AI-102 Practice Test 24 — 15 Questions

Question 1

You are designing an agent using Microsoft Copilot Studio that must handle sensitive employee data such as salaries and performance reviews. The agent should only allow HR managers to access these topics. The solution must comply with data privacy regulations. Which two actions should you take? (Select two.)

Accepted Answer

Configure authentication in Copilot Studio to require Microsoft Entra ID sign-in.. Options A and D are correct. Authentication ensures the user's identity is verified. Topic-level security restricts access to specific topics based on user roles. Option B is wrong because audit logs are for monitoring, not access control. Option C is wrong because bot-level authentication does not restrict topics. Option E is wrong because data loss prevention does not control access within the agent.

Answer

Set bot-level authentication to require a specific role.

Answer

Enable detailed audit logging in Microsoft Purview.

Answer

Apply data loss prevention policies in Microsoft Purview.

Question 2

A company wants to integrate their Copilot Studio agent with an on-premises ERP system using an API. The on-premises API requires Windows Authentication. The agent must call the API securely without exposing credentials. Which Azure service should be used to enable this integration?

Accepted Answer

Azure API Management with on-premises data gateway.. Option C is correct because Azure API Management with on-premises data gateway can securely expose on-premises APIs to the cloud and handle Windows Authentication. Option A is wrong because Azure Functions would need a gateway to connect to on-premises. Option B is wrong because Logic Apps also need a gateway. Option D is wrong because VPN is not a service for API management.

Answer

Azure Functions with HTTP trigger.

Answer

Azure VPN Gateway to connect to the on-premises network.

Answer

Azure Logic Apps with a connector.

Question 3

You are developing an agentic solution that uses Azure AI Agent Service with a custom function calling tool. The agent needs to call a function that requires authentication to an external API. How should you securely pass the API key to the function?

Accepted Answer

Use Azure Key Vault to store the API key and reference it in the function. Using Azure Key Vault references in the function code is the secure way to retrieve secrets at runtime without exposing them. Hardcoding is insecure. Environment variables may be exposed. Passing in the prompt leaks credentials.

Answer

Hardcode the API key in the function code

Answer

Store the API key in an environment variable

Answer

Pass the API key as part of the agent's system prompt

Question 4

A developer is building an agent using the Microsoft Bot Framework SDK in C#. The agent must authenticate users via Microsoft Entra ID and maintain state across conversations. The solution must store user preferences (e.g., language, timezone) in Azure Cosmos DB. Which state management approach should the developer use?

Accepted Answer

Use UserState with Cosmos DB Storage.. Option D is correct because UserState with Cosmos DB storage provides a scalable solution for storing user preferences across conversations. Option A is wrong because ConversationState is scoped to a single conversation. Option B is wrong because Blob Storage is for large objects, not key-value state. Option C is wrong because Bot State Service is deprecated.

Answer

Use the Bot State Service (deprecated).

Answer

Use UserState with Blob Storage.

Answer

Use ConversationState with Memory Storage.

Question 5

A developer is building a custom agent using the Microsoft Bot Framework SDK. The agent must be able to handle multiple turns and maintain context across the conversation. The agent uses dialogs to guide the user through a multi-step process. Which component is responsible for managing the dialog stack and persisting state between turns?

Accepted Answer

The DialogSet object that contains dialogs and manages the stack.. Option C is correct because the DialogSet manages the dialog stack and uses state to persist between turns. Option A is wrong because IBot is the main interface but does not manage dialogs directly. Option B is wrong because StateMiddleware is part of the Bot Framework but not dialog-specific. Option D is wrong because ActivityHandler handles activities but not dialog management.

Answer

The ActivityHandler class that processes incoming activities.

Answer

The IBot interface implementation.

Answer

The StateMiddleware component.

Question 6

An organization uses Microsoft Copilot Studio to create an agent for IT support. The agent should be able to reset passwords, unlock accounts, and look up user information by connecting to on-premises Active Directory via Microsoft Entra ID. Which type of authentication should be used for the agent to access these actions?

Accepted Answer

OAuth 2.0 authentication with Microsoft Entra ID using on-behalf-of flow.. Option A is correct because OAuth 2.0 with on-behalf-of flow allows the agent to authenticate to Microsoft Entra ID and then access on-premises resources via an API. Option B is wrong because API key is not suitable for user-specific actions. Option C is wrong because certificate-based authentication is not typical for this scenario. Option D is wrong because basic authentication is insecure and deprecated.

Answer

Basic authentication with username and password.

Answer

API key authentication to the on-premises API.

Answer

Certificate-based authentication for the agent's identity.

Question 7

You are building an agent in Microsoft Copilot Studio that needs to send a confirmation email after a user completes a survey. The email should be sent using the user's email address collected during the conversation. Which feature should you use to send the email?

Accepted Answer

Create a Power Automate flow that sends an email and call it from the topic.. Option A is correct because a Power Automate flow can be triggered from a topic and send an email using the user's email address. Option B is wrong because the email channel is for receiving emails. Option C is wrong because Copilot Studio does not have a native email action. Option D is wrong because adaptive cards are for in-chat interactions, not sending emails.

Answer

Use the Send an email action directly in Copilot Studio.

Answer

Use an adaptive card with an email button.

Answer

Use the email channel to send a response.

Question 8

Which THREE are valid uses of Azure AI Vision Image Analysis 4.0? (Select three.)

Accepted Answer

Extract printed text from an image using OCR. Options A, B, and D are correct. Image Analysis 4.0 can generate captions, detect objects, and read text. Option C is wrong because translating text is done by Azure AI Translator. Option E is wrong because transcribing audio is done by Azure AI Speech.

