Pass Your Microsoft AI-103 Exam Easy!

Microsoft AI-103 Exam Questions & Answers, Accurate & Verified By IT Experts

Instant Download, Free Fast Updates, 99.6% Pass Rate

AI-103 Premium VCE File

Microsoft AI-103 Premium File

187 Questions & Answers

Last Update: Oct 24, 2026

$89.99

AI-103 Bundle gives you unlimited access to "AI-103" files. However, this does not replace the need for a .vce exam simulator. To download VCE exam simulator click here
AI-103 Premium VCE File
Microsoft AI-103 Premium File

187 Questions & Answers

Last Update: Oct 24, 2026

$89.99

Microsoft AI-103 Exam Bundle gives you unlimited access to "AI-103" files. However, this does not replace the need for a .vce exam simulator. To download your .vce exam simulator click here

Microsoft AI-103 Practice Test 39

Question 380

A service-desk classifier receives an email reading: 'Please revoke my access before 5 p.m. today; the account is no longer authorized.' Its sentiment analyzer returns neutral because the writer is not angry. The agent currently assigns low priority to all neutral emails, delaying account revocation. What text-analysis change fixes the decision?

  1. Assign the access-revocation email an urgent sentiment label through a custom keyword rule whenever it contains 'before 5 p.m.', without representing the explicit security-revocation action separately from emotional tone.
  2. Recognize the revocation request but assign priority from the sentence's neutral sentiment score, using the extracted deadline only as a note for the eventual handler.
  3. Classify actionable intent, deadline and security impact separately from emotional sentiment, then route the access-revocation request using policy-defined urgency.
  4. Use a sentiment score as an urgency proxy, escalating only messages with clearly negative emotional language and ignoring the explicit five o'clock access-revocation deadline.

Explanation

Correct Answer

C:

Use separate classifiers or structured extraction for intent ('revoke access'), deadline, account subject and risk category, validating the requester's authorization before any side effect. A policy-based workflow can then route the ticket to timely identity-administration action even if sentiment remains neutral. Measure errors on calm but urgent emails as well as emotional but nonurgent messages. This avoids using sentiment as an indirect and unreliable proxy for operational priority. The model may identify the request, but trusted systems must decide who is authorized to revoke access.

Incorrect Answers

A:

Deadline detection is a useful feature and may improve triage of time-sensitive support tickets. Relabeling neutral sentiment as a strong emotion confuses two independent properties and can lead to inconsistent routing on ordinary neutral urgent requests. The message contains an actionable access-control operation with a deadline, which is what determines urgency under policy. Extract intent, time and security impact explicitly rather than modifying sentiment to force an escalation.

B:

Extracting the action is a meaningful first step and saving the stated deadline preserves useful context. If routing priority still depends exclusively on emotional tone, a neutral but security-critical request waits too long despite clear urgency. Sentiment measures attitude rather than deadline or authorization impact. Define triage using the requested action, effective cutoff and security consequences, with sentiment kept as a separate optional signal.

D:

Sentiment is useful for assessing how an email sounds, but urgency and risk can be present in neutral language. The request contains a direct deadline and an account that must no longer be authorized, which are actionable security-workflow signals. Route priority using intent, deadline and account state rather than emotional polarity; a longer summary alone would not make a neutral request safe to defer.

Question 381

A support chatbot returns last month's warranty terms even though the document repository contains this week's approved revision. Developers propose increasing vector-query weight because results look stale. The indexer execution log has not been inspected and may have skipped the revised file. What should be investigated first?

  1. Increase vector weight without checking whether the new warranty revision exists in the index at all.
  2. Rebuild the vector index from the currently indexed warranty files and tune semantic scoring, without checking the indexer’s source change-detection log for the newest revision.
  3. Check the source-to-index change-detection path, recent indexer executions and indexed version metadata before attempting relevance tuning.
  4. Add the current calendar date and the repository’s newest file title to the generation prompt, but continue retrieving warranty passages solely from the existing stale Azure AI Search index.

