Microsoft AB-100 Practice Test 44

Question 430

A tenant-aware knowledge API filters the first page correctly, but a continuation token issued under a service identity returns later pages from all tenants. Which control closes the gap?

Filter only the first page because later pages are unlikely to contain the most relevant documents.
Ask the agent to stop after the first page and keep the privileged continuation endpoint available.
Treat a signed page token as permission for every tenant regardless of the caller.
Bind the continuation token to the original user, tenant and authorization scope and recheck that scope for each page.

Explanation

Correct Answer

Security trimming must persist across pagination so follow-on requests cannot widen a user’s entitlement.

Incorrect Answers

Lower relevance does not remove confidentiality obligations for later retrieved pages.

Client instructions do not repair a service endpoint that can be called directly with excessive rights.

A token without caller and scope binding becomes a cross-tenant data access bypass.

Question 431

Two employees ask an agent the same question. The first is permitted to view payroll reports; the second is not. The retrieval cache currently keys only by query text. What should the architect do?

Include principal and permission scope in the cache boundary and invalidate entries when entitlements change.
Serve the first cached result to both users and rely on different summaries for confidentiality.
Replace the payroll employee’s query with a generic title to make the cached document less sensitive.
Grant the non-payroll employee temporary administrator rights whenever a matching cache entry exists.

Explanation

Correct Answer

Identical words do not imply identical authorization; a shared query-only cache can leak privileged source passages.

Incorrect Answers

A generated summary can reveal restricted content even when the browser masks some passage text.

Changing the cache label does not constrain which source records the next caller is allowed to read.

A cache hit is not a delegated authorization and must not increase the caller’s privileges.

Question 432

A policy portal grants a service team access to a SharePoint folder, but one embedded investigation file has unique restricted permissions. The agent currently retrieves all children by parent-folder access alone. What is required?

Ask the model to decide from the investigation’s severity whether the requester deserves access.
Evaluate each document’s effective permissions, including unique file-level restrictions, before retrieval or citation.
Ignore the child file’s access list because the folder is visible to the requester.
Retrieve the restricted file to the model but omit its URL from the final citation list.

Explanation

Correct Answer

Folder membership may not confer access to an individually secured child item with broken inheritance.

Incorrect Answers

Classification severity does not create a legitimate permission grant for the user.

Unique item permissions can narrow an inherited grant, and the file would remain unauthorized.

Removing the visible citation does not undo unauthorized access to the investigation content.

Question 433

A compliance agent cites “Contract Policy 7.2” but the citation points to a root folder rather than the actual signed clause. Auditors cannot recreate the conclusion. What should the retrieval system attach?

The agent’s generated explanation without an independently locatable policy passage.
A citation identifier randomly regenerated with each chat response.
A stable source document version and clause or passage locator that resolves to the cited text.
A link to the policy folder because all current and obsolete revisions are stored there.

Explanation

Correct Answer

Specific provenance permits reviewers to verify the governing wording and source revision, not merely locate a folder.

Incorrect Answers

Fluent generated reasoning cannot substitute for reproducible source evidence in a compliance decision.

Unstable references prevent an auditor from verifying exactly what evidence supported the earlier conclusion.

A folder URL does not establish which revision supplied the clause or whether it was binding.

Question 434

An agent reports on-time delivery rate after excluding weather cancellations. A reviewer needs to reproduce the percentage. What must be recorded?

The formatted percentage alone, because a number is sufficient evidence of its own accuracy.
Only the chart color and title used in the report.
The name of the language model without any reference to the underlying shipments.
The source shipment snapshot, cancellation rule, filtering version, numerator and denominator for the published rate.

Explanation

Correct Answer

A derived KPI is verifiable only when its input population and transformation are traceable.

Incorrect Answers

A displayed rate does not reveal the excluded shipments or how the eligible delivery population was counted.

Presentation metadata cannot reproduce a filtering decision or the shipment counts in the calculation.

The model identity cannot establish which source records and business rule produced the reported rate.

Question 435

A benefits agent finds an approved policy clause and a newer marketing FAQ that paraphrases it incorrectly. Both are indexed. Which evidence should control a binding entitlement answer?

The approved policy clause and effective revision, with the contradictory FAQ flagged for correction.
The FAQ because its upload date is more recent than the policy approval date.
An average of the entitlement amounts found in both sources.
The snippet with the highest semantic similarity score regardless of document authority.

Explanation

Correct Answer

The governing source and its effective date determine entitlement; secondary paraphrases cannot silently override it.

Incorrect Answers

File recency alone cannot establish authority over signed policy conditions.

Averaging inconsistent contract terms creates an unsupported benefit amount.

Textual match quality and legal publication authority are different requirements for a binding answer.

Question 436

A supervisor edits an AI-generated incident summary before regulatory submission. The original agent answer cites three log events; the edited version drops one event. How should the audit record reflect this?

Tell the model to claim that all three events remain cited without checking the final document.
Retain the model output, cited event IDs, reviewer identity, the edited version and explicit change history.
Replace the model’s initial summary with the edit and delete all earlier references.
Keep only the supervisor’s chat nickname without linking it to an authenticated reviewer identity.

