AI-102 Practice Test 22 — 15 Questions

Question 1

You are designing an agentic solution that uses Microsoft Copilot Studio and Azure AI Search. The agent needs to answer questions based on confidential documents. Which security measure should you implement to ensure the agent only accesses documents the user has permission to read?

Accepted Answer

Implement document-level security using security filters in the search index.. Option D is correct because document-level security filters in Azure AI Search enforce permissions. Option A is wrong because disabling public access is not granular. Option B is wrong because managed identity alone doesn't filter documents. Option C is wrong because MFA is authentication, not authorization.

Answer

Disable public network access on the Azure AI Search service.

Answer

Use a managed identity for the agent to access the search index.

Answer

Require multi-factor authentication for all users.

Question 2

You are developing an agentic solution that uses multiple AI agents to collaborate on a complex task. To ensure the agents work together effectively, you need to define a clear handoff protocol. Which approach should you use in Microsoft Foundry to enable agent-to-agent communication?

Accepted Answer

Use Agent Handoff feature. Agent Handoff is a built-in feature in Microsoft Foundry that allows one agent to pass control to another agent along with context. Custom API integration is possible but not the designed approach. Shared memory is for state management, not handoff. Sequential orchestration is manual.

Answer

Configure a shared memory store

Answer

Implement a custom API for agent communication

Answer

Orchestrate agents sequentially using a script

Question 3

You are developing an agentic solution that uses multiple agents to handle customer inquiries. You need to ensure that agents can hand off to each other with full context. Which THREE features should you use?

Accepted Answer

Shared Memory. Agent Handoff, Threads, and Shared Memory are key features for context preservation and handoff. Function calling is for tool integration, not handoff. KQL is for queries.

Answer

KQL

Answer

Function calling

Question 4

You are troubleshooting a Copilot Studio agent that uses a Power Automate flow to look up customer information from a CRM system. The flow runs successfully when tested manually, but when the agent triggers it, the flow fails with an authentication error. What is the most likely cause?

Accepted Answer

The flow uses the agent's identity instead of the user's identity, and the agent lacks CRM access.. Option B is correct because when the agent triggers the flow, it uses the agent's identity, which may not have permissions to the CRM. Option A is wrong because connector permissions are typically configured once. Option C is wrong because the flow runs at runtime, not after sign-in. Option D is wrong because the flow works manually, so the connection is valid.

Answer

The flow connection was deleted after the manual test.

Answer

The user must sign in again before triggering the flow.

Answer

The CRM connector requires additional permissions that were not granted.

Question 5

You deploy an agent using the ARM template shown. Users report that the agent cannot answer questions about uploaded documents. What is the most likely cause?

Accepted Answer

The file_search tool is disabled in the agent configuration. Option B is correct because 'file_search' is disabled in the template, so the agent cannot search uploaded documents. Option A is incorrect because code_interpreter is enabled. Option C is incorrect because the function is correctly defined. Option D is incorrect because the model is valid.

Answer

The function tool is missing required parameters

Answer

The model specified is not supported for file operations

Answer

The code_interpreter tool is enabled, which conflicts with file_search

Question 6

A company uses Microsoft Copilot Studio to create an agent that books meetings. The agent calls an external API to check room availability. The API requires a client certificate for authentication. Which authentication method should the developer configure in the custom connector?

Accepted Answer

Client Certificate. Option C is correct because client certificate authentication is used for certificate-based auth. Option A is wrong because OAuth 2.0 is token-based. Option B is wrong because API Key is key-based. Option D is wrong because Windows Authentication is for on-premises.

Answer

OAuth 2.0

Answer

Windows Authentication

Answer

API Key

Question 7

You are deploying an agentic solution using Azure AI Agent Service. The agent needs to be invoked from a custom application using REST API calls. Which endpoint should you use to send a message to the agent?

Accepted Answer

POST /threads/{thread_id}/messages. The correct endpoint is /threads/{thread_id}/messages to send a message. /threads creates a thread, /runs executes the agent, and /agents is for management.

Answer

POST /threads/{thread_id}/runs

Answer

POST /threads

Answer

GET /agents

Question 8

Refer to the exhibit. You are configuring an agent in Azure AI Agent Service. You want the agent to be able to execute Python code and call a custom function to get weather data. What is the issue with the JSON configuration?

Accepted Answer

The function definition is missing the 'strict' parameter. The function definition is missing the 'strict' parameter, which is required for function calling in the current API. The other parameters are correct. The model name is valid, and the code_interpreter tool is correctly enabled.

