The 40-second answer
AB-650: Administering Microsoft 365 and AI Services exam is a single, Associate-level Microsoft exam, currently in beta, that earns the Microsoft 365 Certified: AI Services Administrator Associate credential. It is scored out of 1000 with a passing score of 700, and it is built on three domains: Configure and manage Microsoft 365 tenants and workloads (20-25%), Govern and secure Microsoft 365 tenants and workloads (40-45%), and Manage and secure AI services in Microsoft 365 (35-40%). There are no formal prerequisites, but Microsoft expects hands-on experience with Microsoft 365 workloads and Microsoft Entra ID, an understanding of Defender XDR, and familiarity with Microsoft Graph PowerShell. Microsoft has not published the question count, the exam duration, or a single global price. Any article quoting those numbers is guessing.
Now the part most guides skip: this exam is a moving target, and treating it like a settled syllabus is how people fail it. So this is not a syllabus. It is a runbook, structured the way you would plan any tenant change: triage, discovery, gap analysis, remediation, cutover, validation.
Phase 0: Should you even be reading this? (90-second triage)
Most AB-650 traffic comes from one of four situations, and they don’t share an answer.
| Your situation | Verdict |
| Midway through MS-102 prep, exam already booked | Finish MS-102. A pass applied to your transcript before retirement still counts. Do not switch. |
| Considering MS-102, have not started | Stop. Put the hours into AB-650 instead. |
| Working M365 admin whose job now includes Copilot and agents | AB-650 is the closest thing to a job description Microsoft has published. Sit it. |
| New to the Microsoft stack, looking for a first cert | Wrong exam. This is intermediate. Start with MS-900 or AZ-900 and build workload experience first. |
| Chasing the “Expert” badge on your CV | Recalibrate. The Expert-tier M365 admin path is being retired, not replaced at the same tier. |
That last row is the one nobody tells you, so let us deal with it immediately.
Phase 1: What is AB-650, and why did Microsoft build a new exam instead of refreshing MS-102?
Microsoft certifications could have updated MS-102 the way it updates dozens of exams every year. It chose not to, and the reason is structural, not cosmetic.
MS-102 was never a standalone certification. It was one half of Microsoft 365 Certified: Administrator Expert, which also required you to already hold one of three Associate credentials: Endpoint Administrator Associate (MD-102), Teams Administrator Associate, or Identity and Access Administrator Associate (SC-300). Two exams minimum, Expert tier.
AB-650 is one exam, Associate tier, no second credential required.
So the honest framing is not “AB-650 replaces MS-102.” It is: an Expert-tier, two-exam path is being retired, and a leaner Associate-tier, one-exam path is taking over the territory, with the scope rebalanced toward AI. If you were pursuing the Expert badge specifically, that goal no longer exists in the same form. If you were pursuing demonstrable M365 admin competence, the new path is faster and cheaper.
The date that half the internet has wrong
This matters because people are booking exams against it.
Microsoft Learn displays a retirement warning on the MS-102 exam page stating that the exam retires on 30 November 2026 at 11:59 PM Central Standard Time.
Many third-party guides, prep vendors, and aggregator posts currently state 31 October 2026. That is incorrect, and it is not a trivial error: it removes a month from the runway of anyone deciding whether they can finish MS-102 in time. Before you make a scheduling decision, check the exam page yourself rather than trusting any secondary source, including this one.
Related, and often conflated: the MS-102 retirement date is not the same as AB-650’s general availability date. Microsoft has not published a firm GA date on the AB-650 exam page. Treat any specific GA month you see quoted as an estimate.
Explore the current changes that are being made within the Microsoft ecosystem: Microsoft Certifications In 2026: What’s New, What’s Gone, and What You Should Chase Next
Phase 2: What does the blueprint say if you read it like an examiner instead of a student?
Students read the skills outline for topics. Examiners read it for verbs and weightings because those determine what a question can actually ask you to do. Three things fall out when you read it that way.
The verbs are not uniform, and that is a scope signal
Look at the Microsoft Purview section inside Domain 2. Three of its five bullets begin with “Identify requirements for”: DLP policies, information protection, and data lifecycle management. The remaining two say “Review and respond to” DLP alerts and “Monitor and secure” AI activity using Data Security Posture Management.
Now compare that to Domain 1, which says “Configure,” “Implement and manage,” “Create and manage,” and Domain 3, which says “Configure,” “Manage,” “Discover,” “Install, block, or control access to.”
Practical translation: for Purview, you are more likely to face scenario questions that ask which control fits a stated business requirement than questions demanding an exact click path through the portal. For tenant settings, workloads, and agents, expect the opposite. Study Purview conceptually and by decision tree. Study Copilot and Agent 365 with your hands.
