AI-102 Implement an agentic solution Practice Test 2 — 15 Questions

Question 1

A company is building an agentic solution using Microsoft Copilot Studio. The agent needs to retrieve customer order status from an external CRM API. The API requires OAuth 2.0 authentication with client credentials. Which connector configuration should the developer use?

Accepted Answer

Use the HTTP connector with OAuth2 client credentials grant type.. Option A is correct because HTTP with OAuth2 client credentials is the appropriate way to authenticate with an external API that uses OAuth 2.0. Option B is wrong because API Key is not OAuth. Option C is wrong because Power Automate with native CRM connector might not support OAuth client credentials. Option D is wrong because AI Builder is not for API authentication.

Answer

Use a custom connector with API Key authentication.

Answer

Use a Power Automate flow with a CRM connector that uses service principal.

Answer

Use an AI Builder model to call the API.

Question 2

You are designing an agentic solution in Microsoft Foundry that uses a custom agent to answer questions about internal policies. The agent uses GPT-4o with retrieval augmented generation (RAG) on documents stored in Azure AI Search. Users report that the agent sometimes provides answers that contradict the retrieved documents. Which two actions should you take to improve response fidelity?

Accepted Answer

Set the 'strict grounding' parameter to true and limit the number of source documents to 3.. Option D is correct because grounding with retrieved documents reduces hallucination. Option B is correct because limiting source documents reduces noise. Option A is wrong because increasing temperature increases randomness. Option C is wrong because system message alone doesn't guarantee fidelity. Option E is wrong because chunk size optimization is about performance, not contradiction.

Answer

Increase the temperature parameter to 0.9.

Answer

Increase the chunk size in Azure AI Search to 2000 tokens.

Answer

Add a system message instructing the model to only use provided context.

Question 3

Refer to the exhibit. You are deploying an agent in Microsoft Foundry using the ARM template snippet above. The agent needs to call Microsoft Graph API to reset a user's password. However, the deployment fails with an authorization error. What is the most likely cause?

Accepted Answer

The managed identity does not have the 'User.ReadWrite.All' delegated permission for Microsoft Graph.. Option B is correct because the managed identity needs Graph API permissions assigned. Option A is wrong because the endpoint is valid. Option C is wrong because the resourceId is correctly specified. Option D is wrong because the apiVersion is a preview version but that doesn't cause authorization errors.

Answer

The Graph API endpoint URL is incorrect.

Answer

The apiVersion '2025-01-01-preview' is not supported for agent deployments.

Answer

The resourceId for managed identity is missing the 'Microsoft.ManagedIdentity/userAssignedIdentities' resource type.

Question 4

A company is building an agentic solution using Azure AI Agent Service. The agent needs to execute a Power Automate flow when a user requests a vacation approval. Which action type should the developer add to the agent's action definition?

Accepted Answer

powerAutomateFlow. Option D is correct because 'powerAutomateFlow' is the action type for executing Power Automate flows. Option A is wrong because 'openApi' is for REST APIs. Option B is wrong because 'httpRequest' is for direct HTTP calls. Option C is wrong because 'function' is for custom code functions.

Answer

httpRequest

Answer

openApi

Answer

function

Question 5

You are troubleshooting an agent built with Microsoft Copilot Studio. The agent uses a custom topic to check inventory levels. The topic calls a Power Automate flow that returns JSON with 'inStock' boolean. The agent sometimes says 'Item is in stock' even when the flow returns false. What is the most likely cause?

Accepted Answer

The topic's condition is using a variable that is not being updated with the flow output.. Option C is correct because the agent's response might be based on the topic's condition, not the flow output. Option A is wrong because if the flow fails, the agent wouldn't get a response. Option B is wrong because parsing JSON is standard. Option D is wrong because the agent doesn't require a specific variable type.

Answer

The Power Automate flow has a timeout and returns default true.

Answer

The agent's response is based on a different variable that defaults to true.

Answer

The agent's topic is not parsing the JSON output correctly.

Question 6

Refer to the exhibit. You deploy this ARM template to create an agent in Microsoft Foundry. The agent uses an Azure Function as an action. The deployment succeeds but when the agent calls the function, it gets a 401 Unauthorized error. What is the most likely cause?

Accepted Answer

The listKeys function returns the host key, but the function requires a function-level key.. Option A is correct because the function key is retrieved from the default key, but the function might require a specific key. Option B is wrong because the function key is correctly passed as a header. Option C is wrong because the endpoint is valid. Option D is wrong because the model name is valid.

Answer

The authentication type should be ManagedIdentity instead of ApiKey.

Answer

The model provider is AzureOpenAI but should be AzureAI.

Answer

The URL parameter is missing the function name in the path.

Question 7

You are designing an agentic solution that uses Microsoft Copilot Studio and Azure AI Search. The agent needs to answer questions based on confidential documents. Which security measure should you implement to ensure the agent only accesses documents the user has permission to read?

Accepted Answer

Implement document-level security using security filters in the search index.. Option D is correct because document-level security filters in Azure AI Search enforce permissions. Option A is wrong because disabling public access is not granular. Option B is wrong because managed identity alone doesn't filter documents. Option C is wrong because MFA is authentication, not authorization.

Answer

Disable public network access on the Azure AI Search service.

Answer

Use a managed identity for the agent to access the search index.

Answer

Require multi-factor authentication for all users.

Question 8

A company uses Microsoft Copilot Studio to create an agent that books meetings. The agent calls an external API to check room availability. The API requires a client certificate for authentication. Which authentication method should the developer configure in the custom connector?

Accepted Answer

Client Certificate. Option C is correct because client certificate authentication is used for certificate-based auth. Option A is wrong because OAuth 2.0 is token-based. Option B is wrong because API Key is key-based. Option D is wrong because Windows Authentication is for on-premises.

Answer

OAuth 2.0

Answer

Windows Authentication

Answer

API Key

Question 9

You are building an agent using Azure AI Agent Service that must execute code in a sandbox environment. The code should be able to install Python packages. Which action type should you use?

Accepted Answer

code_interpreter. Option D is correct because 'code_interpreter' action type allows executing Python code in a sandbox with package installation. Option A is wrong because 'function' is for calling Azure Functions. Option B is wrong because 'httpRequest' is for HTTP calls. Option C is wrong because 'openApi' is for REST APIs.

Answer

function

Answer

openApi

Answer

httpRequest

Question 10

You need to monitor an agent deployed in Microsoft Foundry. Which Azure service should you use to collect and analyze logs and metrics from the agent?

Accepted Answer

Azure Monitor. Option B is correct because Azure Monitor collects telemetry from Azure resources. Option A is wrong because Azure Log Analytics is part of Azure Monitor, not a separate service for monitoring. Option C is wrong because Application Insights is for application performance, not infrastructure monitoring. Option D is wrong because Microsoft Sentinel is a SIEM, not general monitoring.

Answer

Application Insights

Answer

Azure Log Analytics

Answer

Microsoft Sentinel

Question 11

You are designing an agent that uses Azure AI Search as a knowledge store. The agent must handle multiple languages. Which feature should you configure in Azure AI Search to ensure the agent retrieves relevant results for queries in different languages?

Accepted Answer

Language analyzers. Option D is correct because language analyzers in Azure AI Search handle language-specific text processing. Option A is wrong because semantic search improves relevance, not language handling. Option B is wrong because scoring profiles rank results. Option C is wrong because synonyms expand queries, not handle languages.

Answer

Scoring profiles

Answer

Semantic search

Answer

Synonym maps

Question 12

Refer to the exhibit. You deploy this ARM template to create an agent. The agent uses a user-assigned managed identity to call an external weather API. The deployment succeeds but the agent fails to authenticate to the weather API. What is the most likely reason?

Accepted Answer

The external weather API is not configured to accept tokens from the managed identity's tenant.. Option D is correct because the weather API needs to trust the managed identity's token, which requires configuring the API as a federated identity credential or using an app registration. Option A is wrong because the resourceId is correctly formatted. Option B is wrong because the model provider is valid. Option C is wrong because the endpoint is not necessarily incorrect.

Answer

The resourceId for the managed identity is incorrect.

Answer

The model provider 'AzureAI' should be 'AzureOpenAI'.

Answer

The URL parameter is missing the API version.

Question 13

You are creating an agent in Microsoft Copilot Studio that needs to escalate to a human agent when it cannot resolve a query. Which feature should you use?

Accepted Answer

Add a 'Transfer to agent' topic.. In Microsoft Copilot Studio, the 'Transfer to agent' topic is the correct feature to escalate unresolved queries to a human agent. This topic is specifically designed to hand off the conversation to a live agent, often by triggering a handoff mechanism such as a Dynamics 365 Customer Service queue or a custom integration. It ensures that the bot gracefully transfers context and conversation history, maintaining a seamless user experience.

Answer

Add an 'Escalate' system topic.

Answer

Configure the 'Fallback' topic to call a Power Automate flow.

Answer

Use the 'End conversation' node.

Question 14

You are building an agentic solution using Azure AI Agent Service. The agent needs to send an email via Microsoft Graph API. Which authentication method should you use for the action?

Accepted Answer

OAuth 2.0. Option C is correct because Microsoft Graph API requires OAuth 2.0 tokens. Option A is wrong because API Key is not supported. Option B is wrong because Basic auth is deprecated. Option D is wrong because client certificates are for server-to-server but OAuth is standard.

Answer

Client Certificate

Answer

API Key

Answer

Basic Authentication

Question 15

You deploy an agent in Microsoft Foundry that uses a custom skill in Azure AI Search. The skill calls an Azure Function to enrich documents. The function uses an API key. The deployment succeeds but the skill returns an error when processing documents. The function logs show the request is received but the API key is missing. What is the most likely cause?

Accepted Answer

The skill definition does not include the apiKey in the header.. Option B is correct because the skill might not be passing the API key as a header. Option A is wrong because the function is reachable. Option C is wrong because the key might be correct but not passed. Option D is wrong because the function URL might be correct.

Answer

The Azure Function is not running.

Answer

The API key stored in Azure Key Vault is expired.

Answer

The custom skill's URI is incorrect.