the Microsoft 365 admin mobile app.

Microsoft Defender for Office 365 Plan 2 provides Attack simulation training capabilities, including dedicated Training campaigns that assign educational modules without requiring another simulated phishing attack.

Option A is correct because creating a Training campaign targeting Group1 allows administrators to reassign the required training directly to the current members of the group. Using Group1 avoids manually identifying recipients and minimizes administrative effort when group membership changes.

Administrators can configure training assignment notifications and reminder notifications during campaign creation. To deliver reminders as frequently as supported, they can select the twice-weekly reminder option.

Option B is correct because the Training threshold setting controls how soon users can receive a training module that was previously assigned.

The default threshold is 90 days. Because the earlier simulation assigned the module recently, this setting could prevent reassignment during the new campaign.

Setting Training threshold to 0 removes the restriction and permits the same module to be reassigned immediately.

Option C is incorrect because a 60-day threshold would still prevent reassignment to users whose previous assignment occurred within that period.

Option D is incorrect because a tenant payload creates customized phishing simulation content, not training assignments.

Option E is unnecessary because simulation automation creates automated phishing simulations rather than directly assigning training.

Therefore, A and B are correct.

Microsoft Reference:

https://learn.microsoft.com/en-us/defender-office-365/attack-simulation-training-training-campaigns

https://learn.microsoft.com/en-us/defender-office-365/attack-simulation-training-settings

SharePoint Data Access Governance provides reporting capabilities that help administrators identify overshared sites, excessive permissions, and potentially risky content exposure without changing the existing SharePoint authorization configuration.

Option D is correct because Data Access Governance reports can identify sites that have broad access permissions, anonymous sharing links, and permissions granted to large organizational groups.

Administrators can access these reports through the SharePoint admin center under Reports and Data access governance.

The site permissions snapshot report provides visibility into permissioned users, guest access, broken permission inheritance, and sharing links.

Sharing links activity reports can also identify sites where users have created Anyone links, organization-wide links, or externally shared links.

These capabilities are especially important for Microsoft 365 Copilot because Copilot respects existing SharePoint permissions. Overshared content may therefore appear in responses provided to users who have access through excessively broad permissions.

Option A primarily measures site usage rather than evaluating permission exposure.

Option B focuses on classified content rather than analyzing SharePoint site permission structures.

Option C involves reviewing user access assignments, rather than identifying overshared sites across the SharePoint environment.

Option E supports compliance content searches but is not the dedicated solution for detecting broad site permissions.

Data Access Governance reports provide the required visibility without modifying permissions.

Microsoft Reference:

https://learn.microsoft.com/en-us/sharepoint/data-access-governance-reports

https://learn.microsoft.com/en-us/sharepoint/data-access-governance-site-permissions-report

Microsoft 365 Agent Registry provides centralized visibility into agents available within an organization. Administrators can filter the inventory using properties such as publisher type, deployment channel, platform, and status.

Option D is correct because the requirements identify two independent filtering conditions: external publisher ownership and availability within Microsoft Teams.

The Publisher type: Third party filter identifies agents developed and distributed by external organizations rather than Microsoft or the organization's internal developers.

The Channel: Teams filter identifies agents deployed to Microsoft Teams, where authorized users can discover and interact with them.

Applying both filters restricts the resulting inventory to third-party agents associated with the Teams channel.

Administrators can export the filtered agent list from the Microsoft 365 admin center for auditing. The export includes relevant metadata such as the agent name, channel, publisher, publisher type, platform, and status.

Option A is incorrect because Microsoft 365 apps is not the same deployment channel as Teams.

Option B is incorrect because Your users identifies internally created or shared agents rather than third-party publishers.

Option C is incorrect because Your org identifies agents published by the organization.

Therefore, Teams and Third party are the required filter values.

Microsoft Reference:

https://learn.microsoft.com/en-us/microsoft-365/admin/manage/agent-registry