The weightings do not add up to 100, and the midpoints tell you where to spend
The ranges are 20-25%, 40-45%, and 35-40%. Lower bounds total 95; upper bounds total 110. That is normal Microsoft notation, not an error, but the usable takeaway is this: Domains 2 and 3 together account for roughly 75% to 85% of the exam. Classic tenant administration, the comfortable part for a veteran M365 admin, is at most a quarter of your score.
If you allocate study time evenly across three domains, you have over-invested in the smallest one by roughly double.
More than half the exam touches AI, not 35-40%
Domain 3 is the explicitly AI domain. But AI content leaks into the other two. Domain 1 includes licensing for Microsoft 365 Copilot, Microsoft Agent 365, and Microsoft Copilot Studio; Copilot settings in Teams meetings, including transcription; and configuring SharePoint and OneDrive for Copilot, including SharePoint Advanced Management and site exclusions. Domain 2 includes DLP requirements for Copilot, DLP alerts for AI services, and DSPM for AI.
Counting the individual bullets in the published skills outline, roughly 30 of 58 touch AI services in some form. Call it half the blueprint, not the 35-40% the headline weighting implies. That single reframing is probably worth more to your pass chance than any practice test.
Delve into the details to explore whether pursuing Microsoft AI certs in 2026 is beneficial or not: Are Microsoft AI Certifications The Key To Your Next Big Career Move In 2026?
Phase 3: How much of your MS-102 preparation actually transfers?
Hereis a side-by-side comparison using the published domains of both exams.
| MS-102 domain | Weight | Where it lands in AB-650 |
| Deploy and manage a Microsoft 365 tenant | 10-15% | Survives and expands into Domain 1 (20-25%), now with Backup, network connectivity insights, and AI licensing |
| Implement and manage Microsoft Entra identity and access | 25-30% | Survives largely intact inside Domain 2 |
| Manage security and threats using Microsoft Defender XDR | 35-40% | Narrows sharply to Defender for Office 365 within Domain 2 |
| Manage compliance using Microsoft Purview | 15-20% | Survives, reframed toward requirements and AI data security |
| Not tested | n/a | New: all of Domain 3, Copilot administration and Agent 365 |
Two non-obvious consequences.
The Defender investment shrinks. MS-102 gave you 35-40% on Defender XDR broadly. AB-650 tests Defender for Office 365 specifically: alerts, threat policies and rules, email and collaboration threat investigation, attack simulation and training campaigns. Defender for Endpoint, Identity, and Cloud Apps move from tested material to assumed background. The audience profile still expects “an understanding of Defender XDR capabilities,” which is a very different bar from being examined on it.
A gap opens where you least expect it. AB-650 tests workload administration that MS-102 did not: creating and managing mailboxes including shared mailboxes, creating and managing teams with channels, owners and members, and creating and managing SharePoint sites including permissions. MS-102 was a tenant-level exam. If your last few years have been spent in admin centers at the policy layer rather than the object layer, this is a real and slightly embarrassing gap. Budget lab time for it.
Rough transfer estimate: around 55% to 65% of MS-102 preparation carries over. The rest is new ground.
Phase 4: Which AB-650 topics have no legacy study material at all?
This section decides your outcome, because no MS-102 course, older Microsoft 365 book, or pre-2026 video series covers it.
Microsoft 365 Copilot administration. Tenant and data readiness assessment; resolving data oversharing and data leak issues before enablement; web search controls for Copilot and Copilot Chat; Copilot Search configuration; tenant settings covering self-service purchases, release preferences, AI disclaimer and image and video generation; Copilot Cowork; third-party AI providers; and Copilot connectors.
Microsoft Agent 365 and the agent registry. Agent 365 is Microsoft’s control plane for AI agents, and its registry is the unified inventory of every agent operating in the organization, both Microsoft and non-Microsoft. You need to know how to discover agents; review and publish or reject them; install or block them; upload custom agents; manage agent owners; configure allowed agent types and sharing; and manage tools.
Microsoft Entra Agent ID. The identity layer underneath Agent 365. Agents get first-class identity records, so lifecycle workflows, access packages, and Conditional Access apply to them the way they apply to users. Exam-relevant framing: Agent 365 discovers and inventories; Entra Agent ID authenticates, authorizes, and governs.
The Copilot Control System. Usage and adoption monitoring for AI services, plus service health, sitting alongside the standard Microsoft 365 admin center usage reports and AI cost management.
Purview DSPM for AI. Data Security Posture Management applied specifically to AI activity.
