Free AB-620 Practice Questions & Study Guide: Designing and Building Integrated AI Agent Solutions in Copilot Studio

Official Exam Details: (AB-620)

Exam Code:
AB-620
Passing Score:
70%
Total Question Bank:
84 Verified Questions
Exam Duration:
120 Minutes

Exam Format & Question Types

This certification exam features multiple-choice questions (single and multi-select), interactive Hotspots, Hot Areas, and Drag-and-Drop scenario configurations designed to test real-world technical competency.

AB-620: Advanced Cloud Solutions Architecture Expert Certification Study Guide

1. Exam Overview & Profile

The AB-620 certification targets senior cloud architects, solution designers, and technical leads responsible for designing, optimizing, and governing complex, enterprise-grade cloud solutions across hybrid and multi-cloud environments. This exam validates an expert’s ability to translate intricate business requirements into scalable, secure, cost-effective, and compliant architectural blueprints. Candidates are expected to demonstrate deep understanding of cross-platform interoperability, advanced optimization techniques, and robust governance frameworks.

  • Target Audience: Senior Cloud Architects, Solution Architects, Technical Consultants with 5+ years of experience in cloud architecture.
  • Question Count: Approximately 55-65 questions.
  • Duration: 150 minutes.
  • Passing Score Context: A scaled score of 700 out of 1000 is typically required to pass, emphasizing comprehensive mastery of the subject domains.

2. Deep-Dive Domain Breakdown

Success on AB-620 demands proficiency across several critical architectural pillars:

  • Domain 1: Advanced Hybrid & Multi-Cloud Design (25%)
    • Concepts: Cross-cloud identity federation (SAML, OAuth), secure inter-cloud networking (site-to-site VPNs, dedicated interconnects), data synchronization strategies (ETL, CDC), distributed data consistency, disaster recovery (DR) and business continuity planning (BCP) across disparate cloud providers, container orchestration across clusters (Kubernetes Federation).
    • Technologies: API Gateway patterns, message queuing services, content delivery networks (CDNs), data replication services, network virtualization.
  • Domain 2: Business Solution Optimization & Cost Management (25%)
    • Concepts: FinOps principles, cost allocation strategies, resource optimization (right-sizing, autoscaling, reserved instances vs. spot instances), performance tuning for large-scale applications, serverless cost models, workload profiling, TCO analysis for complex migrations.
    • Technologies: Monitoring & logging tools, infrastructure-as-code (IaC) for resource management, performance testing suites, cloud billing APIs.
  • Domain 3: Security, Governance & Compliance (20%)
    • Concepts: Advanced identity and access management (IAM) policies, data encryption strategies (BYOK, HSM), data sovereignty and residency, regulatory compliance frameworks (GDPR, HIPAA, ISO 27001), security posture management, audit logging, incident response planning.
    • Technologies: Security Information and Event Management (SIEM), Cloud Access Security Brokers (CASB), data loss prevention (DLP), network security groups, firewalls, threat detection services.
  • Domain 4: DevOps & Automation for Enterprise (15%)
    • Concepts: Implementing CI/CD pipelines for multi-cloud deployments, GitOps methodologies, configuration management at scale, automated testing, infrastructure provisioning via IaC, policy-as-code.
    • Technologies: Jenkins, GitLab CI/CD, Terraform, Ansible, Chef, Puppet, automated security scanning tools.
  • Domain 5: Data & Analytics Architecture (15%)
    • Concepts: Designing scalable data lakes, data warehousing solutions, real-time streaming architectures, batch processing strategies, integrating AI/ML services for intelligent applications, data governance and cataloging.
    • Technologies: Distributed databases, big data processing frameworks (Spark), messaging queues (Kafka), data visualization tools, machine learning platforms.

3. High-Yield Exam Tips & Scenario Traps

Mastering AB-620 requires more than just knowing services; it demands architectural judgment:

  • Prioritize Business Requirements: Always align proposed solutions with the stated business drivers (e.g., cost reduction, performance, compliance).
  • Cost vs. Performance vs. Security Trade-offs: Recognize when a slight increase in one metric significantly impacts another. Often, a balanced approach is best unless explicitly stated otherwise.
  • Start Simple & Scale: For new requirements, consider the simplest, most managed service approach first, then evaluate customization or complex solutions if absolutely necessary.
  • Common Traps:
    • Over-engineering: Don’t design for hypothetical future scale if current requirements are modest.
    • Ignoring Security Boundaries: Always assume least privilege, network segmentation, and data encryption are paramount unless a scenario suggests a specific relaxation (which is rare).
    • Misinterpreting Compliance: Understand that regulatory compliance often dictates specific data residency, encryption, and auditing requirements.
    • RAG vs. Fine-tuning (Architectural Analogue): Know when to leverage existing, managed services (like RAG for existing knowledge bases) versus custom-building or deeply optimizing (fine-tuning) for unique, performance-critical scenarios. Managed services reduce operational overhead.

4. Frequently Asked Questions (FAQ)

Q1: What is the best strategy to prepare for AB-620?
A: A multi-pronged approach is recommended. Start by thoroughly reviewing the official AB-620 exam guide and whitepapers. Gain hands-on experience across multiple cloud platforms, focusing on implementing hybrid and multi-cloud solutions. Utilize practice exams to identify knowledge gaps and refine your architectural decision-making process under timed conditions. Participating in design discussions and reviewing case studies of complex enterprise cloud deployments will also be highly beneficial.
Q2: What kind of questions can I expect on the exam?
A: The exam typically features multiple-choice, multiple-select, and scenario-based questions. Scenario questions will present a business problem or technical challenge and require you to propose the most appropriate architectural solution, often involving trade-offs between cost, performance, security, and operational complexity. Expect questions that test your ability to compare and contrast architectural patterns across different cloud ecosystems.
Q3: How important is hands-on experience for this certification?
A: Hands-on experience is absolutely critical. AB-620 is an expert-level exam, and theoretical knowledge alone is insufficient. Candidates should have practical experience designing and implementing solutions involving hybrid networking, advanced IAM, data migration, and cost optimization across at least two major cloud providers. This practical application will solidify your understanding of architectural nuances and potential pitfalls.

Free AB-620 Sample Practice Questions

Test your knowledge with these sample scenario questions complete with verified explanations:

General Practice Questions

QUESTION 1 [HOT_AREA]

You deploy an agent in Microsoft Copilot Studio that triggers a cloud flow to update customer records in Microsoft Dataverse.

You observe the following after deploying the agent:

Several runs fail due to a temporary authentication issue.

The flow continues to trigger and generate additional failed runs.

You must:

  • Stop additional failed executions while troubleshooting.
  • Process a failed execution after resolving the authentication issue.
  • Validate if the most recent executions succeeded immediately after resolution.

You need to use the appropriate monitoring and management actions to restore normal flow operation and validate successful execution.

Which action should you perform for each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

✔ Correct Answer:

Hotspot Canvas

Click to View Verified Solution & Explanation
Explanation:

Stop additional failed executions while troubleshooting.

✅ Disable the flow

Reasoning: Disabling (or turning off) a cloud flow is the standard, non-destructive method to prevent it from being triggered. This action effectively pauses the flow, stopping new runs from starting while you investigate and resolve the temporary authentication issue.

Process a failed execution after resolving the authentication issue.

