Microsoft AB-100 Practice Test 80

Question 790

A deployed agent logs sensitive support transcripts to a development workspace readable by all makers. Which deployment defect must be fixed?

Continue logging raw transcripts because only internal users see the workspace.
Base64-encode transcripts and call them confidential.
Disable all monitoring permanently rather than separating secure telemetry.
Bind production telemetry to a controlled destination with role-based access, minimization and retention policy.

Explanation

Correct Answer

Analytics and traces are part of the operational data surface and need environment-specific protection.

Incorrect Answers

Internal visibility does not authorize every maker to view customer information.

Encoding does not prevent anyone with access from decoding the text.

Operations still need protected diagnostics for failures and audit events.

Question 791

A Copilot Studio parent agent invokes a specialized child agent that is not installed in the destination environment. What should promotion verify?

Deploy and bind the approved child-agent dependency and test the parent-to-child handoff in the target environment.
Tell the parent to invent child-agent results when the dependency is missing.
Assume the child exists because it was available in the developer environment.
Run only the parent agent’s welcome topic as the release smoke test.

Explanation

Correct Answer

Cross-agent references are real runtime dependencies that must be packaged and authorized.

Incorrect Answers

Fabricated outputs cannot satisfy the specialized service and may mislead customers.

Development configuration is not proof of target production state.

Welcome text does not exercise cross-agent routing or action boundaries.

Question 792

A release contains a Copilot Studio payment action but its connection reference points to the developer’s personal account. What should production import do?

Give every business user the developer’s account to standardize results.
Rebind to a managed approved production connection with verified role, scope and audit attribution.
Use the personal account because it passed the unit tests.
Put the account password into the agent prompt for other users.

Explanation

Correct Answer

Personal development credentials are not an appropriate standing identity for operational financial writes.

Incorrect Answers

Shared identity destroys individual accountability and least privilege.

Test success does not establish production credential governance or business authorization.

Prompt exposure is an insecure secret distribution mechanism.

Question 793

A solution references `WAREHOUSE_API_BASE_URL`, but production import leaves the variable empty. The agent starts anyway and guesses an endpoint. What deployment check is required?

Reuse a generic public API endpoint as a fallback.
Count successful agent initialization as proof the business connection works.
Fail promotion until required environment variables are populated and validated against the intended API.
Let the agent create a likely URL from the company name.

Explanation

Correct Answer

A missing endpoint is a configuration error, not something the model should infer.

Incorrect Answers

Unapproved destinations cannot satisfy the private warehouse integration contract.

Startup does not exercise the required downstream API reachability.

An inferred endpoint can leak data or call the wrong environment.

Question 794

A pipeline exports an agent solution whose environment variable contains a raw CRM API secret. Developers share the package broadly. How should the release be corrected?

Keep the secret because the package lives in an internal drive.
Encode the secret in Base64 before exporting.
Print the secret into deployment logs so operators can verify it.
Store secrets in an approved protected secret/connection mechanism and reference them without embedding values in distributed artifacts.

Explanation

Correct Answer

Environment configuration should identify protected credentials without copying them into portable solution packages.

Incorrect Answers

Broad file access can still expose reusable production credentials.

Reversible encoding does not protect secret material from readers.

Logs would become another unauthorized copy of a sensitive credential.

Question 795

An agent’s development connector is copied to production, but its query still targets staging customer records. What smoke test is most important?

Use a tagged non-sensitive fixture to verify the configured production endpoint and response identity before live use.
Check only that the connector’s display name says “Production”.
Use a live customer payment to test the endpoint quickly.
Ask the agent to describe where it thinks the connector points.

Explanation

Correct Answer

Connection references may resolve successfully while directing actions to the wrong data environment.

Incorrect Answers

Display labels cannot prove which actual URL and tenant are bound.

Unverified routing should not be tested with an irreversible financial transaction.

Model language is not independent proof of the connection’s network destination.

Question 796

A Copilot Studio solution stores the same SharePoint site ID in both test and production although the document libraries differ. What should configuration governance do?

Index both libraries under an unrestricted connector account to avoid misrouting.
Assign environment-specific site/library IDs and validate source access plus permissions after import.
Use the test library as production grounding because the schemas match.
Switch library identity dynamically based on what the model guesses from the query.

