AI-102 Implement an agentic solution Practice Test 2 — 15 Questions

Question 1

You are building an agentic solution using Microsoft Semantic Kernel. The agent uses a planner to orchestrate multiple functions. You want to improve the planner's ability to handle complex user requests that involve multiple steps. Which THREE strategies should you implement?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Enable the planner to ask the user for clarification when the request is ambiguous. Enabling the planner to ask for clarification when a request is ambiguous allows the agent to resolve underspecified intents or missing parameters, which is critical for complex multi-step workflows. In Semantic Kernel, the planner can be configured with a 'user interaction' step that prompts for additional context, improving plan accuracy and reducing the risk of incorrect function chaining.

Answer

Limit the number of available functions to reduce planning overhead

Answer

Use a simple, generic prompt to avoid overfitting

Question 2

You deploy an agent using the ARM template shown. Users report that the agent cannot answer questions about uploaded documents. What is the most likely cause?

Accepted Answer

The file_search tool is disabled in the agent configuration. The ARM template shown in the question likely configures the agent with the `file_search` tool set to `disabled` or omitted, which prevents the agent from indexing and querying uploaded documents. Without this tool enabled, the agent cannot perform retrieval-augmented generation (RAG) on file content, even if files are uploaded. Option C directly identifies this missing capability as the root cause.

Answer

The function tool is missing required parameters

Answer

The model specified is not supported for file operations

Answer

The code_interpreter tool is enabled, which conflicts with file_search

Question 3

You are reviewing the configuration of an agent deployed via Azure AI Agent Service, as shown. The agent fails to authenticate when calling the reset_password function, which requires a token from Microsoft Entra ID. What is the most likely issue?

Accepted Answer

The agent's authentication is set to api_key instead of managed identity or OAuth. The agent's authentication is set to api_key instead of managed identity or OAuth. Azure AI Agent Service supports multiple authentication methods, but when calling a function that requires a token from Microsoft Entra ID (e.g., reset_password), the agent must use either a managed identity (for Azure resources) or OAuth 2.0 client credentials flow to obtain a valid token. Using an api_key does not provide the necessary Entra ID token, causing authentication failures for the function call.

Answer

The conversation_starters are preventing the agent from calling functions

Answer

The reset_password function is missing required parameters

Answer

The model version is outdated and does not support function calling

Question 4

You run the PowerShell script shown to audit your Azure AI Agent Service agents. The script outputs that several agents have no tools configured. What is the impact on those agents?

Accepted Answer

The agents can only respond to queries using the model's built-in knowledge, without ability to perform actions. Azure AI Agent Service agents without tools configured rely solely on the model's built-in knowledge (e.g., GPT-4o's training data) to generate responses. They cannot execute external actions like calling APIs, querying databases, or running code, which are enabled only when tools (e.g., code interpreter, function calling, or Azure Functions) are explicitly attached. This is by design: tools extend the agent's capabilities beyond the model's static knowledge.

Answer

The agents cannot be deployed until tools are added

Answer

The agents cannot start conversations with users

Answer

The agents will use default tools provided by Azure

Question 5

A company is building an agentic solution using Microsoft Copilot Studio. The agent needs to retrieve customer order status from an external CRM API. The API requires OAuth 2.0 authentication with client credentials. Which connector configuration should the developer use?

Accepted Answer

Use the HTTP connector with OAuth2 client credentials grant type.. The HTTP connector in Microsoft Copilot Studio supports the OAuth 2.0 client credentials grant type, which is exactly what the external CRM API requires. This grant type allows the agent to authenticate as an application (not a user) by sending a client ID and client secret to obtain an access token, making it ideal for server-to-server API calls where no user interaction is needed.

Answer

Use a custom connector with API Key authentication.

Answer

Use a Power Automate flow with a CRM connector that uses service principal.

Answer

Use an AI Builder model to call the API.

