Microsoft AB-100 Practice Test 84

Question 830

A new agent build binds to a payment processor. What production smoke test is appropriate before enabling real customer transactions?

Create a real $1,000 payment and refund it later.
Assume the connection works because its credential field is populated.
Ask the model to name the processor from its prompt.
Exercise a processor-supported non-mutating health/status or dedicated sandbox transaction path with verified endpoint identity.

Explanation

Correct Answer

Connectivity checks should not risk an unauthorized real financial posting.

Incorrect Answers

An avoidable live charge is not a safe verification prerequisite.

Secret presence does not prove network reachability or permitted actions.

Generated text cannot validate the bound endpoint and transaction contract.

Question 831

A policy agent update changes source chunk IDs; new answers cite links that return 404. The old prompt relied on the prior index. What release recovery is sound?

Restore a compatible prompt/index pair or repair the migration and retest complete citation resolution.
Roll back only the model temperature setting.
Leave broken citation links because answers look plausible.
Generate replacement URLs from document titles.

Explanation

Correct Answer

Grounded output depends on consistent retrieval identifiers as well as model text.

Incorrect Answers

Generation temperature cannot recover missing document links or preserve citation identity across migrations.

Unverifiable policy sources fail audit and user-trust requirements.

Plausible links may not point to the actual approved revision.

Question 832

A new release adds a customer-record lookup connector. A legitimate agent request works. What smoke test is still missing?

Use an administrator identity for every postdeployment test.
Attempt a clearly unauthorized record under a restricted test identity and verify it is blocked before model context.
Run only the same authorized record again.
Hide customer names in screenshots and treat that as access control.

Explanation

Correct Answer

Positive functionality does not demonstrate least-privilege resource denial.

Incorrect Answers

Overprivileged test users obscure the exact access boundary that must be verified.

Repetition of the happy path cannot detect an overprivileged connector.

The backend could still return unauthorized data even if images are redacted.

Question 833

An agent’s previous approved version depends on connector API v1, but an emergency rollback tries to restore the old agent after v1 was removed. What should ALM have preserved?

An old screenshot showing an agent response.
Permission for the model to guess replacement API parameters.
A compatible action API version or backward-compatible adapter with a tested restoration manifest.
Only the old model weights.

Explanation

Correct Answer

Agent rollback depends on the external interface that its tool contract invokes.

Incorrect Answers

Screenshots do not restore live executable dependencies.

Unverified generated parameters cannot guarantee compatibility or business correctness.

Model bytes cannot recreate a removed connector operation.

Question 834

A deployment’s total task success stays at 99%, but duplicate refund incidents rise from zero to five per day. What should operational gating do?

Ignore duplicates because the global metric exceeds 95%.
Reduce logging so duplicates no longer appear in reports.
Increase retry rates to improve apparent successful responses.
Stop or roll back the affected transaction path and reconcile duplicates even if aggregate completion remains high.

Explanation

Correct Answer

Low-frequency duplicate payments are material side-effect failures masked by general success.

Incorrect Answers

Aggregate success does not protect financial correctness.

Concealment does not reverse paid credits or remove the defect.

More uncontrolled retries can further multiply transactions.

Question 835

After an agent version rollback, pending order approvals remain in the queue. What smoke test confirms safe continuity?

Check original approval IDs, authorized approver decisions and exactly-once downstream order submission across the version switch.
Count restored chat welcome messages as all approvals recovered.
Clear the pending queue to avoid old version compatibility concerns.
Approve all pending orders automatically after rollback.

Explanation

Correct Answer

Approval state must survive the revert without duplicated or silently bypassed commitments.

Incorrect Answers

Greeting text does not exercise the business state machine.

Discarding requests loses accountable business work and may strand customers.

An emergency technical change does not confer finance approval authority.

Question 836

A sales agent can query customer invoices for many accounts. A salesperson enters another team’s account number. Which control prevents unauthorized disclosure?

Give the model a shared tenant administrator search credential.
The invoice API verifies current user-to-account permission before returning records.
Ask the model not to quote other teams after retrieving their invoices.
Allow all reads but hide account numbers in the UI.

Explanation

Correct Answer

Knowing an identifier does not grant entitlement to read its financial documents.