Explanation

Correct Answer

Resource identifiers are binding inputs and must match the intended environment and data policy.

Incorrect Answers

Combining sources may expose confidential or draft content across environments.

Test documents may be stale or unauthorized for live operational answers.

An LLM cannot reliably authorize or select a protected content endpoint.

Question 797

An agent’s managed connector identity is rotated. The new identity can authenticate but lacks access to a specific permitted CRM table. What should the rollout verify?

Leave both credentials active indefinitely as a fallback.
Assume the model will choose the correct account at runtime.
Test the new principal’s required least-privilege permissions and action results before retiring the old credential.
Grant the new principal tenant-wide administrator permission.

Explanation

Correct Answer

Authentication success does not establish that every business resource action is authorized.

Incorrect Answers

Unbounded secret overlap increases attack surface and complicates access reviews.

Identity binding belongs to authenticated connector configuration rather than generated reasoning.

Broad privileges bypass the approved resource scope instead of restoring the required table grant.

Question 798

A solution imported into the EU tenant still uses a connector referencing the US test tenant. The agent’s replies appear valid but include US customer data. What control failed?

Only the style of the agent’s response.
The prompt’s locale selection.
The number of actions configured in the solution.
Target-environment tenant binding and authorization verification for the connection reference.

Explanation

Correct Answer

Plausible text can conceal that source retrieval crossed a tenant boundary.

Incorrect Answers

Polished output does not prove lawful tenant identity or region.

Language preference cannot substitute for the connector’s actual authenticated destination.

Action count does not establish endpoint isolation or data access scope.

Question 799

A new connector version changes `customerId` to `accountKey`, and the previous agent solution must be restored. What ALM plan prevents incompatible rollback?

Keep versioned action schemas and compatible connection-reference bindings for both approved release states.
Restore only the old prompt while retaining a breaking new connector schema.
Use a model instruction to translate any unknown action name.
Delete the old release manifest once the new one is installed.

Explanation

Correct Answer

Rollback must restore the whole integration contract, not just prompt content.

Incorrect Answers

The old action may fail because it emits obsolete field names.

Generated guessing cannot guarantee compatibility with required API fields.

Without provenance it becomes difficult to rebuild a working compatible state.

Question 800

A team builds a Foundry agent that can answer manuals and initiate work orders. The model test passes, but no tool-authorization test exists. What is the appropriate release action?

Disable trace collection so test failures do not block launch.
Hold production promotion until end-to-end agent tool permission and workflow tests pass.
Promote because a Foundry model deployment already succeeded.
Grant broad work-order permissions to remove the testing gap.

Explanation

Correct Answer

Model language quality is only one control; business action safety is a distinct release requirement.

Incorrect Answers

Hiding diagnostics cannot turn an untested workflow into an acceptable release.

Model deployment does not establish correct tool use or authorized work orders.

Overprivilege increases risk and does not validate caller scope.

Agentic AI Business Solutions Architect (AB-100) Practice Tests

Microsoft AB-100 Practice Test 78 - 10 Questions (Last Reviewed 24-Oct-2026)
Microsoft AB-100 Practice Test 79 - 10 Questions (Last Reviewed 23-Oct-2026)
Microsoft AB-100 Practice Test 80 - 10 Questions (Last Reviewed 22-Oct-2026)
Microsoft AB-100 Practice Test 81 - 10 Questions (Last Reviewed 21-Oct-2026)
Microsoft AB-100 Practice Test 82 - 10 Questions (Last Reviewed 20-Oct-2026)

Pass Your Microsoft AB-100 Exam Easy!

Question 790

Explanation

Correct Answer

Incorrect Answers

Question 791

Explanation

Correct Answer

Incorrect Answers

Question 792

Explanation

Correct Answer

Incorrect Answers

Question 793

Explanation

Correct Answer

Incorrect Answers

Question 794

Explanation

Correct Answer

Incorrect Answers

Question 795

Explanation

Correct Answer

Incorrect Answers

Question 796

Explanation

Correct Answer

Incorrect Answers

Question 797

Explanation

Correct Answer

Incorrect Answers

Question 798

Explanation

Correct Answer

Incorrect Answers

Question 799

Explanation

Correct Answer

Incorrect Answers

Question 800

Explanation

Correct Answer

Incorrect Answers

Agentic AI Business Solutions Architect (AB-100) Practice Tests