Question 6

You are designing an agentic solution in Microsoft Foundry that uses a custom agent to answer questions about internal policies. The agent uses GPT-4o with retrieval augmented generation (RAG) on documents stored in Azure AI Search. Users report that the agent sometimes provides answers that contradict the retrieved documents. Which two actions should you take to improve response fidelity?

Accepted Answer

Set the 'strict grounding' parameter to true and limit the number of source documents to 3.. Setting 'strict grounding' to true forces the model to rely exclusively on the provided source documents, and limiting the number of source documents to 3 reduces the chance of conflicting or irrelevant information being included. Option D is also correct because including the retrieved text directly in the prompt ensures the model has the exact context, and setting temperature to 0 makes the output deterministic, reducing hallucinations. Together, these actions improve response fidelity by enforcing strict grounding and reducing randomness.

Answer

Increase the temperature parameter to 0.9.

Answer

Increase the chunk size in Azure AI Search to 2000 tokens.

Answer

Add a system message instructing the model to only use provided context.

Question 7

Refer to the exhibit. You are deploying an agent in Microsoft Foundry using the ARM template snippet above. The agent needs to call Microsoft Graph API to reset a user's password. However, the deployment fails with an authorization error. What is the most likely cause?

Accepted Answer

The managed identity does not have the 'User.ReadWrite.All' delegated permission for Microsoft Graph.. The agent uses a managed identity to authenticate to Microsoft Graph, and the error indicates an authorization failure. For the agent to call Graph API to reset a user's password, the managed identity must be granted the 'User.ReadWrite.All' application permission (not delegated) via an API permission assignment in Azure AD. Without this permission, the Graph API returns a 403 Forbidden error, even if the endpoint and ARM template syntax are correct.

Answer

The Graph API endpoint URL is incorrect.

Answer

The apiVersion '2025-01-01-preview' is not supported for agent deployments.

Answer

The resourceId for managed identity is missing the 'Microsoft.ManagedIdentity/userAssignedIdentities' resource type.

Question 8

A company is building an agentic solution using Azure AI Agent Service. The agent needs to execute a Power Automate flow when a user requests a vacation approval. Which action type should the developer add to the agent's action definition?

Accepted Answer

powerAutomateFlow. The Azure AI Agent Service supports a dedicated 'powerAutomateFlow' action type that directly triggers a Power Automate flow when invoked by the agent. This is the correct choice because the requirement explicitly states the agent must execute a Power Automate flow for vacation approval, and this action type is purpose-built for that integration without needing custom HTTP or API definitions.

Answer

httpRequest

Answer

openApi

Answer

function

Question 9

You are troubleshooting an agent built with Microsoft Copilot Studio. The agent uses a custom topic to check inventory levels. The topic calls a Power Automate flow that returns JSON with 'inStock' boolean. The agent sometimes says 'Item is in stock' even when the flow returns false. What is the most likely cause?

Accepted Answer

The topic's condition is using a variable that is not being updated with the flow output.. The most likely cause is that the topic's condition is referencing a variable that does not get updated with the flow's output. In Microsoft Copilot Studio, when a Power Automate flow returns data, the output must be explicitly assigned to a topic variable. If the condition checks a different variable (e.g., a default or uninitialized one), it will not reflect the actual 'inStock' value from the flow, leading to incorrect responses like 'Item is in stock' even when the flow returns false.

Answer

The Power Automate flow has a timeout and returns default true.

Answer

The agent's response is based on a different variable that defaults to true.

Answer

The agent's topic is not parsing the JSON output correctly.

Question 10

You are designing an agentic solution that uses Microsoft Copilot Studio and Azure AI Search. The agent needs to answer questions based on confidential documents. Which security measure should you implement to ensure the agent only accesses documents the user has permission to read?

Accepted Answer

Implement document-level security using security filters in the search index.. Azure AI Search supports document-level security through security filters, which allow you to restrict search results based on the user's identity. By storing security identifiers (e.g., group memberships or user IDs) as a field in the index and applying an OData filter at query time, the agent can ensure users only see documents they are permitted to read. This is the standard approach for implementing row-level security in Azure AI Search.