✅ Resubmit the run

Reasoning: After fixing the authentication problem, the ‘Resubmit’ action on a failed run instance re-executes the flow using the original trigger data. This allows you to process the specific failed transaction without requiring a new trigger event from the copilot agent.

Validate if the most recent executions succeeded immediately after resolution.

✅ Review the Activity history

Reasoning: The run history page for a flow provides a detailed log of all executions, including their start time, duration, and status (Succeeded, Failed). This is the most direct and effective way to verify that the fix is working and that new flow runs are completing successfully.

QUESTION 2

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear on the review screen.

An agent uses a flow that calls an external service which can occasionally fail or time out.

When a failure occurs, the agent must meet the following requirements:

Must not terminate silently.

Must send a notification containing the error details.

You need to configure the agent flow so that failures are handled in a controlled and predictable way.

Solution: Configure run after conditions for failure paths.

Does the solution meet the goal?

  • A. Yes
  • B. No
Click to View Verified Solution & Explanation

Correct Option: A

Explanation:

✅ Option A (Correct)

Reasoning: Configuring ‘run after’ conditions for failure paths in a Power Automate flow (often used within Copilot Studio agents) directly addresses both requirements. When an action fails or times out, subsequent actions configured with ‘has failed’ or ‘has timed out’ conditions will execute. This prevents silent termination. Within these failure paths, specific actions can be added to retrieve error details and send notifications (e.g., email, Teams message), thus fulfilling the notification requirement.

QUESTION 3 [HOT_AREA]

You run multiple evaluation tests for an agent in Copilot Studio before expanding user access.

The tests provide the following results:

Each evaluation case is reported as meeting or missing the expected response.

Some evaluation cases fail repeatedly across several runs.

Each run displays the expected response and the response generated by the agent.

You need to provide a conclusion based on the evaluation results.

Which conclusions should you make? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

 

✔ Correct Answer:

Hotspot Canvas

Click to View Verified Solution & Explanation
Explanation:

Evaluation Interpretation

This hotspot question requires matching the description of an evaluation result with the logical conclusion drawn from that result when testing a Copilot Studio agent.

Row 1: Evaluation case meeting or missing expected response.

✅ **Pass or fail status**

Reasoning: The statement that a test case is either “meeting or missing” the expected response is the fundamental definition of a binary outcome. In testing, this directly translates to the pass or fail status of that specific test case.

Row 2: Some evaluation cases fail repeatedly.

✅ **Prompt revisions**

Reasoning: When specific test cases fail consistently across multiple runs, it indicates a systematic issue rather than a random error. This points to a flaw in the agent’s configuration for those scenarios, most commonly the prompts, topic triggers, or generative AI instructions, which require revision to correct the behavior.

Row 3: Each run displays expected response and agent response.

✅ **Root cause of failures**

Reasoning: The side-by-side comparison of the expected response versus the agent’s actual generated response provides the necessary detail for debugging. By analyzing the differences, a developer can diagnose exactly why the agent failed, thereby determining the root cause of the failure.

QUESTION 4

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear on the review screen.

An agent uses a flow that calls an external service which can occasionally fail or time out.

When a failure occurs, the agent must meet the following requirements:

Must not terminate silently.

Must send a notification containing the error details.

You need to configure the agent flow so that failures are handled in a controlled and predictable way.

Solution: Send a notification with relevant error details.

Does the solution meet the goal?

  • A. Yes
  • B. No
Click to View Verified Solution & Explanation

Correct Option: B

Explanation: The solution ‘Send a notification with relevant error details’ only addresses the output requirement (sending a notification). It does not, by itself, ensure that the agent ‘must not terminate silently’ or that failures are handled in a ‘controlled and predictable way’. To meet these requirements, the agent flow must incorporate robust error handling mechanisms (e.g., try-catch blocks, specific error conditions) to actively detect and manage failures, preventing silent termination, before a notification can even be triggered. Therefore, the solution is incomplete.

QUESTION 5 [HOT_AREA]

An organization uses separate development and production environments for agents in Copilot Studio.

You create an agent in the development environment.

The agent must be deployed to production by using an ALM process.

You must configure the solution strategy to meet the following requirements:

Developers continue modifying the agent in development.

The production deployment prevents direct modification.

The agent is exported from development and imported into production in a deployment-ready state.

You need to configure solutions to support deployment and lifecycle management of the agents.

Which solution type should you use for each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

✔ Correct Answer:

Hotspot Canvas

Click to View Verified Solution & Explanation
Explanation:

Solution Lifecycle Strategy

This question assesses knowledge of Application Lifecycle Management (ALM) concepts within the Power Platform, which applies directly to Copilot Studio agents.

✅ Allow ongoing development: Unmanaged solution

Reasoning: Development environments use unmanaged solutions. They are considered the ‘source’ and are open for modification, allowing developers to add, configure, and delete components like copilots, topics, and flows. This directly supports the requirement for ongoing development.

✅ Prevent modification in production: Managed solution

Reasoning: To lock down an environment like production, you import solutions as ‘managed’. Managed solutions cannot be directly edited. This prevents accidental or unapproved changes, ensuring the stability and integrity of the production environment. Any changes must originate from a new version of the solution from the development environment.

✅ Export from development and import into production in deployment-ready state: Managed solution

Reasoning: The ‘deployment-ready state’ refers to the packaged solution file that is moved between environments. When exporting from the development environment, the unmanaged solution is exported *as* a managed solution. This managed solution package is the final, distributable artifact that gets imported into production. 

QUESTION 6

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear on the review screen.

A company is configuring an agent in Copilot Studio that uses a generative answers node inside multiple topics.

The company requires responses to meet the following requirements:

Must use an executive summary format.

Must apply only within a specific topic.

Must continue using configured knowledge sources.

Must comply with connector security controls.

You need to configure a custom prompt to meet the formatting requirements.

Solution: Configure the custom prompt tool at the topic level so that other topics are not affected.

Does the solution meet the goal?

  • A. Yes
  • B. No
Click to View Verified Solution & Explanation

Correct Option: A

Explanation: The solution meets the goal. Configuring a custom prompt at the topic level allows you to dictate the response format (e.g., executive summary) specifically for that topic, without affecting others. Custom prompts work in conjunction with configured knowledge sources, meaning the generative answers node will still use its defined data sources to retrieve information. Furthermore, custom prompts do not override or bypass existing connector security controls; these are enforced independently.

Case Study: Blue Yonder Airlines

Instructions

This is a case study. Case studies are not timed separately from other exam sections. You can use as much exam time as you would like to complete each case study. However, there might be additional case studies or other exam sections. Manage your time to ensure that you can complete all the exam sections in the time provided. Pay attention to the Exam Progress at the top of the screen so you have sufficient time to complete any exam sections that follow this case study.

To answer the case study questions, you will need to reference information that is provided in the case. Case studies and associated questions might contain exhibits or other resources that provide more information about the scenario described in the case. Information provided in an individual question does not apply to the other questions in the case study.

A Review Screen will appear at the end of this case study. From the Review Screen, you can review and change your answers before you move to the next exam section. After you leave this case study, you will NOT be able to return to it.

To start the case study –

To display the first question in this case study, select the “Next” button. To the left of the question, a menu provides links to information such as business requirements, the existing environment, and problem statements. Please read through all this information before answering any questions. When you are ready to answer a question, select the “Question” button to return to the question.