Answer

The 'code_interpreter' tool type should be 'code_interpreter' not 'code_interpreter'

Answer

The model 'gpt-4o' is not supported

Answer

The 'assistant_id' should be a thread ID

Question 9

A company uses Microsoft Copilot Studio to create an agent that helps employees schedule meetings. The agent must access the user's calendar to find free time slots and book meetings. The agent should only work for users who have granted consent. Which authentication and authorization approach should be used?

Accepted Answer

Configure OAuth 2.0 authentication with Microsoft Entra ID and request delegated permissions for Microsoft Graph.. Option A is correct because OAuth 2.0 with delegated permissions allows the agent to act on behalf of the user after consent. Option B is wrong because application permissions are for app-only access, not user delegation. Option C is wrong because API key does not support user context. Option D is wrong because certificate-based auth is also app-only.

Answer

Use certificate-based authentication for the agent.

Answer

Use API key authentication to call Microsoft Graph.

Answer

Use OAuth 2.0 client credentials flow with application permissions.

Question 10

You are reviewing the configuration of an agent deployed via Azure AI Agent Service, as shown. The agent fails to authenticate when calling the reset_password function, which requires a token from Microsoft Entra ID. What is the most likely issue?

Accepted Answer

The agent's authentication is set to api_key instead of managed identity or OAuth. Option C is correct because the security section uses api_key authentication, which is not suitable for calling Microsoft Entra ID-protected functions. Option A is incorrect because the model is supported. Option B is incorrect because the functions are properly defined. Option D is incorrect because conversation_starters do not affect authentication.

Answer

The conversation_starters are preventing the agent from calling functions

Answer

The reset_password function is missing required parameters

Answer

The model version is outdated and does not support function calling

Question 11

You are building an agent using Azure AI Agent Service that must execute code in a sandbox environment. The code should be able to install Python packages. Which action type should you use?

Accepted Answer

code_interpreter. Option D is correct because 'code_interpreter' action type allows executing Python code in a sandbox with package installation. Option A is wrong because 'function' is for calling Azure Functions. Option B is wrong because 'httpRequest' is for HTTP calls. Option C is wrong because 'openApi' is for REST APIs.

Answer

function

Answer

openApi

Answer

httpRequest

Question 12

You are developing an agentic solution that requires the agent to maintain context across multiple turns in a conversation. Which feature should you use to store and retrieve conversation history?

Accepted Answer

Threads. Threads in Azure AI Agent Service are designed to store conversation history and maintain context. Memory is a generic term, not specific to the service. Vector stores are for embeddings. Sessions are for containerized apps.

Answer

Sessions

Answer

Vector store

Answer

Memory

Question 13

Refer to the exhibit. You are sending a request to an agent using the Chat Completions API. The agent should decide whether to call the 'get_weather' function or not. What is missing from the request to enable the agent to properly use the function?

Accepted Answer

The 'strict' parameter in the function definition. The function definition is missing the 'strict' parameter, which is required for the model to understand the function schema correctly. The other fields are present. The tool_choice is set to auto, which is correct.

Answer

The 'messages' array should include a system prompt

Answer

The 'tool_choice' should be 'required'

Answer

The 'model' should be 'gpt-4o-mini'

Question 14

You are developing a custom agent using the Microsoft Bot Framework SDK. The agent must handle multiple languages and use the Azure AI Translator service to translate user messages to English before processing. The solution should minimize latency. Where should the translation logic be implemented?

Accepted Answer

As a custom middleware component that intercepts incoming activities and translates them.. Option C is correct because middleware runs on every incoming message and can translate before the bot logic runs, minimizing latency by avoiding multiple round trips. Option A is wrong because translating in the activity handler would still be in the pipeline but more coupled. Option B is wrong because the language detection API is separate. Option D is wrong because client-side translation is not possible in this scenario.

Answer

In the OnMessageActivityAsync method after receiving the user's message.

Answer

By using the Bot Framework's built-in language detection feature.

Answer

By sending the user's message to a separate translation endpoint from the client application.

Question 15

You run the PowerShell script shown to audit your Azure AI Agent Service agents. The script outputs that several agents have no tools configured. What is the impact on those agents?

Accepted Answer

The agents can only respond to queries using the model's built-in knowledge, without ability to perform actions. Option A is correct because without tools, the agent can only respond based on its instructions and model, limiting its capabilities. Option B is incorrect because the agent can still start conversations. Option C is incorrect because the agent can still be deployed. Option D is incorrect because the agent can still be invoked.

Answer

The agents cannot be deployed until tools are added

Answer

The agents cannot start conversations with users

Answer

The agents will use default tools provided by Azure