Answer

Disable public network access on the Azure AI Search service.

Answer

Use a managed identity for the agent to access the search index.

Answer

Require multi-factor authentication for all users.

Question 11

A company uses Microsoft Copilot Studio to create an agent that books meetings. The agent calls an external API to check room availability. The API requires a client certificate for authentication. Which authentication method should the developer configure in the custom connector?

Accepted Answer

Client Certificate. The custom connector in Microsoft Copilot Studio must authenticate with an external API that requires a client certificate. The 'Client Certificate' authentication method is specifically designed for this scenario, where the connector presents an X.509 certificate to the API during the TLS handshake to prove its identity. This is the only option that directly supports certificate-based mutual TLS (mTLS) authentication.

Answer

OAuth 2.0

Answer

Windows Authentication

Answer

API Key

Question 12

You need to monitor an agent deployed in Microsoft Foundry. Which Azure service should you use to collect and analyze logs and metrics from the agent?

Accepted Answer

Azure Monitor. Azure Monitor is the correct choice because it is the comprehensive monitoring service for Azure resources, including agents deployed in Microsoft Foundry. It collects and analyzes logs and metrics from the agent, providing a unified view of performance and health. Application Insights is a subset of Azure Monitor focused on application performance monitoring (APM), but for general agent monitoring, Azure Monitor is the primary service.

Answer

Application Insights

Answer

Azure Log Analytics

Answer

Microsoft Sentinel

Question 13

You are designing an agent that uses Azure AI Search as a knowledge store. The agent must handle multiple languages. Which feature should you configure in Azure AI Search to ensure the agent retrieves relevant results for queries in different languages?

Accepted Answer

Language analyzers. Language analyzers in Azure AI Search are specifically designed to handle linguistic variations across different languages, such as stemming, stop word removal, and tokenization rules. By configuring the appropriate language analyzer (e.g., 'en.microsoft' for English or 'fr.microsoft' for French) on a searchable field, the agent can retrieve relevant results for queries in multiple languages because the analyzer processes both the indexed content and the query string using the same language-specific rules.

Answer

Scoring profiles

Answer

Semantic search

Answer

Synonym maps

Question 14

Refer to the exhibit. You deploy this ARM template to create an agent. The agent uses a user-assigned managed identity to call an external weather API. The deployment succeeds but the agent fails to authenticate to the weather API. What is the most likely reason?

Accepted Answer

The external weather API is not configured to accept tokens from the managed identity's tenant.. The agent uses a user-assigned managed identity to authenticate to an external weather API. Managed identities provide tokens that are valid only within the Microsoft Entra ID (formerly Azure AD) tenant where the identity is registered. For the agent to successfully authenticate, the external weather API must be configured as an application in that same tenant and trust tokens issued by that tenant. Option D correctly identifies that the most likely reason for authentication failure is that the external weather API is not configured to accept tokens from the managed identity's tenant, meaning the API does not trust the token issuer.

Answer

The resourceId for the managed identity is incorrect.

Answer

The model provider 'AzureAI' should be 'AzureOpenAI'.

Answer

The URL parameter is missing the API version.

Question 15

You are creating an agent in Microsoft Copilot Studio that needs to escalate to a human agent when it cannot resolve a query. Which feature should you use?

Accepted Answer

Add a 'Transfer to agent' topic.. In Microsoft Copilot Studio, the 'Transfer to agent' topic is the correct feature to escalate unresolved queries to a human agent. This topic is specifically designed to hand off the conversation to a live agent, often by triggering a handoff mechanism such as a Dynamics 365 Customer Service queue or a custom integration. It ensures that the bot gracefully transfers context and conversation history, maintaining a seamless user experience.

Answer

Add an 'Escalate' system topic.

Answer

Configure the 'Fallback' topic to call a Power Automate flow.

Answer

Use the 'End conversation' node.