Microsoft AB-100 Practice Test 85

Question 840

An agent may read purchase orders but must never edit vendor bank accounts. A tool plugin exposes both operations. Which design fits least privilege?

Allow bank edits when a retrieved supplier note says they are urgent.
Give the agent only read operation grants and enforce write denial in the backend even if the model attempts it.
Expose every operation and rely on the model to remember the prohibited one.
Hide the bank-edit option from the chat but keep the API reachable.

Explanation

Correct Answer

Tool capabilities should match the agent’s authorized business purpose, not the plugin’s maximum feature set.

Incorrect Answers

Untrusted source content cannot grant new financial privileges.

Instruction-following is not an adequate enforcement boundary for sensitive writes.

A hidden UI action does not prevent backend invocation.

Question 841

A finance employee transfers to marketing, but their agent still has cached access to payment records. What must change?

Hide Finance citations while still providing financial answer content.
Grant a marketing role the same payment-table permissions to avoid errors.
Revoke or expire cached entitlements and enforce current Finance role checks before every sensitive retrieval.
Keep access until the chat conversation is manually deleted.

Explanation

Correct Answer

Authorization is time-varying and must not be frozen indefinitely in a chat session.

Incorrect Answers

Redaction of source links does not eliminate disclosure of restricted facts.

Access expansion would defeat departmental separation of duties.

Old session state cannot override a formal role revocation.

Question 842

A general support agent passes a ticket to a third-party specialist agent. The specialist asks for all customer accounts to diagnose it. What should the parent provide?

Export the entire customer database because the specialist requested it.
Give the third party the parent agent’s global secret.
Use a generated customer-ID list containing guessed accounts.
Only the permitted ticket fields needed for the task, using an authenticated scoped handoff contract.

Explanation

Correct Answer

Least-privilege delegation minimizes both data exposure and unauthorized downstream operations.

Incorrect Answers

A tool request does not supersede tenant and record-level permissions.

Shared credentials remove isolation and traceable identity for external providers.

Invented identifiers do not create legitimate access or useful verified evidence.

Question 843

An agent queues a payment action while the requester is authorized, but that person’s role is revoked before the approval workflow finishes. What should the transaction service do?

Revalidate relevant permissions and the independent approval state at commit time.
Rely permanently on the role value stored when the chat began.
Let the model infer whether the user still works in Finance.
Execute because the payment stayed in a queue for a long time.

Explanation

Correct Answer

Authority can change between initial request and irreversible payment execution.

Incorrect Answers

Stale authorization snapshots can outlive valid access.

Employment role status is not verifiable from conversational text.

Queue age cannot substitute for current permissions or signoff.

Question 844

A division discovers several unattended purchasing agents using old vendor credentials. No central record lists their owners or permissions. What governance artifact is missing?

An instruction asking each agent to introduce itself in a chat.
An agent inventory listing accountable owners, business purpose, tools, credentials, data scope and release status.
A spreadsheet of the most popular agent names without any action permissions.
Only a billing report of model tokens used by each department.

Explanation

Correct Answer

Autonomous processes need discoverable ownership and permitted-action records for ongoing risk review.

Incorrect Answers

Generated self-description is not a verified administrative registry.

Popularity cannot identify which services can spend money or read restricted records.

Usage cost does not establish ownership, execution authority or revocation needs.

Question 845

A collections agent moves from Finance management to Customer Service. Its old Finance owner has left the company, and the agent still sends payment reminders. What governance transition is needed?

Give all Customer Service users unrestricted Finance access for continuity.
Allow the model to select its own reporting manager from team names.
Assign a verified new accountable owner and reapprove purpose, recipients, access scopes and monitoring obligations.
Keep the departed employee as owner because the original deployment succeeded.

Explanation

Correct Answer

Ownership change can alter legal and business authority for unattended communications.

Incorrect Answers

Business reassignment does not justify broad cross-department privileges.

Accountability must be explicitly delegated and documented by organizational owners.

An inactive person cannot responsibly approve new risks or access reviews.

Question 846

A deprecated HR assistant has had no users for six months but retains a privileged SharePoint connector and scheduled trigger. What retirement action is required?

Remove the app icon but keep the scheduled automation active.
Keep privileged secrets indefinitely for possible future reactivation.
Ask the language model to promise it will not run again.
Disable triggers, revoke connector credentials, archive required audit artifacts and remove data access under policy.

