Free Microsoft AB-650 Exam Dumps Questions & Answers

You have a Microsoft 365 subscription.
You need to create a data loss prevention (DLP) policy that is configured to use the Set headers action.
To which location can the policy be applied?

• A.Teams chat and channel messages
• B.SharePoint sites
• C.Exchange email
• D.OneDrive accounts

You have a Microsoft 365 E5 subscription that contains the groups shown in the following table.

All the groups are deleted.
Which groups can be restored, and what is the retention period? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Microsoft Entra ID supports soft deletion of Microsoft 365 groups, retaining their directory objects and associated service resources for a defined recovery period.
First selection: Group3 only.
The original examination answer reflects the established Microsoft 365 group restoration capability.
Microsoft 365 groups can be restored with their membership, Exchange mailbox, SharePoint site, calendar, and supported associated resources.
Traditional distribution groups and mail-enabled security groups do not use the same Microsoft Entra Microsoft 365 group soft-delete recovery workflow.
Second selection: 30 days.
Microsoft maintains deleted Microsoft 365 groups in a recoverable state for 30 days. Administrators can restore them during that period by using the Microsoft Entra admin center or supported PowerShell commands.
Current Microsoft documentation correction: Microsoft now also supports restoration of cloud security groups through a public-preview capability. Therefore, Group1 may also be recoverable if it is a cloud security group in a supported tenant.
The exhibit identifies Group1 only as Security and does not specify whether it is cloud-managed or synchronized from Active Directory.
As a result, Group3 only is the intended historical answer, but it is no longer unconditionally correct under current Microsoft documentation. The 30-day retention period remains correct.
Microsoft References:
https://learn.microsoft.com/en-us/entra/identity/users/groups-restore-deleted
https://learn.microsoft.com/en-us/microsoft-365/admin/create-groups/restore-deleted-group

You have a Microsoft 365 subscription.
You need to export all users to a CSV file named C:\Exports\Users.csv by using Microsoft Graph PowerShell.
The solution must meet the following requirements:
Include the Id, DisplayName, UserPrincipalName, UserType, and OnPremisesSyncEnabled properties.
Request the least-privileged delegated Microsoft Graph permission scope.
How should you complete the script? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Connect-MgGraph -Scopes: User.Read.All; $users =: Get-MgUser
Completed PowerShell Script:
Import-Module Microsoft.Graph
Connect-MgGraph -Scopes " User.Read.All "
$users = Get-MgUser -All -Property Id,DisplayName,UserPrincipalName,UserType,OnPremisesSyncEnabled
$users | Select-Object Id,DisplayName,UserPrincipalName,UserType,OnPremisesSyncEnabled | Export-Csv -Path " C:\Exports\Users.csv " -NoTypeInformation Disconnect-MgGraph Microsoft Graph PowerShell provides delegated access to Microsoft Entra user objects through Microsoft Graph permission scopes. The script requires both an appropriate read permission and a command capable of retrieving every user.
First selection: User.Read.All.
The delegated User.Read.All permission allows the application to read users ' full profiles. This includes properties beyond the basic identity information exposed through User.ReadBasic.All.
The requested UserType and OnPremisesSyncEnabled properties are not part of the limited basic profile available through User.ReadBasic.All.
Although Directory.Read.All could also provide access, it grants broader directory-reading privileges.
Consequently, User.Read.All is the least-privileged appropriate scope for the stated requirements.
Second selection: Get-MgUser.
The Get-MgUser cmdlet retrieves Microsoft Entra user objects. The -All parameter retrieves results across all available pages, ensuring that the export is not limited to the first page.
The -Property parameter explicitly requests the required attributes, including OnPremisesSyncEnabled, which is not returned in the default property set.
Finally, Select-Object selects the exported columns, Export-Csv creates the CSV file, and Disconnect- MgGraph ends the Graph session.
Microsoft References:
https://learn.microsoft.com/en-us/graph/permissions-reference
https://learn.microsoft.com/en-us/powershell/module/microsoft.graph.users/get-mguser

You have a Microsoft 365 subscription that contains a custom agent named Agent1.
Contractors require self-service access to Agent1 for a 30-day project.
You need to configure access to Agent1. The solution must meet the following requirements:
Access requests must require approval.
Access must expire automatically after 30 days.
What should you use?

• A.an access package
• B.Privileged Identity Management (PIM)
• C.a recurring access review
• D.a Conditional Access policy

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals.
More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.
After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.
You have a Microsoft 365 subscription that uses Microsoft Agent 365. The subscription contains an agent named Agent1.
The compliance team reports that confidential project information might appear in prompts submitted to Agent1 and in responses generated by Agent1.
You need to identify agent interactions that include confidential information in prompts or responses.
Solution: You use Microsoft Purview Communication Compliance.
Does this meet the goal?

• A.No
• B.Yes