AI-102 Implement an agentic solution Practice Question
You are troubleshooting a Microsoft Copilot Studio agent that calls a custom connector action to retrieve shipment data. The action works in the test canvas, but when the agent is published to a channel, the action returns an authorization error for some users. The connector uses OAuth. You need to resolve the issue. What should you do?
⚠ Common exam trap
The trap here is assuming the connector itself is broken because it works in the test canvas, when the canvas often uses the maker's credentials rather than each end user's.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Verify that each user has consented to the OAuth connection and has permission in the source system, then have them sign in to the connection.
OAuth-protected connectors require each user to consent and to have appropriate rights in the target system. The test canvas often runs under the maker's credentials, which masks per-user authorization problems. Confirming consent and permissions, and having affected users sign in to the connection, fixes the errors without weakening the security model.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Increase the connector's timeout setting so authorization calls have more time to complete.
Why it's wrong here
Authorization errors are not caused by timeouts; they indicate that the user could not be authenticated or is not permitted. Extending the timeout would not change the outcome for users who have not consented or lack permissions. This misdiagnoses the failure and delays the correct remediation.
- ✗
Republish the agent to the channel so the connector definition refreshes for all users.
Why it's wrong here
Republishing updates the agent definition but does not grant users consent or permissions for the OAuth-protected system. Users who never authorized the connection will still fail after republishing. The error is tied to per-user authorization state, not to a stale connector definition in the channel.
- ✓
Verify that each user has consented to the OAuth connection and has permission in the source system, then have them sign in to the connection.
Why this is correct
OAuth connections are user-scoped, so each user must consent and hold the necessary permissions in the source system. Users who fail are likely missing consent or lack rights in the shipment system. Having them authenticate and confirming their permissions resolves the authorization errors while preserving per-user security and auditing.
- ✗
Change the connector authentication to API key and share the key with all users.
Why it's wrong here
Switching to a shared API key removes per-user authorization and can grant broader access than intended, which may violate the security model of the shipment system. It also does not explain why only some users fail; the issue is per-user consent and permissions. Shared keys are harder to rotate and audit, so this is not the right fix.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every AI-102 question from scratch — 761 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This AI-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI-102 exam.