One detail worth internalizing because it is exactly the kind of thing a scenario question hangs on: viewing the full agent inventory in the Microsoft 365 admin center requires at least the AI Reader role. Least-privilege questions love a role like that.
Learn more about: Microsoft AB-900 Guide: Everything You Need To Know About The Copilot and Agent Administration Fundamentals Certification
Phase 5: Where do the published facts stop and the internet start guessing?
Certification content has a credibility problem, and beta exams make it worse because the vacuum gets filled. Here is the audit.
| Claim | Status | Where it comes from |
| Passing score is 700 | Confirmed | AB-650 study guide |
| Three domains at 20-25 / 40-45 / 35-40% | Confirmed | Exam page and study guide |
| Single exam earns the Associate credential | Confirmed | Exam page |
| Exam is in beta, English only, no retirement date | Confirmed | Exam page |
| No official practice assessment yet | Confirmed, typically arrives within 8 weeks of GA | Exam page |
| MS-102 retires 30 Nov 2026, 11:59 PM CST | Confirmed | MS-102 exam page warning |
| MS-102 retires 31 Oct 2026 | Wrong, widely repeated | Third-party sites |
| “AB-650 has X questions” | Unpublished | Vendor estimate |
| “AB-650 takes Y minutes” | Unpublished | Vendor estimate |
| “AB-650 costs $Z” | Unpublished globally; price varies by country and region | Vendor estimate |
| Specific GA month | Unpublished | Inference |
A note on the beta discount that keeps circulating: Microsoft ran an 80% beta voucher limited to the first 300 registrations, with a booking deadline that has now passed and several countries excluded. If you find a page still promoting it, it’s stale. Do not build a budget around it.
Two structural facts about beta exams that change how you should think about timing. First, beta results are not immediate. Microsoft withholds scoring while it evaluates question performance, so your result and your credential arrive weeks after you sit. Second, a beta pass is worth exactly the same as a GA pass once scoring finalizes. You are trading a delayed result for an earlier, cheaper attempt at a less picked-over question bank.
Phase 6: What will AB-650 actually cost you?
Microsoft does not publish a price on the AB-650 exam page. It only says the price depends on the country or region where the exam is proctored. That is why so many articles either invent a number or dodge the question entirely. Here is the precise position.
The headline figure
Microsoft’s own certification FAQ states that Associate and Expert exams typically cost US$165, priced according to currency values in specific countries and regions, subject to change, with additional taxes in some regions. AB-650 is an Associate-level exam. So US$165 plus applicable tax is the correct planning figure for the United States, and the local equivalent elsewhere.
To confirm your exact price, start the booking flow through Pearson VUE from the AB-650 exam page. The figure shown at checkout is the only authoritative one.
The beta discount is gone
Microsoft ran an 80% beta voucher for AB-650, capped at the first 300 registrations, with a booking deadline that has now passed and several countries excluded from eligibility. Pages still promoting that code are stale. Budget the full Associate price.
The beta retake rule that changes the maths
This is the single most expensive thing people do not know, and it is written into Microsoft’s retake policy rather than the exam page.
You may take a beta exam only once during the beta period. If you fail it, you cannot retake it until the exam reaches general availability. Combine that with delayed beta scoring and the consequence is uncomfortable: you sit the exam, wait weeks for a result, discover you failed, and then wait for GA before you can try again.
The standard retake rules only kick in once the exam is live: 24 hours after a first failure, then a 14-day wait between subsequent attempts, capped at five attempts in any 12-month period from your first attempt, and you pay the full fee every time. Microsoft does not refund failed exams or missed appointments.
Read plainly: a beta seat is cheap in money and expensive in time. Sit it only if you would genuinely back yourself to pass, not as a reconnaissance run.
Total cost of ownership
The exam fee is rarely the whole number.
| Line item | Typical US cost | Notes |
| Exam seat | US$165 plus tax | Standard Associate pricing |
| Retake, if needed | US$165 again | No free retakes, no refunds |
| Exam Replay bundle | Above one seat, below two | One voucher plus one retake of the same exam |
| Third-party practice tests | US$0 to US$60 | No official practice assessment exists yet |
| Instructor-led training | US$500 to US$2,500+ | Optional, usually employer-funded |
| Lab licensing | US$0 personally | Do not self-fund; see below |
| Renewal | US$0 | Free annual online assessment |
Three scenarios, so you can budget honestly:
- Self-study, pass first time: roughly US$165 to US$185 all in.
- Self-study with paid practice tests, pass first time: roughly US$185 to US$225.
- Fail once, pass on retake: roughly US$330 to US$400, plus the waiting period.
