Microsoft AB-100 Practice Test 21

Question 200

A company extends Microsoft 365 Copilot with a service-management agent that handles confidential incident reports. Select TWO requirements for safe extensibility.

Authorize incident retrieval by matching the user’s department name to keywords in the incident title.
Apply incident-level retrieval permissions and audit each tool access.
Give the extension unrestricted tenant administrator access because it is internal.
Copy all incident attachments into every chat prompt for better completeness.
Use an approved extension path integrated into Microsoft 365 user context.

Explanation

Correct Answers

Authorization must be enforced at source and tool boundaries for each request.

Supported integration lets the agent operate inside intended collaboration surfaces.

Incorrect Answers

A matching title is not an identity or incident-level entitlement; the backend must check the authenticated user and each record before retrieval.

Global privilege can leak unrelated incident evidence.

Mass copying attachments violates data-minimization controls.

Question 201

A Copilot Studio agent has a custom knowledge action with no timeout policy. When the data service hangs, the user session never finishes. Which design repair is appropriate?

Disable timeout forever to guarantee eventual success.
Return a cached successful knowledge result for every timeout without checking its revision or informing the caller that the live request failed.
Reduce logging for the knowledge action rather than enforcing a deadline on the external call.
Set a bounded timeout with clear fallback and observable failure signals.

Explanation

Correct Answer

Extensible tools need latency budgets and a safe failure contract to protect user experience.

Incorrect Answers

An indefinite wait is not a reliable service guarantee.

A cached answer may be useful only when its age and permitted fallback are verified; silent reuse misrepresents current authoritative evidence.

Log volume is not a timeout control. The hung dependency needs a bounded execution window and an observable failure state.

Question 202

An MCP tool is replaced with a new version that changes its input parameter from accountId to customerKey. What must be done before release?

Leave the old schema deployed and ignore 400 responses.
Assume the model will infer parameter renaming at runtime.
Update and regression-test the agent tool schema and all dependent prompt/flow calls.
Grant wider permissions so invalid parameter requests succeed.

Explanation

Correct Answer

Tool contracts are versioned integration dependencies; incompatibility can break valid user requests.

Incorrect Answers

Repeated request failure needs correction rather than concealment.

Inference cannot guarantee schema compliance.

Authorization cannot repair input-contract mismatches.

Question 203

A legacy application does not support a published API, so a team considers Computer Use for order entry. Which release decision is appropriate?

Deploy without testing layout changes because the model understands screens.
Require a supported runtime, scoped UI access, human approval for high-impact actions and verified post-submit results.
Store a shared operator session for unattended order entry without validating each user’s permitted transaction scope.
Assume any browser automation is equivalent to a transactional API with exactly-once semantics.

Explanation

Correct Answer

Computer Use has UI variability and permission risks that require explicit operational controls.

Incorrect Answers

Changing interfaces can break workflows and must be tested.

A long-lived shared session loses per-actor authorization and attribution; computer-use actions still need an approved identity boundary.

Visual clicks can have uncertain state and repeated effects.

Question 204

A voice-enabled service agent uses enhanced reasoning but incorrectly distinguishes two similar product names. What should be improved?

Validate speech transcription and entity resolution against the product catalog before transactional tool calls.
Add a longer reasoning prompt while keeping the same unvalidated speech transcript and product-ID mapping.
Disable user confirmation for products with similar names.
Trust reasoning mode as an independent entity-identity check.

Explanation

Correct Answer

Modality and entity errors must be addressed with evidence and confirmation on critical values.

Incorrect Answers

More reasoning cannot ensure two similar product names resolve to the intended catalog record before a side-effecting tool call.

Removing confirmation increases misorder risk.

Reasoning does not replace catalog validation.

Question 205

A Teams agent uses a SharePoint project site with several sensitivity labels. What is the correct response when a guest asks for a restricted design document?

Provide the document because the guest can join the Teams meeting.
Deny retrieval unless the guest has the necessary source permissions and label policy rights.
Have the model assign itself a higher sensitivity clearance.
Paraphrase confidential passages without a citation to avoid detection.

Explanation

Correct Answer

Collaboration presence does not override resource classification or entitlement checks.

Incorrect Answers

Meeting participation is not document access.

Models cannot grant security clearance.

Paraphrasing is still information disclosure.

Question 206

A Dynamics 365 Supply Chain team wants an agent to suggest purchase orders based on inventory while Finance remains the system for spending approval. What orchestration is appropriate?