Explanation

Correct Answer

C:

Inspect when the storage or data source recorded the revised file, whether the indexer's change-detection strategy identified it, and whether enrichment errors, filters or failed mappings prevented it from reaching the search index. Compare indexed document IDs, approval flags and effective dates with the repository. Fix ingestion and verify a query can retrieve the new clause with provenance. If the correct current version is already indexed but badly ranked, then evaluate hybrid weights and semantic reranking. This order differentiates missing evidence from poor relevance and prevents tuning the wrong component.

Incorrect Answers

A:

Ranking can choose among indexed documents but cannot return a revision that was never ingested. If an indexer missed the updated file, changing weights may simply elevate old passages or other unrelated documents. The first question is whether the correct approved revision is present, searchable and correctly versioned. Only after that is established should the team tune ranking parameters. Otherwise a retrieval symptom can mask a pipeline freshness failure.

B:

Reindexing can correct corrupted vectors and relevance settings when the source content is already present. It cannot recover a weekly warranty revision that the ingestion connector skipped or could not read. The application may simply regenerate the same stale embeddings at additional cost. The facts point to a freshness pipeline question, so inspect source visibility, indexer execution history and indexed document version metadata before changing vector weights or rebuilding the index.

D:

A date string and fresh document title can make an answer look current, but they do not insert revised warranty clauses into the indexed evidence the model actually receives. The indexer may not have captured the new revision, as the scenario explicitly warns. Retrieval and version metadata must be checked before tuning ranking or changing prompt wording. Supplying superficial freshness hints to the model risks a confident unsupported answer about terms that were never indexed.

Question 382

An Azure AI Search index contains newly published guidelines, confirmed by a direct administrative query. Staff searches still show only older items because the application adds a filter named isCurrent eq true, and the ingestion mapping accidentally leaves isCurrent false on new records. What is the most direct fix?

  1. Review the isCurrent field's filterable schema, ingestion mapping and effective-version predicate, then correct the indexed values or filter logic and test authorized queries.
  2. Increase semantic ranking capacity and return more results, but retain the application-side isCurrent filter value that excludes the newly indexed guidelines.
  3. Raise semantic reranking weight to overcome the isCurrent filter and make excluded records appear in results.
  4. Make the `isCurrent` and tenant predicates optional query parameters and retry without them when too few records appear, treating improved recall as evidence that filtering was wrong.

Explanation

Correct Answer

A:

The documents already exist in the index, so the failure is not an absent source or schedule. Inspect how the isCurrent Boolean is set during ingestion, whether the field is defined as filterable, and whether the application's predicate matches the intended approval logic. Repair mapping or version metadata and reprocess affected records; verify that current records pass the filter while superseded ones remain excluded. Preserve tenant authorization predicates separately. This isolates the concrete false-negative condition without changing unrelated model or ranking settings.

Incorrect Answers

B:

Semantic ranking and a larger candidate set can improve relevance when desired documents are in the eligible retrieval pool. In this incident the administrative query proves the documents exist, while the application's filter removes them before ranking. No ranker can promote an excluded record. Inspect filter expressions, active document status and alias/query settings, preserving tenant authorization while correcting the incorrect freshness condition.

C:

Filtering operates on field predicates before or during search retrieval; ranking algorithms generally cannot promote a document that the filter has excluded. Increasing reranker influence may change order among remaining old results, leaving the new records absent. The engineer should examine the isCurrent flag and its mapping, not semantic scores. The scenario provides the exact discriminating signal: direct admin search finds the documents while the filtered application request does not.

D:

Removing authorization predicates can increase the number of returned records but may also expose other tenants’ contracts or obsolete policies. In Azure AI Search, filters operate on configured fields before or during candidate selection; a low result count can indicate a field-mapping, value or data-refresh problem. The right investigation inspects field attributes and filter syntax while keeping trusted tenant constraints enforced. Better recall does not justify bypassing access control.

Question 383

A summarization agent uses iterative drafting and critique for a regulatory memo. Quality improves slightly after two revisions but the agent continues generating until one user's run costs twelve times the approved token budget. The customer needs a useful answer within a fixed cost ceiling. What execution policy should be enforced?

  1. Stop the self-critique loop only when its quality score exceeds a configured threshold, allowing unlimited revisions and model calls until that score is reached.
  2. Rate-limit the number of critique calls per minute and record latency, but omit a cumulative per-conversation token budget and maximum revision count.
  3. Reduce the critique prompt length for every revision but permit unlimited critique cycles as long as each individual model call stays below its token ceiling.
  4. Enforce a per-run token and cost budget with explicit iteration limits, terminate or degrade safely when the cap is reached, and return the best evidence-validated draft.