The lab cost trap
Do not put Agent 365 on a personal credit card. It is included with Microsoft 365 E7 and sold as an add-on to E5, A5, and Business Premium, or via the Defender Suite plus Purview Suite combination, and applying Conditional Access or identity governance to agents additionally requires Microsoft Entra Agent ID licensing. These are enterprise SKUs priced for organizations, not for individual exam candidates. Use your employer’s tenant with read access, or a free Microsoft 365 developer tenant, for everything that doesn’t require the premium AI surface.
Legitimate ways to pay less
- Academic pricing. Students and educators can verify status for reduced pricing. Critical detail: verify before you pay, because Microsoft does not issue refunds to people who register at commercial pricing and verify afterward. Verification lasts 12 months.
- Exam Replay. A Pearson VUE package bundling one exam voucher plus one retake of that same exam. Both must be scheduled and taken within 12 months of purchase, and you cannot schedule the retake until you have actually failed the first attempt. Worth it if you are honestly uncertain, wasteful if you are well prepared.
- Free vouchers. Microsoft periodically issues exam vouchers through Virtual Training Days, Cloud Skills Challenges, and community events. These skew toward Fundamentals exams, but Associate vouchers do surface.
- Employer reimbursement. Most organizations with a training budget will fund this, and AB-650 has an unusually easy business case right now: it maps directly to governing a Copilot and agent rollout that your employer is probably already planning.
- MCT and partner pricing. Microsoft Certified Trainers and Microsoft Partner Network members may qualify for reduced pricing.
The number that makes it cheap
Renewal is free and unproctored, taken on Microsoft Learn inside a window before your annual expiry date. Pass once, renew on time, and the lifetime cost of holding this credential is the single exam fee. Miss the renewal window, and you pay for the full exam again, which makes a diary reminder worth US$165.
Phase 7: How do you get hands-on when licensing gates the features?
The uncomfortable truth about AB-650 is that its newest and heaviest content sits behind premium licensing, so the usual “spin up a trial tenant” advice partly breaks down.
Agent 365 is included with Microsoft 365 E7, and available as an add-on to E5, A5, and Business Premium, or via the Defender Suite plus Purview Suite combination. Applying security and governance controls to agents, Conditional Access and identity governance in particular, requires appropriate Microsoft Entra Agent ID licensing.
Practical sequencing that works around this:
- Do the free tier properly first. A Microsoft 365 developer tenant covers Domain 1 and most of Domain 2: domains, branding, organizational settings, group-based licensing, mailboxes, Teams, SharePoint sites and permissions, Entra users, groups, administrative units, Conditional Access, SSPR, Password Protection.
- Use your employer’s tenant for read-only reconnaissance. You do not need change rights to learn the surface. Ask for AI Reader or an equivalent read role and walk the agent registry, the Copilot Control System, and the usage reports.
- Substitute documentation for clicks where you must. For anything you genuinely cannot access, read the admin documentation and, critically, note which portal each task lives in. Microsoft moved the agent registry experience out of the Entra portal and into Agent 365 in the Microsoft 365 admin center. Older screenshots and blog posts still point at a blade that no longer exists. The portal location is exam-relevant, and it is currently the most decayed piece of information in circulation.
- Practice Microsoft Graph PowerShell for bulk operations. It is named explicitly in the audience profile, and it is the cheapest skill on this list to acquire.
Also worth knowing: the skills outline states that most questions cover generally available features, but preview features may appear where they are commonly used. Given that parts of the Entra Agent ID surface have been in preview during 2026, do not skip a topic purely because it carries a preview label.
Phase 8: What does a weighting-accurate study plan look like?
Most plans allocate a week per domain. That is precisely wrong, because the domains are not the same size. Take whatever hour budget you have, call it 60 hours, and split it by weighting.
| Allocation | Hours (of 60) | What goes here |
| Domain 1: tenant and workloads | ~13 | Tenant config, domains, licensing, including AI SKUs, Backup, service health, mailboxes, Teams, SharePoint, and OneDrive for Copilot |
| Domain 2: govern and secure | ~26 | Entra identities, PIM, administrative units, authentication and Conditional Access, Defender for Office 365, Purview requirement mapping, DSPM |
| Domain 3: AI services | ~21 | Copilot readiness and settings, Copilot Search, connectors, Agent 365, Entra Agent ID, agent registry, Copilot Control System, AI cost monitoring |
Two adjustments on top. If you are coming from MS-102, shift hours from Domain 2 into Domain 3 and into the workload-object tasks in Domain 1, because those are your actual gaps. If you are coming from a Copilot or AI-adoption role rather than a traditional admin role, invert it: your Domain 3 instincts are fine, and your Entra and Defender foundation is the risk.
