Microsoft Updated AB-650 Exam Questions and Answers by alvie

The Microsoft 365 Copilot usage report provides detailed adoption and engagement metrics that enable administrators to evaluate how effectively licensed users utilize Copilot across Microsoft 365 applications.

Option A is correct because the report supports the required analysis without relying on Microsoft Purview audit events or examining the content of user prompts.

Administrators can access the report through Microsoft 365 admin center → Reports → Usage → Microsoft Copilot → Copilot → Usage.

The report provides several relevant metrics, including enabled users, active users, active-user rates, adoption trends, and application-specific activity across Word, Excel, PowerPoint, Outlook, Teams, and other supported applications.

The Adoption by app section enables administrators to compare licensed users against active Copilot users in each application. This helps identify applications where license deployment is increasing but actual engagement remains low.

The report also tracks supported Copilot feature interactions, enabling administrators to understand usage patterns and identify opportunities for targeted training.

For example, low adoption in Excel may indicate a need for training on AI-assisted data analysis, while low Teams engagement may indicate limited awareness of meeting summarization capabilities.

Microsoft specifically recommends using official Copilot usage reports rather than audit logs for adoption measurement because the reporting metrics are designed for consistent usage analysis.

Therefore, reviewing the Microsoft 365 Copilot usage report meets the stated goal.

To apply malware protection: Configure Safe Attachments for Microsoft SharePoint, OneDrive, and Teams.; To prevent local copies: Run the Set-SPOTenant cmdlet to prevent users from downloading infected files.

Microsoft Defender for Office 365 provides Safe Attachments protection for files stored in SharePoint Online, OneDrive for Business, and Microsoft Teams. The feature identifies malicious files and restricts their availability across Microsoft 365 collaboration workloads.

First selection: Configure Safe Attachments for Microsoft SharePoint, OneDrive, and Teams.

Administrators must enable Safe Attachments protection for the collaboration workloads through the Microsoft Defender portal. This configuration enables malware detection and protection for supported files stored in these services.

Second selection: Run the Set-SPOTenant cmdlet to prevent users from downloading infected files.

By default, users cannot open, move, copy, or share files identified as malicious, but downloading may still be permitted. To prevent users from retaining local copies, administrators must enable the tenant-level download restriction by using SharePoint Online PowerShell:

Set-SPOTenant -DisallowInfectedFileDownload $true

This setting prevents ordinary users from downloading files that have been detected as infected.

The two configurations work together: Safe Attachments provides malware detection and file protection, while the SharePoint tenant setting closes the download restriction gap.

The configuration can be verified by checking the DisallowInfectedFileDownload property using Get-SPOTenant.

Microsoft References:

https://learn.microsoft.com/en-us/defender-office-365/safe-attachments-for-spo-odfb-teams-configure

User2 can enable Copilot image generation for the subscription: Yes; User1 can use Microsoft 365 Copilot in the Exchange admin center: Yes; User3 can buy a Microsoft 365 Copilot license without admin approval: No

Microsoft 365 Copilot administrative controls determine who can manage AI functionality, access Copilot within administrative portals, and purchase licenses independently.

First statement: Yes. User2 holds the AI Administrator role, which provides permission to configure Microsoft Copilot settings, including image generation. An AI Administrator can navigate to the Microsoft 365 admin center, open Copilot settings, and modify the Copilot image generation configuration.

Second statement: Yes. User1 holds the Global Reader role. This is a recognized administrative role that provides read-only access to supported Microsoft 365 administrative portals, including Exchange admin center. Because Copilot in admin centers is configured as Allowed for all admins, User1 can access supported Copilot functionality within the permissions of the role. This does not grant permission to modify Exchange settings.

Third statement: No. The self-service purchasing configuration is Allow trials only. This permits eligible users to start supported trials but prevents them from purchasing Microsoft 365 Copilot licenses independently.

User3 has no administrative role and cannot bypass the purchasing restriction.

Therefore, the correct sequence is Yes, Yes, No.

Microsoft References:

https://learn.microsoft.com/en-us/microsoft-365/copilot/microsoft-365-copilot-page

https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference