AI-102 Implement an agentic solution Practice Test 4 — 15 Questions

Question 1

A company uses Microsoft Copilot Studio to build an agent that helps employees find policy documents. The agent needs to answer questions about the employee handbook, which is stored in SharePoint Online. The agent should only respond to queries about the handbook and ignore unrelated questions. Which configuration should the agent designer apply?

Accepted Answer

Create a topic for handbook queries and configure authentication and security to restrict access.. Option B is correct because topic-level security with authentication is required to restrict access to the handbook content and ensure the agent only responds to relevant queries. Option A is wrong because generative answers alone may pick up unrelated content. Option C is wrong because bot-level security does not restrict topics. Option D is wrong because disabling fallback does not prevent the agent from answering unrelated queries using generative answers.

Answer

Disable fallback responses and add a condition to the existing topic.

Answer

Enable generative answers and add the SharePoint site as a data source.

Answer

Set bot-level authentication to require Microsoft Entra ID sign-in.

Question 2

You are building an agent using Microsoft Copilot Studio to handle customer returns. The agent must collect the order ID, reason for return, and then provide a return shipping label. The process requires the user to provide information step-by-step. Which type of conversation flow should you implement?

Accepted Answer

Use multiple question nodes in a sequential flow.. Option C is correct because a sequential flow with multiple question nodes ensures the user provides information step-by-step. Option A is wrong because a single question node will not handle multiple pieces of information. Option B is wrong because adaptive cards are for rich interactions, not step-by-step data collection. Option D is wrong because generative answers are for free-form text, not structured collection.

Answer

Use an adaptive card to collect all inputs in one step.

Answer

Use a single question node to collect all information at once.

Answer

Use a generative answers node to parse the user's intent.

Question 3

A developer is building an agent using the Microsoft Bot Framework SDK in C#. The agent must authenticate users via Microsoft Entra ID and maintain state across conversations. The solution must store user preferences (e.g., language, timezone) in Azure Cosmos DB. Which state management approach should the developer use?

Accepted Answer

Use UserState with Cosmos DB Storage.. Option D is correct because UserState with Cosmos DB storage provides a scalable solution for storing user preferences across conversations. Option A is wrong because ConversationState is scoped to a single conversation. Option B is wrong because Blob Storage is for large objects, not key-value state. Option C is wrong because Bot State Service is deprecated.

Answer

Use the Bot State Service (deprecated).

Answer

Use UserState with Blob Storage.

Answer

Use ConversationState with Memory Storage.

Question 4

An organization uses Microsoft Copilot Studio to create an agent for IT support. The agent should be able to reset passwords, unlock accounts, and look up user information by connecting to on-premises Active Directory via Microsoft Entra ID. Which type of authentication should be used for the agent to access these actions?

Accepted Answer

OAuth 2.0 authentication with Microsoft Entra ID using on-behalf-of flow.. Option A is correct because OAuth 2.0 with on-behalf-of flow allows the agent to authenticate to Microsoft Entra ID and then access on-premises resources via an API. Option B is wrong because API key is not suitable for user-specific actions. Option C is wrong because certificate-based authentication is not typical for this scenario. Option D is wrong because basic authentication is insecure and deprecated.

Answer

Basic authentication with username and password.

Answer

API key authentication to the on-premises API.

Answer

Certificate-based authentication for the agent's identity.

Question 5

You are designing an agent using Microsoft Copilot Studio that must handle sensitive employee data such as salaries and performance reviews. The agent should only allow HR managers to access these topics. The solution must comply with data privacy regulations. Which two actions should you take? (Select two.)

Accepted Answer

Configure authentication in Copilot Studio to require Microsoft Entra ID sign-in.. Options A and D are correct. Authentication ensures the user's identity is verified. Topic-level security restricts access to specific topics based on user roles. Option B is wrong because audit logs are for monitoring, not access control. Option C is wrong because bot-level authentication does not restrict topics. Option E is wrong because data loss prevention does not control access within the agent.

Answer

Set bot-level authentication to require a specific role.

Answer

Enable detailed audit logging in Microsoft Purview.

Answer

Apply data loss prevention policies in Microsoft Purview.

Question 6

A company wants to build a customer support agent using Microsoft Copilot Studio. The agent needs to understand natural language and handle complex queries beyond simple keyword matching. The agent should be able to escalate to a human agent when it cannot resolve the issue. Which feature should the agent use to understand natural language?

Accepted Answer

Enable generative answers and configure a knowledge source.. Option C is correct because generative answers use large language models to understand natural language and handle complex queries. Option A is wrong because topics are for structured conversations. Option B is wrong because entities extract specific data but not understand intent. Option D is wrong because Power Automate flows are for backend actions, not understanding.

Answer

Create a Power Automate flow to process queries.

Answer

Create topics with trigger phrases.

Answer

Use entities to extract key information.

Question 7

You are troubleshooting a Copilot Studio agent that uses a Power Automate flow to look up customer information from a CRM system. The flow runs successfully when tested manually, but when the agent triggers it, the flow fails with an authentication error. What is the most likely cause?

Accepted Answer

The flow uses the agent's identity instead of the user's identity, and the agent lacks CRM access.. Option B is correct because when the agent triggers the flow, it uses the agent's identity, which may not have permissions to the CRM. Option A is wrong because connector permissions are typically configured once. Option C is wrong because the flow runs at runtime, not after sign-in. Option D is wrong because the flow works manually, so the connection is valid.

Answer

The flow connection was deleted after the manual test.

Answer

The user must sign in again before triggering the flow.

Answer

The CRM connector requires additional permissions that were not granted.

Question 8

A company uses Microsoft Copilot Studio to create an agent that helps employees schedule meetings. The agent must access the user's calendar to find free time slots and book meetings. The agent should only work for users who have granted consent. Which authentication and authorization approach should be used?

Accepted Answer

Configure OAuth 2.0 authentication with Microsoft Entra ID and request delegated permissions for Microsoft Graph.. Option A is correct because OAuth 2.0 with delegated permissions allows the agent to act on behalf of the user after consent. Option B is wrong because application permissions are for app-only access, not user delegation. Option C is wrong because API key does not support user context. Option D is wrong because certificate-based auth is also app-only.

Answer

Use certificate-based authentication for the agent.

Answer

Use API key authentication to call Microsoft Graph.

Answer

Use OAuth 2.0 client credentials flow with application permissions.

Question 9

You are developing a custom agent using the Microsoft Bot Framework SDK. The agent must handle multiple languages and use the Azure AI Translator service to translate user messages to English before processing. The solution should minimize latency. Where should the translation logic be implemented?

Accepted Answer

As a custom middleware component that intercepts incoming activities and translates them.. Option C is correct because middleware runs on every incoming message and can translate before the bot logic runs, minimizing latency by avoiding multiple round trips. Option A is wrong because translating in the activity handler would still be in the pipeline but more coupled. Option B is wrong because the language detection API is separate. Option D is wrong because client-side translation is not possible in this scenario.

Answer

In the OnMessageActivityAsync method after receiving the user's message.

Answer

By using the Bot Framework's built-in language detection feature.

Answer

By sending the user's message to a separate translation endpoint from the client application.

Question 10

A company plans to deploy a Copilot Studio agent to Microsoft Teams. The agent should be available to all employees in the company. The security team requires that only authenticated users from the company's Microsoft Entra ID tenant can access the agent. Which channel configuration should be used?

Accepted Answer

Publish the agent to the Teams channel and configure authentication to require Microsoft Entra ID with the company's tenant ID.. Option A is correct because the Teams channel in Copilot Studio allows authentication configuration to restrict access to specific tenants. Option B is wrong because turning off authentication would allow anyone. Option C is wrong because the Direct Line channel is for custom apps, not Teams. Option D is wrong because the Web channel would not enforce Teams-specific authentication.