Background –

Blue Yonder Airlines is a global carrier headquartered in Los Angeles, California, operating domestic and international flights. The company serves millions of passengers annually through its website, mobile app, and call centers. To improve customer service efficiency and reduce call center volume, Blue Yonder is deploying an AI agent in Microsoft Copilot Studio.

The agent will handle customer inquiries across multiple channels – web chat, mobile app, and Microsoft Teams (for internal support staff). It will answer questions, retrieve data from enterprise systems, and escalate to human agents when needed.

The project is led by a cross-function team:

Product manager: Defines requirements and success metrics.

Lead agent author: Designs topics, intents, and generative behavior.

Flow designers: Build agent flows and integrations.

IT/security and compliance: Oversees identity, data protection, and Responsible AI (RAI) compliance.

Current environment –

Channels –

Public website: Embedded web chat

Mobile app: In-app chatbot –

Microsoft Teams: Internal support agent access

Identity and access –

Customers: Anonymous access for general inquiries (e.g., flight status, baggage policy).

Authentication is required for personal data access (e.g., bookings, loyalty points).

Internal staff: Authenticate via Microsoft Entra ID.

Data sources –

Reservation and Ticketing System (internal): REST API, no prebuilt connector with custom enterprise database.

Flight Status and Weather APIs (external): REST APIs with API keys.

Customer Support Knowledge Base: SharePoint library with PDFs and policy documents.

Loyalty Program Data: Stored in Dynamics 365 and Dataverse.

Travel Advisory Content: Uses REST API with partner services.

Integration mechanisms –

Custom connectors must be used for internal APIs that lack prebuilt connectors.

HTTP request nodes may be used for lightweight external APIs.

Knowledge sources must be used for unstructured content.

Agent flows must be used to encapsulate reusable logic (e.g., rebooking).

Business requirements –

Omnichannel support –

Deploy the agent across web, mobile, and Teams with a consistent user experience. The Teams deployment must also support internal staff.

Self-service capabilities –

The agent must handle common inquiries such as:

Flight status –

Booking and rebooking –

Loyalty program questions –

Travel policies and baggage rules

Human escalation –

If the agent cannot resolve an issue or the user requests help, it must:

Escalate to a human agent.

Transfer the conversation transcript and relevant context.

Redact any sensitive personal data before escalation.

Knowledge integration –

The agent must use scalable methods for knowledge integration and must not rely on manually authored Q&A topics for each document.

Performance metrics –

First-contact resolution: +25%

Tier-1 call deflection: ≥20%

Response time: 90% of queries answered within 30 seconds

Accuracy: ≥95% for known FAQs –

CSAT: ≥85% for AI-handled interactions

Technical requirements –

Platform constraints –

No custom code is permitted; only Copilot Studio’s built-in tools may be used.

All backend logic must be implemented using agent flows.

Markdown must be used for formatting (e.g., bold, bullet points); HTML is not supported.

Authentication –

Sign-in is required for personal data access.

Anonymous access is allowed for general inquiries.

User identity must be used for data access; shared or builder credentials must not be used.

Compliance and security –

Power Platform DLP policies must be enforced to block unauthorized data flows.

Responsible AI content moderation filters must be enabled.

Prompt modifications must be added to enforce tone, disclaimers, and refusal behavior.

Disclaimers must be applied consistently across all generative responses. Manual edits to individual topics must be avoided.

Monitoring and maintenance –

All conversations and actions must be logged for auditing.

Weekly reviews of transcripts and metrics must be conducted.

Issues and constraints –

API rate limits: External APIs (e.g., flight status) have usage limits. Agent flows must handle retries and caching to avoid exceeding quotas.

Knowledge base limits: Copilot Studio has limits on the number and size of indexed documents. Large files must be split or summarized.

Generative answer risks: Generative responses must be constrained to avoid policy violations. Prompt modifications and filters must be used to enforce tone, safety, and compliance.

User input variability: Users phrase questions in diverse ways. Topics must include varied trigger phrases and fallback handling.

Authentication UX: The agent must clearly explain when sign-in is required and handle transitions smoothly across channels.

Problem statement –

Blue Yonder Airlines must deploy a secure, scalable, and policy-compliant AI agent using Microsoft Copilot Studio. The agent must deliver accurate, helpful, and safe responses across multiple channels, integrate with enterprise systems, and support both anonymous and authenticated users. It must adhere to strict data protection and Responsible AI standards while improving customer service efficiency and satisfaction.

QUESTION 7 (Multi-Select)

Scenario: Blue Yonder Airlines

You need to configure the agent in Copilot Studio to use internal and external partner knowledge sources to answer user questions about the airline services.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

  • A. Use a Microsoft Graph connector to index the partner's travel advisory content.
  • B. Write individual Q&A pairs for each document as separate topics.
  • C. Enable unrestricted web search for the agent.
  • D. Add the internal policy documents as a knowledge source.
Click to View Verified Solution & Explanation

Correct Option: A, D

Explanation:

  • ✅ Option A (Correct): The case study specifies ‘Travel Advisory Content: Uses REST API with partner services’ and ‘Knowledge sources must be used for unstructured content.’ Microsoft Graph connectors are designed to ingest data from external repositories, making that content discoverable and usable by Microsoft Search and, consequently, by Copilot Studio’s generative answers as an external knowledge source. This provides a scalable method for integrating partner content.
  • ✅ Option D (Correct): The case study identifies ‘Customer Support Knowledge Base: SharePoint library with PDFs and policy documents’ and states ‘Knowledge sources must be used for unstructured content.’ Directly adding these internal policy documents as a knowledge source in Copilot Studio allows the agent to leverage generative answers for questions related to these documents, adhering to the requirement for scalable knowledge integration without manual Q&A.
  • ❌ Option B is incorrect: The business requirements explicitly state that the agent ‘must not rely on manually authored Q&A topics for each document,’ which directly contradicts this option.
  • ❌ Option C is incorrect: The technical requirements emphasize ‘Responsible AI content moderation filters must be enabled’ and ‘Generative responses must be constrained to avoid policy violations.’ Enabling unrestricted web search would violate these constraints by introducing unpredictable and unmoderated external information.

Case Study: Fabrikam Inc.

Instructions

This is a case study. Case studies are not timed separately from other exam sections. You can use as much exam time as you would like to complete each case study. However, there might be additional case studies or other exam sections. Manage your time to ensure that you can complete all the exam sections in the time provided. Pay attention to the Exam Progress at the top of the screen so you have sufficient time to complete any exam sections that follow this case study.

To answer the case study questions, you will need to reference information that is provided in the case. Case studies and associated questions might contain exhibits or other resources that provide more information about the scenario described in the case. Information provided in an individual question does not apply to the other questions in the case study.

A Review Screen will appear at the end of this case study. From the Review Screen, you can review and change your answers before you move to the next exam section. After you leave this case study, you will NOT be able to return to it.

To start the case study –

To display the first question in this case study, select the “Next” button. To the left of the question, a menu provides links to information such as business requirements, the existing environment, and problem statements. Please read through all this information before answering any questions. When you are ready to answer a question, select the “Question” button to return to the question.

Background –

Fabrikam Inc. is a Canada-based manufacturer with a growing service organization that supports field technicians and internal operations teams. Fabrikam Inc. plans to launch a new internal agent solution named Operations Concierge to reduce time spent searching policy content, retrieving operational metrics, and executing routine transactions.

The agent will be used by three groups:

Service coordinators who triage incoming service requests

Field technicians who need guided procedures and parts availability

Operations managers who monitor KPIs and exceptions

The agent solution must work in real-world operational conditions. Users often ask questions mid-call with a customer or while coordinating parts shipments. The agents require quick, reliable outcomes. As a result, Fabrikam Inc. requires the solution to:

Provide grounded answers with traceability when it provides guidance.

Retrieve real-time metrics when users ask for operational status.

Execute authenticated updates when users initiate a flow (such as creating a parts request).

Fabrikam Inc. also expects the solution to be maintained by multiple makers and developers across the year. The company has experienced duplicated logic and inconsistent behavior across different agents. This project emphasizes reuse, governance, and maintainability across teams.

Current environment –

Fabrikam Inc. runs three Microsoft Power Platform environments for agent development and release: Dev, Test, and Prod.

The team plans to build the agent and validate it in Dev and Test, then promote to Prod by using a controlled release process that supports repeatable deployments.

Fabrikam Inc. already has two assets the team wants to reuse:

A partially completed Copilot Studio agent named Service Desk Agent, used by IT to create internal tickets and route requests

A Microsoft Foundry agent created by a central AI team that performs specialized summarization and classification for long-form text (for example, summarizing call transcripts into an incident narrative)

Fabrikam Inc. also has operational and knowledge data sources:

A curated policy library (internal SOPs, service warranty rules, escalation criteria, and standard operating procedures)

A set of indexed documents and procedures in an Azure AI Search service that supports vector search for the policy library

A Microsoft Fabric workspace that includes a semantic model used by operations leadership for reporting

Business requirements –

Fabrikam Inc. requires Operations Concierge to meet the following business requirements:

Traceability requirement: When the agent provides policy guidance or procedural recommendations, users must be able to see where the answer came from.

Metrics requirement: When users ask about service performance (backlog, SLA risk, parts shortages, dispatch delays), the solution must return up-to-date metrics in a structured format that operations managers can use in weekly reviews.

Transaction requirement: The solution must support authenticated updates initiated during conversations, including creating a parts request and updating a service case status.

In addition, Fabrikam Inc. wants to avoid duplicating common assets across agents:

The team must reuse the same set of escalation topics, MCP tool definitions, and a standard safety disclaimer across three different agents.

Only the platform engineering group as allowed to edit shared assets. However, all agent authors must be able to use them.

Technical requirements –

The Fabrikam Inc. solution architecture uses a multi-agent approach so that specialist responsibilities are isolated and can evolve independently.

The Operations Concierge (primary agent) must coordinate the following specialist capabilities:

Policy and procedure Q&A: Use an enterprise knowledge source that supports indexed retrieval across the curated policy library and service procedures.

Operational metrics: Delegate metric queries to a Fabric Data Agent that reads governed business data through the Fabric semantic model.

Authenticated updates: Use tools exposed by an existing internal Model Context Protocol (MCP) server that provides transactional operations for the service organization.

Specialized processing: Delegate summarization and classification requests to an existing Microsoft Foundry agent.

Fabrikam Inc. will onboard two MCP servers as tools:

PartsOps MCP server: exposes tools for parts availability checks and parts request creation. The server requires per-user authentication because actions must be traceable to the requesting user.

WarrantyRules MCP server: exposes a read-only tool for validating warranty coverage. The server uses an API key shared by the agent team.

Fabrikam Inc. has also defined a collaboration requirement with the existing Service Desk Agent:

The primary agent must delegate IT-specific requests to the existing Service Desk Agent rather than reimplement ticket creation logic.

Finally, Fabrikarn Inc. plans to support a partner integration:

For shipment tracking inquiries, Fabrikam Inc. will delegate to a partner-provided agent that is only available through a standardized agent-to-agent endpoint.

Issues and constraints –

During early testing, Fabrikam Inc. found three recurring problems:

Makers are copying and modifying the same components across agents, resulting in inconsistent disclaimers and duplicated tools.

Users can obtain a correct answer, but the response is not consistently traceable to a source when the agent uses knowledge.

The primary agent can route some requests, but specialist capabilities are not consistently delegated (for example, some metric questions are answered generatively instead of being routed to the Fabric Data Agent).

You are part of the engineering team responsible for correcting the design and configuration to meet the preceding requirements and constraints.

QUESTION 8

Scenario: Fabrikam Inc.

You need to enable Operations Concierge to delegate shipment tracking inquiries according to Fabrikam Inc.’s defined architecture and technical requirements.

Which integration approach should you use?

  • A. Configure the partner capability as an enterprise knowledge source with indexed retrieval enabled.
  • B. Configure the partner capability as an MCP tool and invoke it as a transactional operation.
  • C. Configure the partner capability as an A2A integration and supply its endpoint information.
  • D. Configure the primary agent to handle shipment tracking through generative responses after publishing.
Click to View Verified Solution & Explanation

Correct Option: C

Explanation:

✅ Option C (Correct)Reasoning: The case study explicitly states, "For shipment tracking inquiries, Fabrikam Inc. will delegate to a partner-provided agent that is only available through a standardized agent-to-agent endpoint." An A2A (Agent-to-Agent) integration is the designated mechanism in Copilot Studio for connecting to and delegating tasks to external agents via their specific endpoints.❌ Why the other choices are incorrect:

  • Option A is incorrect: The partner provides an agent for delegation, not a knowledge source for indexed retrieval.
  • Option B is incorrect: MCP tools are for direct transactional operations or data access, not for delegating to another intelligent agent through an A2A endpoint.
  • Option D is incorrect: The requirement is to delegate to a partner-provided agent, not to handle the inquiry with generative responses directly from the primary agent.

Case Study: Blue Yonder Airlines

Instructions

This is a case study. Case studies are not timed separately from other exam sections. You can use as much exam time as you would like to complete each case study. However, there might be additional case studies or other exam sections. Manage your time to ensure that you can complete all the exam sections in the time provided. Pay attention to the Exam Progress at the top of the screen so you have sufficient time to complete any exam sections that follow this case study.

To answer the case study questions, you will need to reference information that is provided in the case. Case studies and associated questions might contain exhibits or other resources that provide more information about the scenario described in the case. Information provided in an individual question does not apply to the other questions in the case study.

A Review Screen will appear at the end of this case study. From the Review Screen, you can review and change your answers before you move to the next exam section. After you leave this case study, you will NOT be able to return to it.

To start the case study –

To display the first question in this case study, select the “Next” button. To the left of the question, a menu provides links to information such as business requirements, the existing environment, and problem statements. Please read through all this information before answering any questions. When you are ready to answer a question, select the “Question” button to return to the question.

Background –

Blue Yonder Airlines is a global carrier headquartered in Los Angeles, California, operating domestic and international flights. The company serves millions of passengers annually through its website, mobile app, and call centers. To improve customer service efficiency and reduce call center volume, Blue Yonder is deploying an AI agent in Microsoft Copilot Studio.

The agent will handle customer inquiries across multiple channels – web chat, mobile app, and Microsoft Teams (for internal support staff). It will answer questions, retrieve data from enterprise systems, and escalate to human agents when needed.

The project is led by a cross-function team:

Product manager: Defines requirements and success metrics.

Lead agent author: Designs topics, intents, and generative behavior.

Flow designers: Build agent flows and integrations.

IT/security and compliance: Oversees identity, data protection, and Responsible AI (RAI) compliance.

Current environment –

Channels –

Public website: Embedded web chat

Mobile app: In-app chatbot –

Microsoft Teams: Internal support agent access

Identity and access –

Customers: Anonymous access for general inquiries (e.g., flight status, baggage policy).

Authentication is required for personal data access (e.g., bookings, loyalty points).

Internal staff: Authenticate via Microsoft Entra ID.

Data sources –

Reservation and Ticketing System (internal): REST API, no prebuilt connector with custom enterprise database.

Flight Status and Weather APIs (external): REST APIs with API keys.

Customer Support Knowledge Base: SharePoint library with PDFs and policy documents.

Loyalty Program Data: Stored in Dynamics 365 and Dataverse.

Travel Advisory Content: Uses REST API with partner services.

Integration mechanisms –

Custom connectors must be used for internal APIs that lack prebuilt connectors.

HTTP request nodes may be used for lightweight external APIs.

Knowledge sources must be used for unstructured content.

Agent flows must be used to encapsulate reusable logic (e.g., rebooking).

Business requirements –

Omnichannel support –

Deploy the agent across web, mobile, and Teams with a consistent user experience. The Teams deployment must also support internal staff.

Self-service capabilities –

The agent must handle common inquiries such as:

Flight status –

Booking and rebooking –

Loyalty program questions –

Travel policies and baggage rules

Human escalation –

If the agent cannot resolve an issue or the user requests help, it must:

Escalate to a human agent.

Transfer the conversation transcript and relevant context.

Redact any sensitive personal data before escalation.

Knowledge integration –

The agent must use scalable methods for knowledge integration and must not rely on manually authored Q&A topics for each document.

Performance metrics –

First-contact resolution: +25%

Tier-1 call deflection: ≥20%

Response time: 90% of queries answered within 30 seconds

Accuracy: ≥95% for known FAQs –

CSAT: ≥85% for AI-handled interactions

Technical requirements –

Platform constraints –

No custom code is permitted; only Copilot Studio’s built-in tools may be used.

All backend logic must be implemented using agent flows.

Markdown must be used for formatting (e.g., bold, bullet points); HTML is not supported.

Authentication –

Sign-in is required for personal data access.

Anonymous access is allowed for general inquiries.

User identity must be used for data access; shared or builder credentials must not be used.

Compliance and security –

Power Platform DLP policies must be enforced to block unauthorized data flows.

Responsible AI content moderation filters must be enabled.

Prompt modifications must be added to enforce tone, disclaimers, and refusal behavior.

Disclaimers must be applied consistently across all generative responses. Manual edits to individual topics must be avoided.

Monitoring and maintenance –

All conversations and actions must be logged for auditing.

Weekly reviews of transcripts and metrics must be conducted.

Issues and constraints –

API rate limits: External APIs (e.g., flight status) have usage limits. Agent flows must handle retries and caching to avoid exceeding quotas.

Knowledge base limits: Copilot Studio has limits on the number and size of indexed documents. Large files must be split or summarized.

Generative answer risks: Generative responses must be constrained to avoid policy violations. Prompt modifications and filters must be used to enforce tone, safety, and compliance.

User input variability: Users phrase questions in diverse ways. Topics must include varied trigger phrases and fallback handling.

Authentication UX: The agent must clearly explain when sign-in is required and handle transitions smoothly across channels.

Problem statement –

Blue Yonder Airlines must deploy a secure, scalable, and policy-compliant AI agent using Microsoft Copilot Studio. The agent must deliver accurate, helpful, and safe responses across multiple channels, integrate with enterprise systems, and support both anonymous and authenticated users. It must adhere to strict data protection and Responsible AI standards while improving customer service efficiency and satisfaction.

QUESTION 9 [DRAG_DROP]

Scenario: Blue Yonder Airlines

You need to determine which authentication model should be applied to each Blue Yonder Copilot interaction scenario to comply with the company’s security and governance requirements.

Which authentication requirement should you apply to each scenario? To answer, move the appropriate authentication requirements to the correct user scenarios. You may use each authentication requirement once, more than once, or not at all. You may need to move the split bar between panes or scroll to view content.

NOTE: Each correct selection is worth one point.

 

Question Interface:

Question Interface
✔ Correct Answer / Solution View:

Solution Canvas

Click to View Verified Solution & Explanation
Explanation:

Correct Authentication Model Mapping:

The authentication model for each scenario is determined by the type of user and the data being accessed, as defined in the case study’s requirements.

✅ Step 1: “Allow anonymous access.” matches with -> “A customer asks, ‘What is the baggage allowance for international flights?'”

Reasoning: The case study specifies under “Identity and access” that “Anonymous access for general inquiries (e.g., flight status, baggage policy)” is allowed. This question is a general policy inquiry and does not require access to personal data.

✅ Step 2: “Require customer sign-in using an account.” matches with -> “A customer asks, ‘Can I review my upcoming trips?'”

Reasoning: Reviewing upcoming trips involves accessing personal data related to bookings. The case study requirements state, “Authentication is required for personal data access (e.g., bookings, loyalty points).” Therefore, the customer must sign in.

✅ Step 3: “Require internal agent sign-in using Microsoft Entra ID.” matches with -> “An internal support agent accesses the Copilot agent from Microsoft Teams to look up a loyalty member’s profile.”

Reasoning: This scenario involves an internal employee using the agent on the designated internal channel (Microsoft Teams). The case study explicitly dictates, “Internal staff: Authenticate via Microsoft Entra ID.”

The option “Use agent author credentials” is incorrect because the technical requirements explicitly forbid this practice: “User identity must be used for data access; shared or builder credentials must not be used.”

QUESTION 10 (Multi-Select)

Scenario: Blue Yonder Airlines

You need to deploy the Blue Yonder Copilot agent to the public website and Microsoft Teams while ensuring compliance with the company’s security and Responsible AI requirements.

Which two actions should you perform before making the agent available on both channels? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

  • A. Configure prompt modifications to enforce tone, disclaimers, and refusal behavior at the system level.
  • B. Manually add disclaimers to each topic before publishing.
  • C. Embed the web channel and then rely on channel-level settings to enforce content moderation.
  • D. Configure Power Platform DLP policies to restrict unauthorized data connectors.
  • E. Publish the agent and then enable Responsible AI filters individually for each channel.
Click to View Verified Solution & Explanation

Correct Option: A, D

Explanation:

  • ✅ Option A is correct: The technical requirements explicitly state, “Prompt modifications must be added to enforce tone, disclaimers, and refusal behavior,” and that “Disclaimers must be applied consistently across all generative responses. Manual edits to individual topics must be avoided.” This mandates a system-level configuration for consistency and compliance.
  • ✅ Option D is correct: The compliance and security requirements clearly state, “Power Platform DLP policies must be enforced to block unauthorized data flows.” This is a critical prerequisite for data protection before deployment.
  • ☒ Option B is incorrect: The technical requirements specifically state that “Manual edits to individual topics must be avoided” for applying disclaimers, promoting system-level consistency instead.
  • ☒ Option C is incorrect: Responsible AI content moderation and prompt modifications are typically configured at the copilot level, not solely reliant on channel-specific settings, to ensure consistent enforcement across all channels.
  • ☒ Option E is incorrect: Responsible AI filters and prompt modifications are foundational to the copilot’s behavior and should be configured and enabled at the copilot level *before* publishing to channels, not individually per channel after publishing.