Explanation

Correct Answer

Versioned provenance distinguishes the machine evidence from what the supervisor actually approved and submitted.

Incorrect Answers

An assertion cannot establish citation parity when the published version intentionally excludes a source event.

Erasing history conceals which source event was removed and blocks reconstruction of the review decision.

An informal display name is insufficient for regulated change attribution and signed review.

Question 437

Finance and Sales both claim authority to change the customer credit limit in a shared data product. Their agents submit incompatible updates on the same day. Which governance decision is required?

Let both teams create parallel authoritative limits with no reconciliation.
Raise the model temperature so the conflicting systems choose the same number more often.
Name an accountable field owner and establish an approved change and dispute-escalation workflow.
Accept the update from the agent that completes its write first.

Explanation

Correct Answer

A clearly assigned authority prevents conflicting agents from silently overwriting a regulated credit value.

Incorrect Answers

Competing values make downstream financing and order approval decisions inconsistent.

Generation settings cannot settle business authority over who may approve a credit-limit change.

Race timing is not legitimate ownership or credit-policy approval for the shared field.

Question 438

A product-returns agent discovers a disputed mapping between discontinued and replacement products. The customer-service steward and catalog owner disagree. Which TWO controls preserve a defensible resolution? (Select TWO.)

Remove all source mapping history when the selected replacement product changes.
Record a named catalog owner with final authority over the product identity crosswalk.
Route contested mappings through a documented stewardship escalation with approval and version history.
Let the returns agent automatically select whichever candidate has the highest embedding similarity.
Allow each department to maintain an incompatible mapping without effective-date coordination.

Explanation

Correct Answers

The master-data owner must be explicit so downstream agent mappings do not depend on whichever suggestion was last.

An auditable escalation resolves conflicting evidence without letting an agent invent master-data authority.

Incorrect Answers

Deleting provenance blocks reconstruction of prior refunds and the reason for a catalog correction.

Vector proximity is not ownership or evidence of which replacement SKU inherits the original warranty.

Divergent production mappings would produce inconsistent eligibility and refund results for the same returned item.

Question 439

A customer profile steward marks one proposed name correction as “rejected: legal name verified.” An agent later finds a third-party directory with the alternate spelling. What happens next?

Respect the active steward decision and open a new evidence-backed review rather than automatically rewriting the legal name.
Overwrite the legal name immediately because the directory search result is more recent.
Disable the steward-rejection check for all future name changes to avoid repeated escalations.
Write the alternate name into every system and ask the steward to reverse it if incorrect.

Explanation

Correct Answer

A newer external observation does not by itself supersede a verified identity decision in the authoritative customer master.

Incorrect Answers

External timestamp recency cannot establish authority over a legally verified master-data field.

Removing the gate allows the same unauthorized loop to affect unrelated identity records.

Post-hoc correction risks spreading the unapproved identity value before a responsible owner validates the evidence.

Question 440

A property insurer calculates payout caps from a signed schedule, but photographs of roof damage may need interpretation. The agent can suggest severity, not set payout policy. Which process boundary is correct?

Ask the agent to determine both the policy wording and approval signoff from the photograph alone.
Use the agent for evidence interpretation and uncertainty notes, then apply fixed policy caps and authenticated adjuster review.
Let a high image-confidence score override the scheduled payout maximum.
Use the payout cap as a substitute for inspecting whether roof damage occurred.

Explanation

Correct Answer

Image reasoning can assist severity assessment but cannot authorize a payment or change an enforceable contract limit.

Incorrect Answers

An image cannot prove signed contract terms or which authorized adjuster has approved the claim.

Visual confidence does not create contractual authority or establish a different legally binding cap.

A policy limit does not determine if the claimed physical loss is supported by evidence.

Agentic AI Business Solutions Architect (AB-100) Practice Tests

Microsoft AB-100 Practice Test 42 - 10 Questions (Last Reviewed 03-Oct-2026)
Microsoft AB-100 Practice Test 43 - 10 Questions (Last Reviewed 02-Oct-2026)
Microsoft AB-100 Practice Test 44 - 10 Questions (Last Reviewed 01-Oct-2026)
Microsoft AB-100 Practice Test 45 - 10 Questions (Last Reviewed 30-Sep-2026)
Microsoft AB-100 Practice Test 46 - 10 Questions (Last Reviewed 29-Sep-2026)

Pass Your Microsoft AB-100 Exam Easy!

Question 430

Explanation

Correct Answer

Incorrect Answers

Question 431

Explanation

Correct Answer

Incorrect Answers

Question 432

Explanation

Correct Answer

Incorrect Answers

Question 433

Explanation

Correct Answer

Incorrect Answers

Question 434

Explanation

Correct Answer

Incorrect Answers

Question 435

Explanation

Correct Answer

Incorrect Answers

Question 436

Explanation

Correct Answer

Incorrect Answers

Question 437

Explanation

Correct Answer

Incorrect Answers

Question 438

Explanation

Correct Answers

Incorrect Answers

Question 439

Explanation

Correct Answer

Incorrect Answers

Question 440

Explanation

Correct Answer

Incorrect Answers

Agentic AI Business Solutions Architect (AB-100) Practice Tests