Commit every suggested order and ask Finance to approve the next day.
Use inventory insight to propose orders and invoke a governed Finance approval workflow before commitment.
Let the inventory model alter vendor payment details automatically.
Infer current stock from chat history without checking the supply chain record.

Explanation

Correct Answer

Cross-app orchestration must respect authoritative inventory and finance transaction boundaries.

Incorrect Answers

Approval after a committed order is not approval before spending.

Payment-account changes are outside the scoped inventory task.

Unverified conversation history is not inventory evidence.

Question 207

Customer service Copilot recommends a knowledge article, but the case is already escalated to a specialized fraud team. What should the orchestration preserve?

Case assignment and escalation state when making an assistive recommendation, without auto-closing the case.
Treat any matched article as proof the fraud review finished.
Replace restricted case evidence with generated paragraphs.
Reset the case owner to a generic queue on every model reply.

Explanation

Correct Answer

An assistive recommendation should not override an independently governed case lifecycle.

Incorrect Answers

Article relevance does not establish investigation completion.

Generated text cannot replace evidence in the case record.

Uncontrolled reassignment disrupts ownership.

Question 208

A document reviewer in Microsoft 365 wants a prebuilt agent to summarize approved project notes. Which choice minimizes unnecessary custom engineering?

Evaluate an authorized Microsoft 365 agent capable of reading those project sources before building a separate service.
Provide unrestricted tenant SharePoint access through one admin credential.
Create a custom app before verifying supported agents or permission boundaries.
Train a new foundation model solely to summarize meeting notes.

Explanation

Correct Answer

A prebuilt collaboration agent can fit well when its source access and features meet the documented need.

Incorrect Answers

Global retrieval rights exceed user scope.

Build choices should follow verified capability gaps.

New model training is unnecessary for routine grounded summarization.

Question 209

A sales representative uses Copilot for Sales while a support specialist uses Copilot for Service. What configuration principle protects different workloads?

Remove CRM role checks whenever the user launches a Copilot pane.
Configure role-appropriate integrations and source permissions for each workflow rather than sharing blanket access.
Use one common privileged CRM connector for Sales and Service agents, distinguishing roles only through prompt wording.
Grant both teams global permissions across service and sales data.

Explanation

Correct Answer

Sales and service have different data needs and authorization boundaries despite related customer records.

Incorrect Answers

Copilot UI access is not unlimited CRM authorization.

Instructions do not enforce source entitlements; each workflow must bind retrieval and action scopes to its actual staff role.

Broad access increases confidentiality risk.

Question 210

A Power Platform team reviews AI hub features to automate invoice classification. What decision should precede selecting a prebuilt capability?

Ignore document quality and data location because all tools are interchangeable.
Assume every AI hub feature can execute financial approvals.
Select the document-classification feature with the highest promotional demo score without checking actual input formats and invoice-field requirements.
Map the business task, input modality, performance needs and supported data integration to available AI features.

Explanation

Correct Answer

Capability fit and service boundaries matter more than branding or convenience.

Incorrect Answers

Modalities and data rules affect technical feasibility.

Classification does not confer transaction authority.

A general demo result does not prove the feature handles the needed modality, accounting fields, acceptable errors or integration contract.

Agentic AI Business Solutions Architect (AB-100) Practice Tests

Microsoft AB-100 Practice Test 19 - 10 Questions (Last Reviewed 26-Oct-2026)
Microsoft AB-100 Practice Test 20 - 10 Questions (Last Reviewed 25-Oct-2026)
Microsoft AB-100 Practice Test 21 - 10 Questions (Last Reviewed 24-Oct-2026)
Microsoft AB-100 Practice Test 22 - 10 Questions (Last Reviewed 23-Oct-2026)
Microsoft AB-100 Practice Test 23 - 10 Questions (Last Reviewed 22-Oct-2026)

Pass Your Microsoft AB-100 Exam Easy!

Question 200

Explanation

Correct Answers

Incorrect Answers

Question 201

Explanation

Correct Answer

Incorrect Answers

Question 202

Explanation

Correct Answer

Incorrect Answers

Question 203

Explanation

Correct Answer

Incorrect Answers

Question 204

Explanation

Correct Answer

Incorrect Answers

Question 205

Explanation

Correct Answer

Incorrect Answers

Question 206

Explanation

Correct Answer

Incorrect Answers

Question 207

Explanation

Correct Answer

Incorrect Answers

Question 208

Explanation

Correct Answer

Incorrect Answers

Question 209

Explanation

Correct Answer

Incorrect Answers

Question 210

Explanation

Correct Answer

Incorrect Answers

Agentic AI Business Solutions Architect (AB-100) Practice Tests