AI-102 Implement an agentic solution Practice Question
You are using Microsoft Copilot Studio to create an agent that helps users reset their passwords. The agent should first verify the user's identity using multi-factor authentication (MFA) before proceeding. Which feature should you configure?
⚠ Common exam trap
It's easy for candidates to think they need to build custom MFA logic (e.g., via Power Automate or variables) when the platform already provides a native, declarative way to enforce MFA through Authentication settings, leading them to over-engineer the solution.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure Authentication settings to require Microsoft Entra ID authentication with MFA policy
Microsoft Copilot Studio allows you to configure Authentication settings directly on the agent, and by selecting 'Microsoft Entra ID' as the authentication provider, you can enforce an MFA policy that is already configured in your Entra ID tenant. This ensures that before the agent processes any password reset logic, the user must complete MFA, satisfying the identity verification requirement without custom code or flows.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Add a variable to store the user's identity status
Why it's wrong here
A variable merely stores a value; it performs no authentication and cannot trigger or validate an MFA challenge. Variables are for holding conversation state such as a collected account number, not for verifying a user's identity before a sensitive operation.
- ✓
Configure Authentication settings to require Microsoft Entra ID authentication with MFA policy
Why this is correct
Configuring Authentication to require Microsoft Entra ID with an MFA policy forces identity verification before the agent proceeds, satisfying the pre-reset verification requirement. This leverages Entra ID's native conditional access rather than building custom verification logic.
- ✗
Add a Power Automate flow that calls Microsoft Entra ID MFA
Why it's wrong here
A Power Automate flow can call Microsoft Entra ID APIs, but MFA verification requires an interactive authentication challenge that a background flow cannot present to the user mid-conversation. Flows suit backend actions such as creating tickets, not interactive identity verification.
- ✗
Use a 'Sign in' topic trigger from the customer channel
Why it's wrong here
The 'Sign in' topic trigger authenticates users against configured authentication providers for the agent's channel, but it does not enforce a step-up MFA challenge within the password-reset conversation. It suits gating agent access by sign-in, not verifying identity with MFA before a sensitive action.
Go deeper
Related to this question
About these practice questions
One of 761 original AI-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AI-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI-102 exam.