Case Study: Fabrikam Inc.

Instructions

This is a case study. Case studies are not timed separately from other exam sections. You can use as much exam time as you would like to complete each case study. However, there might be additional case studies or other exam sections. Manage your time to ensure that you can complete all the exam sections in the time provided. Pay attention to the Exam Progress at the top of the screen so you have sufficient time to complete any exam sections that follow this case study.

To answer the case study questions, you will need to reference information that is provided in the case. Case studies and associated questions might contain exhibits or other resources that provide more information about the scenario described in the case. Information provided in an individual question does not apply to the other questions in the case study.

A Review Screen will appear at the end of this case study. From the Review Screen, you can review and change your answers before you move to the next exam section. After you leave this case study, you will NOT be able to return to it.

To start the case study –

To display the first question in this case study, select the “Next” button. To the left of the question, a menu provides links to information such as business requirements, the existing environment, and problem statements. Please read through all this information before answering any questions. When you are ready to answer a question, select the “Question” button to return to the question.

Background –

Fabrikam Inc. is a Canada-based manufacturer with a growing service organization that supports field technicians and internal operations teams. Fabrikam Inc. plans to launch a new internal agent solution named Operations Concierge to reduce time spent searching policy content, retrieving operational metrics, and executing routine transactions.

The agent will be used by three groups:

Service coordinators who triage incoming service requests

Field technicians who need guided procedures and parts availability

Operations managers who monitor KPIs and exceptions

The agent solution must work in real-world operational conditions. Users often ask questions mid-call with a customer or while coordinating parts shipments. The agents require quick, reliable outcomes. As a result, Fabrikam Inc. requires the solution to:

Provide grounded answers with traceability when it provides guidance.

Retrieve real-time metrics when users ask for operational status.

Execute authenticated updates when users initiate a flow (such as creating a parts request).

Fabrikam Inc. also expects the solution to be maintained by multiple makers and developers across the year. The company has experienced duplicated logic and inconsistent behavior across different agents. This project emphasizes reuse, governance, and maintainability across teams.

Current environment –

Fabrikam Inc. runs three Microsoft Power Platform environments for agent development and release: Dev, Test, and Prod.

The team plans to build the agent and validate it in Dev and Test, then promote to Prod by using a controlled release process that supports repeatable deployments.

Fabrikam Inc. already has two assets the team wants to reuse:

A partially completed Copilot Studio agent named Service Desk Agent, used by IT to create internal tickets and route requests

A Microsoft Foundry agent created by a central AI team that performs specialized summarization and classification for long-form text (for example, summarizing call transcripts into an incident narrative)

Fabrikam Inc. also has operational and knowledge data sources:

A curated policy library (internal SOPs, service warranty rules, escalation criteria, and standard operating procedures)

A set of indexed documents and procedures in an Azure AI Search service that supports vector search for the policy library

A Microsoft Fabric workspace that includes a semantic model used by operations leadership for reporting

Business requirements –

Fabrikam Inc. requires Operations Concierge to meet the following business requirements:

Traceability requirement: When the agent provides policy guidance or procedural recommendations, users must be able to see where the answer came from.

Metrics requirement: When users ask about service performance (backlog, SLA risk, parts shortages, dispatch delays), the solution must return up-to-date metrics in a structured format that operations managers can use in weekly reviews.

Transaction requirement: The solution must support authenticated updates initiated during conversations, including creating a parts request and updating a service case status.

In addition, Fabrikam Inc. wants to avoid duplicating common assets across agents:

The team must reuse the same set of escalation topics, MCP tool definitions, and a standard safety disclaimer across three different agents.

Only the platform engineering group as allowed to edit shared assets. However, all agent authors must be able to use them.

Technical requirements –

The Fabrikam Inc. solution architecture uses a multi-agent approach so that specialist responsibilities are isolated and can evolve independently.

The Operations Concierge (primary agent) must coordinate the following specialist capabilities:

Policy and procedure Q&A: Use an enterprise knowledge source that supports indexed retrieval across the curated policy library and service procedures.

Operational metrics: Delegate metric queries to a Fabric Data Agent that reads governed business data through the Fabric semantic model.

Authenticated updates: Use tools exposed by an existing internal Model Context Protocol (MCP) server that provides transactional operations for the service organization.

Specialized processing: Delegate summarization and classification requests to an existing Microsoft Foundry agent.

Fabrikam Inc. will onboard two MCP servers as tools:

PartsOps MCP server: exposes tools for parts availability checks and parts request creation. The server requires per-user authentication because actions must be traceable to the requesting user.

WarrantyRules MCP server: exposes a read-only tool for validating warranty coverage. The server uses an API key shared by the agent team.

Fabrikam Inc. has also defined a collaboration requirement with the existing Service Desk Agent:

The primary agent must delegate IT-specific requests to the existing Service Desk Agent rather than reimplement ticket creation logic.

Finally, Fabrikarn Inc. plans to support a partner integration:

For shipment tracking inquiries, Fabrikam Inc. will delegate to a partner-provided agent that is only available through a standardized agent-to-agent endpoint.

Issues and constraints –

During early testing, Fabrikam Inc. found three recurring problems:

Makers are copying and modifying the same components across agents, resulting in inconsistent disclaimers and duplicated tools.

Users can obtain a correct answer, but the response is not consistently traceable to a source when the agent uses knowledge.

The primary agent can route some requests, but specialist capabilities are not consistently delegated (for example, some metric questions are answered generatively instead of being routed to the Fabric Data Agent).

You are part of the engineering team responsible for correcting the design and configuration to meet the preceding requirements and constraints.

QUESTION 11 (Multi-Select)

Scenario: Fabrikam Inc.

You need to configure Operations Concierge so that prompt-driven summarization behavior aligns with Fabrikam Inc.’s architectural requirements.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

  • A. Configure Azure AI Search as the grounding source for summarization prompts.
  • B. Publish the agent to ensure the selected model is enforced for summarization.
  • C. Select a model from the Foundry model catalog in the custom prompt configuration.
  • D. Enable citations to control how summarization output is generated.
  • E. Create a reusable custom prompt template and apply it where summarization responses are generated.
Click to View Verified Solution & Explanation

Correct Option: C, E

Explanation:

To align prompt-driven summarization with the requirement to use the Microsoft Foundry agent:
✅ C: Select a model from the Foundry model catalog in the custom prompt configuration. This directly ensures that the specialized Foundry agent’s model, as specified in the technical requirements for summarization, is used instead of a default generative AI model.
✅ E: Create a reusable custom prompt template and apply it where summarization responses are generated. This allows defining the precise input and output structure for the Foundry agent, controlling the ‘prompt-driven summarization behavior’ and promoting reuse and maintainability across agents.