Explanation

Correct Answer

An idle agent can still be invoked and its standing permissions remain a security exposure.

Incorrect Answers

UI invisibility does not disable backend triggers or credential use.

Unnecessary credentials extend attack surface beyond the service’s legitimate lifetime.

Model text cannot revoke jobs or tokens in the infrastructure.

Question 847

A logistics agent is approved to read stock. Its development team wants to add supplier ordering. What governance approval is necessary?

Review the new transaction risk, data scope, budget limits and accountable approver before enabling the ordering tool.
Enable purchases because the agent already knows inventory facts.
Hide the new tool from users while allowing unattended execution.
Let the model decide whether ordering seems low risk based on prompt fluency.

Explanation

Correct Answer

Read-only authorization does not automatically permit contractual purchase commitments.

Incorrect Answers

Data relevance is not authority to spend corporate funds.

Invisible side effects are still high-impact actions that need explicit governance.

Generated judgment cannot substitute for recorded business-owner approval.

Question 848

A yearly audit finds a contract-review agent still has access to payroll records, though its job never requires payroll. What should the owner review?

Increase model confidence thresholds as a substitute for access review.
Recertify each tool and data scope against the current business purpose and revoke unrelated permissions.
Keep payroll access because no misuse was reported.
Remove payroll mentions from system prompts but retain backend table access.

Explanation

Correct Answer

Periodic attestation connects the agent’s actual privileges to its justified task.

Incorrect Answers

Answer confidence is unrelated to the least-privilege permission grant.

Unneeded rights increase future exposure even without known incidents.

Prompt changes do not enforce revocation at the data service.

Question 849

An orchestrator invokes three specialized agents, two with external write tools. The registry tracks only the orchestrator. What should governance include?

Give every child agent the parent’s full administrative permissions.
Infer child behavior from the parent’s final conversational answer.
Each child agent, its tool permissions, owner, data flow and approval/delegation relationship.
Track only the orchestrator’s prompt because children are implementation details.

Explanation

Correct Answer

Risks arise at sub-agent boundaries even when users see only the parent interface.

Incorrect Answers

Uniform broad rights eliminate specialized least-privilege separation.

Generated output cannot reconstruct hidden tool scopes and downstream execution.

Child tools can execute independent external actions and need direct oversight.

Question 850

A procurement agent begins producing unusual purchase orders after a malicious supplier feed update. What fleet governance capability should exist?

Ask the agent politely to stop ordering without disabling its tool token.
Delete purchase logs immediately to reduce investigation volume.
Wait until the daily business report confirms a loss.
A revocable kill switch for execution tools and triggers, with preserved audit evidence and recovery ownership.

Explanation

Correct Answer

Rapid containment is necessary when an unattended agent may incur continuing external obligations.

Incorrect Answers

Prompt obedience is not a reliable emergency enforcement boundary.

Erasing evidence prevents root-cause analysis and financial reconciliation.

Continued autonomous writes can expand harm during a suspected incident.

Agentic AI Business Solutions Architect (AB-100) Practice Tests

Microsoft AB-100 Practice Test 83 - 10 Questions (Last Reviewed 19-Oct-2026)
Microsoft AB-100 Practice Test 84 - 10 Questions (Last Reviewed 18-Oct-2026)
Microsoft AB-100 Practice Test 85 - 10 Questions (Last Reviewed 17-Oct-2026)
Microsoft AB-100 Practice Test 86 - 10 Questions (Last Reviewed 16-Oct-2026)
Microsoft AB-100 Practice Test 87 - 10 Questions (Last Reviewed 15-Oct-2026)

Pass Your Microsoft AB-100 Exam Easy!

Question 840

Explanation

Correct Answer

Incorrect Answers

Question 841

Explanation

Correct Answer

Incorrect Answers

Question 842

Explanation

Correct Answer

Incorrect Answers

Question 843

Explanation

Correct Answer

Incorrect Answers

Question 844

Explanation

Correct Answer

Incorrect Answers

Question 845

Explanation

Correct Answer

Incorrect Answers

Question 846

Explanation

Correct Answer

Incorrect Answers

Question 847

Explanation

Correct Answer

Incorrect Answers

Question 848

Explanation

Correct Answer

Incorrect Answers

Question 849

Explanation

Correct Answer

Incorrect Answers

Question 850

Explanation

Correct Answer

Incorrect Answers

Agentic AI Business Solutions Architect (AB-100) Practice Tests