Explanation

Correct Answer

D:

Track accumulated input/output tokens and estimated charge across the complete agent execution, set a maximum critique count and deadline, and stop before crossing the allowed budget. Compare revisions against source-grounding checks, retain the strongest supported draft and report uncertainty if a satisfactory answer was not reached. Prevent unexpected continuation by gating each next step against remaining budget. Account for tool costs separately if relevant and record the stop reason for diagnostics. This provides predictable per-user spending without falsely declaring an unfinished or ungrounded memo complete.

Incorrect Answers

A:

A quality threshold is a useful stopping condition for iterative answer refinement because it can prevent unnecessary extra drafts when the answer already meets the rubric. It cannot control cost or latency if the critic never assigns a passing score or if repeated drafts oscillate. The scenario explicitly imposes a token-budget ceiling for the whole request. A reliable loop therefore needs a cumulative token/cost limit and a maximum iteration count in addition to any quality measure, with a controlled fallback when the budget is exhausted.

B:

Rate limiting helps protect capacity and keeps one application from overwhelming shared inference endpoints. It measures request pace, not the total resources consumed by an individual conversation. A single answer could undergo many iterations over several minutes, accumulating tokens and charges while remaining under the per-minute cap. The required policy concerns a hard spending or token budget for each workflow. The system must enforce that cumulative limit and stop or escalate before it is exceeded, not only throttle the cadence of successive critique calls.

C:

Shorter prompts can reduce per-call cost and sometimes simplify the feedback given to a model. They do not cap the total expense if an agent enters a long series of revisions with negligible improvement. The reported run spent twelve times the budget because the process lacked a terminal condition. Apply a per-run token and cost allowance, bounded revision count and improvement threshold, returning the best validated result or an explicit incomplete status when limits are reached.

Question 384

A legal RAG assistant passes its groundedness regression tests in September. After a new search index was built in October, its answers begin citing irrelevant sections even though the language-model deployment is unchanged. Engineers have trace IDs from both versions. What diagnostic comparison is most useful?

  1. Compare the retrieved document versions, chunk identifiers, scores and groundedness evaluation results for the same test questions before and after reindexing.
  2. Rerun groundedness evaluations using only the new October index and compare overall pass rates, without pairing the identical September queries or inspecting the before-and-after retrieved chunk identifiers.
  3. Recompute answer fluency and syntax scores using the new index while skipping source-version comparisons and claim-to-passage groundedness tests.
  4. Compare the September and October index schemas, field names and document totals, then treat equal counts as evidence that each regression query retrieves the same authoritative passage and supports the same generated claims.

Explanation

Correct Answer

A:

Replay a fixed representative question set and use correlated traces to compare which passages, versions and chunk IDs were returned by each index. Inspect any changed chunk boundaries, metadata projections, embedding compatibility and ranking results, then check whether the generated claims follow the actual retrieved text. A same-model regression following an index rebuild strongly warrants inspecting the evidence pipeline. This comparison can separate an ingestion/chunking shift from generation variability and target the exact missing or mismatched clauses instead of making speculative model changes.

Incorrect Answers

B:

Aggregate groundedness results can reveal that the assistant’s overall quality has changed. They cannot by themselves isolate whether a specific index rebuild altered passage selection or document version eligibility. The language-model deployment is constant, and engineers have trace IDs that make paired comparison possible. A useful diagnosis aligns the same test requests, retrieved chunks, their versions and scores, and the associated answer claims across both index versions rather than relying on a single new global score.

C:

Fluency and formatting evaluations can detect regressions in user experience after an infrastructure change, even when the generation model is unchanged. They do not show whether a cited clause is outdated or whether retrieved evidence supports a legal statement. The timing implicates the rebuilt index and its document selection. Evaluate retrieval versions and factual grounding against authoritative source passages, then repair the index or query filters rather than reporting healthy prose as proof of correctness.

