Skills Pragati
YouTube

AB-650 Course guide

AB-650 Exam Guide: Make a Microsoft 365 Tenant AI-Ready

What the AB-650 Microsoft 365 and AI services admin exam covers, how its 3 domains are weighted, and a hands-on plan to make a tenant AI-ready.

· 5 min read

AB-650 domains: tenants and workloads 20-25%, govern and secure 40-45%, manage and secure AI services 35-40%
Watch the lesson: Course Overview | Microsoft 365 and Agent 365 Administration Step By Step - AB-650

Copilot and AI agents can reach every file a person can open. In most tenants that is a problem waiting to happen: weak sign-ins, overshared sites, no sensitivity labels, and nobody who owns the agents.

The AB-650 exam tests whether an administrator can fix that: run Microsoft 365, govern and secure it, and manage AI services and agents on top. This guide explains what it covers and how to prepare hands-on.

The story behind the course

Pragati Industries makes pumps, with plants in Pune and Chennai, and its people work in Microsoft 365. Lab by lab, we make its tenant AI ready: identities, access, data protection, Copilot and Agent 365, monitored end to end.

The three exam domains

Table of the three AB-650 domains, their weights and course labs
The three domains, their weights, and the labs that teach them.
Domain Weight Course labs
Configure and manage tenants and workloads 20–25% Labs 0–5
Govern and secure tenants and workloads 40–45% (the largest) Labs 6–10
Manage and secure AI services 35–40% Labs 11–17

Every skill in the official outline is practised in a lab, and Labs 18 onwards go beyond the exam, to the daily work of a real administrator. Check the official exam page for the current skills outline before you book.

What you actually build

  • People, guests and groups, including a dynamic group that fills itself with everyone in Pune.
  • Sign-ins protected by Conditional Access: MFA and old protocols blocked, tested safely in report-only mode.
  • Supplier codes in an e-mail labelled Highly Confidential by Outlook itself, and stopped by DLP from leaving the company.
  • Microsoft 365 Copilot configured setting by setting, with the data checked for oversharing first.
  • Every agent in the Agent 365 registry: who published it, who owns it, and who may use it.
  • Agent identities in Entra, with a sponsor, a lifecycle and their own Conditional Access.
Entra Conditional Access policies, all in report-only mode
Lab 8: Conditional Access policies, created from templates in report-only mode.
Outlook: Send blocked, a message with supplier codes is stopped by data loss prevention
Lab 10: DLP blocks an e-mail with supplier codes before it leaves.
Microsoft 365 admin center All agents registry showing 366 agents
Lab 13: the Agent 365 registry lists every agent in the tenant.
Entra agent identity overview for a Copilot Studio agent with sponsors and owners
Lab 14: an agent with its own identity in Entra, its sponsor and its owners.

A study plan that works

  1. Start with Lab 0: the tenant, the free trials, Pragati’s people and the tools.
  2. Follow the labs in order. Labels from Lab 10 protect data from Copilot in Lab 11 and from agents in Lab 15.
  3. Do every lab yourself, or rehearse it in the practice simulation first.
  4. Finish with a timed mock exam, and rewatch the labs behind your weakest domain.

The full course is free on YouTube

The overview above is the first of 46 videos. Watch them in order on the course page, then practise.

Do it yourself

Lab guides, practice and full mock exams come with a subscription. See the plans

More on AB-650