Answer

Transcribe spoken audio from a video file

Answer

Translate text found in an image to another language

Question 9

Your retail company uses Azure AI Face API to identify VIP customers when they enter a store. Due to privacy regulations, you must obtain explicit consent and store minimal biometric data. Which approach meets these requirements?

Accepted Answer

Create a PersonGroup with each VIP customer, and use the Identify operation.. Option C is correct because Face API's PersonGroup stores only a numeric ID per face, not the actual image, which minimizes biometric data. Storing images (A) or using Face ID (B) retains more data. Custom Vision (D) is not designed for face identification.

Answer

Train a Custom Vision model with images of VIP customers.

Answer

Use the Face API's Face ID returned upon detection and store it in a database.

Answer

Store the customer's face image in Azure Blob Storage and compare using the Face API.

Question 10

You are building an application that processes scanned invoices to extract key fields such as total amount, invoice date, and vendor name. The application uses Azure AI Document Intelligence. You need to ensure high accuracy for field extraction without manual labeling. Which feature should you use?

Accepted Answer

Use a custom neural model. Option C is correct because Custom Neural Models are designed to extract fields from structured or semi-structured documents with high accuracy and do not require manual labeling if you use prebuilt models or start with a sample set. Option A is wrong because the Read API only extracts text, not key-value pairs. Option B is wrong because the Layout API extracts text and structure but not custom fields. Option D is wrong because the General Document model extracts key-value pairs but may not be optimized for invoices without customization.

Answer

Use the General Document model

Answer

Use the Read API

Answer

Use the Layout API

Question 11

A retail company uses Azure AI Vision to analyze store shelf images for product availability. The solution uses an object detection model trained on custom products. Recently, the model's performance dropped significantly due to new packaging designs. You need to improve the model's accuracy with minimal manual effort. What should you do?

Accepted Answer

Use Azure AI Vision model customization with active learning. Option D is correct because using Azure AI Vision's model customization with active learning allows the model to improve by automatically selecting the most informative images for labeling. Option A is wrong because retraining from scratch requires full labeling effort. Option B is wrong because adjusting confidence thresholds does not improve the model's recognition of new packaging. Option C is wrong because Image Analysis 4.0 with dense captioning provides descriptions but does not improve object detection for custom products.

Answer

Adjust the confidence score threshold to reduce false negatives

Answer

Use the Image Analysis 4.0 dense captioning feature

Answer

Collect a new set of images and retrain the model from scratch

Question 12

A healthcare organization uses Azure AI Health Insights to extract medical insights from unstructured clinical notes. The solution must comply with HIPAA. Which configuration is required?

Accepted Answer

Configure the Azure AI services resource to use a private endpoint and disable public network access. Option A is correct because cognitive services must be configured with a private endpoint and disable public network access to ensure data stays within a virtual network, meeting HIPAA requirements. Option B is wrong because enabling public network access is not compliant. Option C is wrong because storing data in Azure Storage with only Azure AD authentication does not ensure network isolation. Option D is wrong because using a managed identity alone does not restrict network access.

Answer

Store the clinical notes in Azure Storage with Azure AD authentication only

Answer

Enable public network access but use a firewall rule to restrict IP addresses

Answer

Use a system-assigned managed identity for authentication

Question 13

You deploy a custom vision model for defect detection on a manufacturing line. The model runs on an Azure IoT Edge device. You notice that inference latency is too high for real-time detection. Which action should you take to reduce latency?

Accepted Answer

Convert the model to TensorFlow and use the Azure IoT Edge Deep Learning module with hardware acceleration. Option C is correct because converting the model to TensorFlow and using the Deep Learning module on IoT Edge with hardware acceleration (e.g., Intel OpenVINO) can significantly reduce latency. Option A is wrong because moving to the cloud increases network latency. Option B is wrong because increasing image resolution increases processing time. Option D is wrong because retraining with more images does not reduce inference latency.

Answer

Move inference to Azure Functions in the cloud

Answer

Retrain the model with more defect images

Answer

Increase the resolution of input images

Question 14

Which TWO Azure AI services can be used to extract text from images and PDFs? (Select two.)

Accepted Answer

Azure AI Vision OCR. Options A and D are correct. Azure AI Vision OCR (Read API) extracts printed and handwritten text from images and PDFs. Azure AI Document Intelligence (formerly Form Recognizer) extracts text from documents and also performs layout analysis. Option B is wrong because Azure AI Language focuses on text analysis, not image processing. Option C is wrong because Azure AI Search is for indexing and search, not text extraction from images. Option E is wrong because Azure AI Translator is for translation, not text extraction from images.

Answer

Azure AI Translator

Answer

Azure AI Search

Answer

Azure AI Language

Question 15

You are designing a computer vision solution that must detect and redact personally identifiable information (PII) from images of ID cards. The solution must comply with GDPR. Which THREE components should you include? (Select three.)

Accepted Answer

Azure AI Document Intelligence redaction. Options B, D, and E are correct. Azure AI Vision OCR extracts text from ID cards. Azure AI Language's PII detection identifies PII entities in the extracted text. Azure AI Document Intelligence's redaction feature (or a custom redaction step) removes the PII. Option A is wrong because Azure AI Video Indexer is for video analysis. Option C is wrong because Azure AI Custom Vision is for image classification/object detection, not text-based PII detection.

Answer

Azure AI Custom Vision

Answer

Azure AI Video Indexer