Incorrect Answers

Broad service scope bypasses the salesperson’s delegated access rights.

Prompt language cannot undo forbidden data access.

Invoice amounts and line items still expose confidential information.

Question 837

A billing agent delegates a disputed payment to a collection agent. The child agent runs under a powerful service identity. What should the handoff carry?

Full administrator credentials so the child agent never receives 403.
Any previous account record retrieved in the session.
A signed scoped task context binding the original caller, permitted account and allowed operation.
Only a natural-language description of the account.

Explanation

Correct Answer

Delegation must not silently expand the user’s resource scope through a child agent.

Incorrect Answers

Unrestricted access breaks least privilege and actor attribution.

Prior retrieval does not establish current entitlement for a new action.

Free text is not an enforceable authorization token or stable account identifier.

Question 838

A procurement agent tries to update a purchase record but receives Forbidden. It has another connector using an admin service account. What should happen?

Use the admin connector to bypass the denial.
Create an alternate purchase record under a different supplier.
Explain in chat that the operation succeeded even though it was denied.
Stop the unauthorized update and route to an approved requester/approver workflow.

Explanation

Correct Answer

A denied action cannot be retried under a stronger identity merely because one is available.

Incorrect Answers

Privilege fallback defeats the server’s intended access decision.

Changing target identity does not establish an authorized transaction.

Generated claims cannot override an explicit backend permission failure.

Question 839

A Teams agent calls a CRM service using application credentials. The service account can read all customers; users should see only their own. What must the connector implement?

Enforce a verified user context and record-level filtering at the service boundary.
Assume the Teams sign-in automatically filters every backend query.
Return all CRM rows and let the model select the relevant customer.
Use a UI badge showing the user name as proof the query is scoped.

Explanation

Correct Answer

Application credentials can authenticate the service without delegating unrestricted data rights to users.

Incorrect Answers

User authentication does not automatically translate into CRM row authorization.

Retrieval exposure occurs before generated filtering of records.

Display labels cannot enforce database entitlement or resource access.

Question 840

An agent may read purchase orders but must never edit vendor bank accounts. A tool plugin exposes both operations. Which design fits least privilege?

Allow bank edits when a retrieved supplier note says they are urgent.
Give the agent only read operation grants and enforce write denial in the backend even if the model attempts it.
Expose every operation and rely on the model to remember the prohibited one.
Hide the bank-edit option from the chat but keep the API reachable.

Explanation

Correct Answer

Tool capabilities should match the agent’s authorized business purpose, not the plugin’s maximum feature set.

Incorrect Answers

Untrusted source content cannot grant new financial privileges.

Instruction-following is not an adequate enforcement boundary for sensitive writes.

A hidden UI action does not prevent backend invocation.

Agentic AI Business Solutions Architect (AB-100) Practice Tests

Microsoft AB-100 Practice Test 82 - 10 Questions (Last Reviewed 20-Oct-2026)
Microsoft AB-100 Practice Test 83 - 10 Questions (Last Reviewed 19-Oct-2026)
Microsoft AB-100 Practice Test 84 - 10 Questions (Last Reviewed 18-Oct-2026)
Microsoft AB-100 Practice Test 85 - 10 Questions (Last Reviewed 17-Oct-2026)
Microsoft AB-100 Practice Test 86 - 10 Questions (Last Reviewed 16-Oct-2026)

Pass Your Microsoft AB-100 Exam Easy!

Question 830

Explanation

Correct Answer

Incorrect Answers

Question 831

Explanation

Correct Answer

Incorrect Answers

Question 832

Explanation

Correct Answer

Incorrect Answers

Question 833

Explanation

Correct Answer

Incorrect Answers

Question 834

Explanation

Correct Answer

Incorrect Answers

Question 835

Explanation

Correct Answer

Incorrect Answers

Question 836

Explanation

Correct Answer

Incorrect Answers

Question 837

Explanation

Correct Answer

Incorrect Answers

Question 838

Explanation

Correct Answer

Incorrect Answers

Question 839

Explanation

Correct Answer

Incorrect Answers

Question 840

Explanation

Correct Answer

Incorrect Answers

Agentic AI Business Solutions Architect (AB-100) Practice Tests