Answer

Publish the agent to the Direct Line channel and embed it in a Teams tab.

Answer

Publish the agent to the Web channel and share the link in Teams.

Answer

Publish the agent to the Teams channel and turn off authentication.

Question 11

You have created a Copilot Studio agent that uses a Power Automate flow to send an email when a user requests a password reset. The flow works correctly in test mode, but when the agent is published, the flow does not run. What should you check first?

Accepted Answer

Check if the flow is shared with the Copilot Studio agent.. Option B is correct because if the flow runs in test but not in published mode, the most common issue is that the flow connection is not shared with the agent. Option A is wrong because permissions are likely correct if test works. Option C is wrong because the flow is already created. Option D is wrong because the trigger is correct if test works.

Answer

Check if the user has permission to run the flow.

Answer

Check if the trigger condition is correct.

Answer

Check if the flow is turned on.

Question 12

An organization uses Microsoft Copilot Studio to build an agent that handles customer inquiries. The agent uses a custom topic with a Power Automate flow to check order status. The flow returns a JSON object with order details. The agent needs to display the order status and estimated delivery date in a formatted message. How should the agent parse the JSON response?

Accepted Answer

Use the ParseJSON Power Fx function to convert the JSON string to a record.. Option D is correct because the ParseJSON function in Copilot Studio converts a JSON string into a Power Fx record that can be used to access properties. Option A is wrong because the agent does not have a generic JSON parser built-in. Option B is wrong because Power Automate can parse JSON, but the agent needs to parse it in Copilot Studio. Option C is wrong because the agent cannot use C# directly.

Answer

Write a custom code action in C# to parse the JSON.

Answer

Use the built-in JSON parser in Copilot Studio.

Answer

Modify the Power Automate flow to return individual variables instead of JSON.

Question 13

A developer is building a custom agent using the Microsoft Bot Framework SDK. The agent must be able to handle multiple turns and maintain context across the conversation. The agent uses dialogs to guide the user through a multi-step process. Which component is responsible for managing the dialog stack and persisting state between turns?

Accepted Answer

The DialogSet object that contains dialogs and manages the stack.. Option C is correct because the DialogSet manages the dialog stack and uses state to persist between turns. Option A is wrong because IBot is the main interface but does not manage dialogs directly. Option B is wrong because StateMiddleware is part of the Bot Framework but not dialog-specific. Option D is wrong because ActivityHandler handles activities but not dialog management.

Answer

The ActivityHandler class that processes incoming activities.

Answer

The IBot interface implementation.

Answer

The StateMiddleware component.

Question 14

You are building an agent in Microsoft Copilot Studio that needs to send a confirmation email after a user completes a survey. The email should be sent using the user's email address collected during the conversation. Which feature should you use to send the email?

Accepted Answer

Create a Power Automate flow that sends an email and call it from the topic.. Option A is correct because a Power Automate flow can be triggered from a topic and send an email using the user's email address. Option B is wrong because the email channel is for receiving emails. Option C is wrong because Copilot Studio does not have a native email action. Option D is wrong because adaptive cards are for in-chat interactions, not sending emails.

Answer

Use the Send an email action directly in Copilot Studio.

Answer

Use an adaptive card with an email button.

Answer

Use the email channel to send a response.

Question 15

A company wants to integrate their Copilot Studio agent with an on-premises ERP system using an API. The on-premises API requires Windows Authentication. The agent must call the API securely without exposing credentials. Which Azure service should be used to enable this integration?

Accepted Answer

Azure API Management with on-premises data gateway.. Option C is correct because Azure API Management with on-premises data gateway can securely expose on-premises APIs to the cloud and handle Windows Authentication. Option A is wrong because Azure Functions would need a gateway to connect to on-premises. Option B is wrong because Logic Apps also need a gateway. Option D is wrong because VPN is not a service for API management.

Answer

Azure Functions with HTTP trigger.

Answer

Azure VPN Gateway to connect to the on-premises network.

Answer

Azure Logic Apps with a connector.