And before you book anything, run through the exam sandbox at aka.ms/examdemo. It costs nothing, takes fifteen minutes, and removes an entire category of exam-day surprises around question formats and interface behavior.
Phase 9: What is the risk register for this exam?
An admin plans a change by listing what can go wrong. Same discipline here.
| Risk | Why it bites | Mitigation |
| Studying from decayed sources | Portals and blades moved during 2026 | Verify against Microsoft Learn; check the doc’s last-updated date |
| Even study time split across domains | Domain 1 is a fifth of the exam, not a third | Allocate by weighting |
| Assuming MS-102 material is enough | Roughly a third to a half of AB-650 has no MS-102 equivalent | Treat Domain 3 as a fresh subject |
| Skipping workload object tasks | Mailboxes, teams, and SharePoint sites were not on MS-102 | Lab them explicitly |
| Waiting for an official practice assessment | Not available until well after GA | Use the sandbox and hands-on labs instead |
| Relying on brain dumps | Microsoft’s exam policies prohibit them; consequences include certification revocation and bans | Do not |
| Expecting an instant beta result | Scoring is deliberately delayed | Do not schedule a job application around the result date |
Phase 10: You passed. What happens next?
The credential is Microsoft 365 Certified: AI Services Administrator Associate, and like other Microsoft Associate, Expert, and Specialty certifications, it expires annually. Renewal is free: an unproctored online assessment on Microsoft Learn, available in a window before your expiry date. Miss the window, and you sit the full exam again.
Given the pace at which Copilot and Agent 365 are changing, expect the renewal assessment to be substantively different from the exam you passed. That is a feature rather than an annoyance, but it does mean this credential requires you to keep current in a way older certifications did not.
Frequently asked questions
Is the AB-650 exam hard?
It is genuinely broad rather than deep. The difficulty comes from surface area: tenant administration, Entra identity, Defender for Office 365, Purview, Copilot, and Agent 365 in one exam. An experienced M365 admin will find Domains 1 and 2 comfortable and Domain 3 unfamiliar. Someone from an AI or adoption background will find the reverse. Very few candidates arrive strong in both halves.
How many questions does AB-650 have, and how long is it?
Microsoft has not published either figure. Any specific number you see is a third-party estimate. Microsoft does confirm that you can request an additional 30 minutes if the exam is unavailable in your preferred language.
How much does the AB-650 exam cost?
Microsoft lists the price as based on the country or region where the exam is proctored and does not publish a single global figure. Confirm the exact price during registration with Pearson VUE. Microsoft Certified Trainers and Microsoft Partner Network members may qualify for reduced pricing.
What is the AB-650 passing score?
700 out of 1000. This is scaled, not a raw percentage, so 700 does not mean 70% of questions answered correctly.
Are there prerequisites for AB-650?
No formal prerequisites and no required prior certification. Microsoft recommends experience with Microsoft 365 workloads and Microsoft Entra ID, an understanding of Defender XDR capabilities, and familiarity with Microsoft Graph PowerShell.
Is there an official AB-650 practice test?
Not currently. Microsoft’s free practice assessments generally appear within eight weeks of an exam leaving beta and reaching general availability. Until then, the exam sandbox and hands-on labs are your best substitutes. Third-party practice tests exist but predate any published question data, so treat their difficulty calibration with skepticism.
Should I take MS-102 or AB-650?
If you can pass MS-102 before it retires on 30 November 2026 and you also hold or can earn one of the qualifying Associate certifications, the Expert credential is still achievable. If either condition is shaky, go straight to AB-650. Do not start MS-102 from scratch at this point.
Does passing the beta count the same as passing after general availability?
Yes. Once Microsoft finalizes beta scoring, a beta pass earns the identical credential. The only differences are the delay before you receive your result and the fact that beta sittings have historically been discounted.
Is AB-650 available in languages other than English?
English only at present. Additional languages typically follow general availability within a few months. If your preferred language is unavailable, you can request an extra 30 minutes.
Do I need Copilot or Agent 365 licenses to pass?
No, but you will be at a disadvantage without access. Roughly half the blueprint touches AI services, and reading about the agent registry is a poor substitute for navigating it. If you cannot get a licensed tenant, prioritize read-only access somewhere you can at least see the interfaces.
Is AB-650 worth it if my organization has not deployed Copilot?
Arguably more worth it, not less. The certification maps to where Microsoft 365 administration is heading, and the governance content- agent identity, DLP for AI, DSPM, oversharing remediation- is exactly what an organization needs before it deploys. Preparing for this exam is reasonable preparation for leading that rollout.