❌ A is incorrect: Azure AI Search is designated for policy Q&A, not for specialized summarization, which is delegated to the Foundry agent.
❌ B is incorrect: Publishing is a deployment action; it does not configure the summarization model or behavior.
❌ D is incorrect: Enabling citations is primarily for grounding answers from knowledge sources, not directly for controlling the summarization process of a specialized AI agent.

General Practice Questions

QUESTION 12

A company is building an agent in Copilot Studio.

The agent must meet the following requirements:

Responses must be grounded in approved internal content.

The agent must be able to retrieve information from configured data sources in a topic.

You need to configure the agent so that topic responses are grounded from custom data sources.

What should you configure?

  • A. Enable analytics to review which topics users trigger most often.
  • B. Add a custom prompt that tells the agent to answer only from company data.
  • C. Configure knowledge sources in a generative answers node.
  • D. Add SharePoint as a knowledge source only at the agent level.
  • E. Increase the response length limit to improve answer completeness.
Click to View Verified Solution & Explanation

Correct Option: C

Explanation:

✅ Option C (Correct)Reasoning:Configuring knowledge sources directly within a generative answers node is the correct method. This allows topic responses to be grounded in specific, configured custom data sources, directly fulfilling the requirements for retrieving information and grounding responses in approved internal content within a topic.❌ Why the other choices are incorrect:* Option A is incorrect: Enabling analytics helps monitor usage, not configure data grounding.* Option B is incorrect: A custom prompt guides behavior but doesn’t configure the underlying data sources or guarantee robust grounding from custom data sources as effectively as a generative answers node.* Option D is incorrect: While SharePoint is a knowledge source, the requirement is for topic-specific grounding from custom data sources. Configuring knowledge sources within a generative answers node provides this control, whether global or topic-specific.* Option E is incorrect: Increasing response length affects verbosity, not the grounding or retrieval from data sources.

Case Study: Blue Yonder Airlines

Instructions

This is a case study. Case studies are not timed separately from other exam sections. You can use as much exam time as you would like to complete each case study. However, there might be additional case studies or other exam sections. Manage your time to ensure that you can complete all the exam sections in the time provided. Pay attention to the Exam Progress at the top of the screen so you have sufficient time to complete any exam sections that follow this case study.

To answer the case study questions, you will need to reference information that is provided in the case. Case studies and associated questions might contain exhibits or other resources that provide more information about the scenario described in the case. Information provided in an individual question does not apply to the other questions in the case study.

A Review Screen will appear at the end of this case study. From the Review Screen, you can review and change your answers before you move to the next exam section. After you leave this case study, you will NOT be able to return to it.

To start the case study –

To display the first question in this case study, select the “Next” button. To the left of the question, a menu provides links to information such as business requirements, the existing environment, and problem statements. Please read through all this information before answering any questions. When you are ready to answer a question, select the “Question” button to return to the question.

Background –

Blue Yonder Airlines is a global carrier headquartered in Los Angeles, California, operating domestic and international flights. The company serves millions of passengers annually through its website, mobile app, and call centers. To improve customer service efficiency and reduce call center volume, Blue Yonder is deploying an AI agent in Microsoft Copilot Studio.

The agent will handle customer inquiries across multiple channels – web chat, mobile app, and Microsoft Teams (for internal support staff). It will answer questions, retrieve data from enterprise systems, and escalate to human agents when needed.

The project is led by a cross-function team:

Product manager: Defines requirements and success metrics.

Lead agent author: Designs topics, intents, and generative behavior.

Flow designers: Build agent flows and integrations.

IT/security and compliance: Oversees identity, data protection, and Responsible AI (RAI) compliance.

Current environment –

Channels –

Public website: Embedded web chat

Mobile app: In-app chatbot –

Microsoft Teams: Internal support agent access

Identity and access –

Customers: Anonymous access for general inquiries (e.g., flight status, baggage policy).

Authentication is required for personal data access (e.g., bookings, loyalty points).

Internal staff: Authenticate via Microsoft Entra ID.

Data sources –

Reservation and Ticketing System (internal): REST API, no prebuilt connector with custom enterprise database.

Flight Status and Weather APIs (external): REST APIs with API keys.

Customer Support Knowledge Base: SharePoint library with PDFs and policy documents.

Loyalty Program Data: Stored in Dynamics 365 and Dataverse.

Travel Advisory Content: Uses REST API with partner services.

Integration mechanisms –

Custom connectors must be used for internal APIs that lack prebuilt connectors.

HTTP request nodes may be used for lightweight external APIs.

Knowledge sources must be used for unstructured content.

Agent flows must be used to encapsulate reusable logic (e.g., rebooking).

Business requirements –

Omnichannel support –

Deploy the agent across web, mobile, and Teams with a consistent user experience. The Teams deployment must also support internal staff.

Self-service capabilities –

The agent must handle common inquiries such as:

Flight status –

Booking and rebooking –

Loyalty program questions –

Travel policies and baggage rules

Human escalation –

If the agent cannot resolve an issue or the user requests help, it must:

Escalate to a human agent.

Transfer the conversation transcript and relevant context.

Redact any sensitive personal data before escalation.

Knowledge integration –

The agent must use scalable methods for knowledge integration and must not rely on manually authored Q&A topics for each document.

Performance metrics –

First-contact resolution: +25%

Tier-1 call deflection: ≥20%

Response time: 90% of queries answered within 30 seconds

Accuracy: ≥95% for known FAQs –

CSAT: ≥85% for AI-handled interactions

Technical requirements –

Platform constraints –

No custom code is permitted; only Copilot Studio’s built-in tools may be used.

All backend logic must be implemented using agent flows.

Markdown must be used for formatting (e.g., bold, bullet points); HTML is not supported.

Authentication –

Sign-in is required for personal data access.

Anonymous access is allowed for general inquiries.

User identity must be used for data access; shared or builder credentials must not be used.

Compliance and security –

Power Platform DLP policies must be enforced to block unauthorized data flows.

Responsible AI content moderation filters must be enabled.

Prompt modifications must be added to enforce tone, disclaimers, and refusal behavior.

Disclaimers must be applied consistently across all generative responses. Manual edits to individual topics must be avoided.

Monitoring and maintenance –

All conversations and actions must be logged for auditing.

Weekly reviews of transcripts and metrics must be conducted.

Issues and constraints –

API rate limits: External APIs (e.g., flight status) have usage limits. Agent flows must handle retries and caching to avoid exceeding quotas.

Knowledge base limits: Copilot Studio has limits on the number and size of indexed documents. Large files must be split or summarized.

Generative answer risks: Generative responses must be constrained to avoid policy violations. Prompt modifications and filters must be used to enforce tone, safety, and compliance.

User input variability: Users phrase questions in diverse ways. Topics must include varied trigger phrases and fallback handling.

Authentication UX: The agent must clearly explain when sign-in is required and handle transitions smoothly across channels.

Problem statement –

Blue Yonder Airlines must deploy a secure, scalable, and policy-compliant AI agent using Microsoft Copilot Studio. The agent must deliver accurate, helpful, and safe responses across multiple channels, integrate with enterprise systems, and support both anonymous and authenticated users. It must adhere to strict data protection and Responsible AI standards while improving customer service efficiency and satisfaction.

QUESTION 13 (Multi-Select)

Scenario: Blue Yonder Airlines

You need to ensure that every AI-generated response from the agent in Copilot Studio includes a disclaimer that complies with the company’s security and governance policies.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

  • A. Add a greeting message that includes the disclaimer.
  • B. Add a prompt modification in the generative answers node settings.
  • C. Create a disclaimer topic that always runs first.
  • D. Disable generative answers and use only pre-authored responses.
  • E. Edit every topic's first message to include the disclaimer.
Click to View Verified Solution & Explanation

Correct Option: A, B

Explanation:

To ensure every AI-generated response includes a disclaimer consistently and without manual edits to individual topics, two key actions are required based on the case study:

✅ Option B: Add a prompt modification in the generative answers node settings.This refers to configuring the ‘Instructions for your copilot’ (system message) in the Generative AI section. This global setting instructs the underlying Large Language Model (LLM) to include the specified disclaimer in all its generated responses, covering conversational boosting and generative answer nodes within topics. This directly addresses the requirement for consistent application across ‘all generative responses’ and avoids manual topic edits.

✅ Option A: Add a greeting message that includes the disclaimer.While not strictly an LLM-generated response, the greeting message is the very first output from the AI agent. To comply with a policy requiring the disclaimer on ‘every’ bot output, including the initial interaction, the greeting message must also contain it. This is a single, system-level configuration, complementing the generative AI disclaimer without violating the ‘manual edits to individual topics must be avoided’ constraint.

❌ Why the other choices are incorrect:

  • Option C is incorrect: Creating a disclaimer topic that always runs first only ensures the disclaimer appears at the start, not with every subsequent AI-generated response.
  • Option D is incorrect: Disabling generative answers contradicts the fundamental purpose of deploying an AI agent with scalable knowledge integration as outlined in the case study.
  • Option E is incorrect: Editing every topic’s first message to include the disclaimer explicitly violates the technical requirement that ‘manual edits to individual topics must be avoided’.

General Practice Questions

QUESTION 14 (Multi-Select)

An agent calls a flow that intermittently produces unexpected results during execution.

The agent behaves inconsistently.

You need to investigate agent flow executions to diagnose the issue.

Which two actions should you use? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

  • A. Inspect failed run details.
  • B. Update the flow trigger definition.
  • C. Check the Error column in the Activity tab.
  • D. Review flow analytics summary.
  • E. Review flow run history.
  • F. Increase the connector timeout.
Click to View Verified Solution & Explanation

Correct Option: A,E

Explanation:

To diagnose intermittent unexpected results in flow executions called by an agent, two key actions are required. First, you need to review the flow run history (E) to identify specific executions that produced inconsistent or unexpected outputs over time. This allows you to pinpoint when the issues occurred. Second, for each identified problematic run, you must inspect its details (A). This involves examining inputs, outputs, and the step-by-step execution to understand where the flow deviated or why the results were incorrect. These two actions are fundamental for pinpointing and understanding the root cause of intermittent flow execution issues.

QUESTION 15

A team is standardizing ALM for agents in Copilot Studio.

The team requires a custom solution that includes agents. The solution must support ALM scenarios, such as managing and transporting agent assets across environments and pipeline deployments.

You need to create an ALM-ready custom solution in Copilot Studio.

What should you do?

  • A. Publish the agent to a channel and use that channel configuration as the ALM container.
  • B. Create a new custom solution from the Solutions area.
  • C. Export the custom solution as a managed solution and import it into production.
  • D. Export the agent directly and then import it into another environment.
Click to View Verified Solution & Explanation

Correct Option: B

Explanation:

✅ Option B (Correct)

Reasoning: In Copilot Studio, custom solutions are the cornerstone for implementing robust Application Lifecycle Management (ALM). By creating a new custom solution, you can package all agent assets, including the agent itself, topics, and other components. This enables easy export, import, and management across different environments, supporting pipeline deployments.

❌ Why the other choices are incorrect:

  • Option A is incorrect: Publishing an agent to a channel makes it available to users but does not serve as an ALM container for transporting agent assets. ALM involves managing the development and deployment lifecycle, not just user access.
  • Option C is incorrect: Exporting as a managed solution and importing into production describes a subsequent deployment step within ALM, not the initial action to create an ALM-ready solution. You must first create the solution.
  • Option D is incorrect: Directly exporting and importing an agent without a solution is a less structured approach. Solutions are designed to group related components, manage dependencies, and streamline complex ALM scenarios, which is crucial for standardization and pipeline deployments.

QUESTION 16

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear on the review screen.

An agent uses a flow that calls an external service which can occasionally fail or time out.

When a failure occurs, the agent must meet the following requirements:

Must not terminate silently.

Must send a notification containing the error details.

You need to configure the agent flow so that failures are handled in a controlled and predictable way.

Solution: Retry the failing action without handling failure.

Does the solution meet the goal?

  • A. Yes
  • B. No
Click to View Verified Solution & Explanation

Correct Option: B

Explanation:

✅ Option B (Correct)

Reasoning: Retrying an action without explicit failure handling fails to meet the specified requirements. If retries are exhausted and the action still fails, the agent could still terminate silently. Crucially, without dedicated error handling, there is no mechanism to capture error details and send a notification, directly violating the requirement to send a notification containing error details. Controlled and predictable failure handling necessitates specific error detection and response mechanisms, not just retries.

❌ Why the other choices are incorrect:

  • Option A is incorrect: The proposed solution does not fulfill the stated goals. Merely retrying without explicit failure handling does not guarantee non-silent termination upon repeated failure, nor does it provide a means to extract and send error details as a notification.

QUESTION 17 [DRAG_DROP]

A team wants to automate solution deployment between environments. Deployments must follow a controlled, repeatable process.

The team needs to implement a pipeline-based deployment process that enforces the correct dependency order.

You need to implement a deployment pipeline and determine the correct sequence of actions.

In which order should you perform the actions? To answer, move all actions from the list of actions to the answer area and arrange them in the correct order.

Question Interface:

Question Interface
✔ Correct Answer / Solution View:

Solution Canvas

Click to View Verified Solution & Explanation
Explanation:

Correct Sequence:

The process of implementing and using Power Platform pipelines follows a logical, sequential order from initial setup to post-deployment verification.

✅ Step 1: Enable pipelines for the tenant.
Reasoning: This is the foundational, one-time administrative action. Before any pipelines can be configured or used, the feature must be activated at the tenant level. This is done by installing the Power Platform Pipelines application in a dedicated host environment.

✅ Step 2: Assign environments to pipeline stages.
Reasoning: Once the feature is enabled, the pipeline’s structure must be defined. This involves creating a pipeline record and configuring its stages (e.g., Development, Test, Production) by linking them to the corresponding Power Platform environments. This creates the deployment path.

✅ Step 3: Trigger a pipeline run.
Reasoning: With the pipeline configured, it is ready to be used. A developer or maker initiates the deployment of a solution from a source environment. Triggering the run executes the automated process of exporting the solution and importing it into the next stage’s environment.

✅ Step 4: Review deployment results.
Reasoning: After the pipeline completes its run, the final step is to verify the outcome. This involves checking the deployment history for a success or failure status, reviewing logs if necessary, and performing validation in the target environment to ensure the solution was deployed correctly.

Need the Full Exam Simulator?

Practice the complete question bank in a realistic, timed environment with advanced tracking.

Access Full CertoMetrics Engine →

Leave a Comment

Your email address will not be published. Required fields are marked *

Scroll to Top