D:

Schema parity and document-count reconciliation are useful migration checks, but they do not establish passage-level equivalence. A new chunking policy or indexing projection can change which specific passages are retrieved even if field names and counts remain unchanged. The regression failure concerns grounded answers after the October reindex. Pair the same test questions across versions and compare retrieved chunk IDs, source revisions, ranking, and claim support to isolate the actual shift.

Question 385

A Foundry model private endpoint is approved and a worker inside an Azure virtual network resolves the service hostname to the correct private IP. Yet the worker's TCP connection to port 443 times out, while a developer's laptop succeeds through a separately allowed public test endpoint. The worker subnet's effective route table sends private-address traffic through a network virtual appliance. What should the operator investigate next?

  1. Rotate the model API key and retest the worker while leaving the virtual appliance route, NSG flow path and private endpoint return traffic unchanged.
  2. Trace effective routes, NSG flow rules and the virtual appliance's firewall/return path for the private endpoint IP from the actual worker subnet; verify private-link reachability without reopening public access.
  3. Change the model deployment identifier and SDK API version because the laptop can reach the public endpoint, without testing whether the worker subnet can complete a TCP handshake over private routing.
  4. Change the private DNS record to another private address from the same subnet without checking the network appliance route or TCP path to the approved endpoint.

Explanation

Correct Answer

B:

Inspect the subnet's effective route and next hop for the destination private IP, NSG allow/deny decisions, the network virtual appliance's forwarding and firewall rules, and the return route to the worker. Test TCP connectivity from the worker's actual subnet and confirm the private endpoint NIC and service connection remain approved. The working DNS result narrows the fault beyond the VNet's initial private-zone configuration, while the successful public laptop request proves nothing about the forced-tunnel path. Repair the allowed private route rather than enabling public access or changing model settings.

Incorrect Answers

A:

Authentication keys can cause failed API requests and are a reasonable diagnostic if a service responds with an HTTP unauthorized status. The worker in this case cannot establish a TCP connection on port 443 at all, before model authentication would be evaluated. The hostname resolves to the correct private address, and effective routes send packets through a network appliance. The next diagnostic belongs to network forwarding, filtering and return paths from that subnet rather than credential rotation.

C:

Deployment-name mismatches and API incompatibilities can produce real failures after a model request reaches its service. They do not explain a connection timeout before HTTP routing or resource-name resolution at the application layer. The successful public laptop test exercises a different path than the worker’s private endpoint. Engineers must diagnose effective routes, appliance rules and the TCP return path from the actual subnet, not use a public endpoint result as proof that model configuration is the source of the private-link failure.

D:

A wrong DNS record can certainly break private endpoint traffic, making a DNS change a reasonable diagnostic in many incidents. Here the worker already resolves the model hostname to the verified private address, so an arbitrary alternate IP is more likely to misroute packets. The remaining failure is a network path or appliance rule before HTTP. Trace TCP, routing and security policies to the known endpoint.

Question 386

A product-photo editor uses masked inpainting to remove a scratch from a shoe image. The scratch is repaired, but a reviewer notices that the shoe's approved color and unrelated background details also changed. The team wants to enforce a genuinely localized edit. What acceptance check should it add?

  1. Accept the result whenever the scratch disappears, regardless of unintended changes outside the mask.
  2. Use the original image and adjusted inpainting mask for another generation, and approve the result if the scratch is gone, without comparing pixels outside the allowed mask against the approved reference.
  3. Compare edited and source pixels or perceptual features outside the intended mask, inspect boundaries and reject results with material unapproved changes.
  4. Apply the same inpainting request with a larger mask and stronger edit guidance, then accept it once the scratch disappears without comparing areas outside the intended change.

Explanation

Correct Answer

C:

Retain the original, mask and final image, register their alignment, and compare unmasked regions using appropriate pixel or perceptual similarity measures. Allow for harmless compression and color-management differences, but flag material changes to product color, logos, pose or background. Inspect the mask boundary for seams or artifacts and verify the scratch itself is removed. Reject or rerun an edit whose collateral modifications exceed the approved tolerance. This makes localized preservation a measurable acceptance requirement rather than trusting that a masked prompt guarantees pixel-level invariance across every image model.

Incorrect Answers

A:

Removing the targeted scratch is necessary but not sufficient when the retailer requires the rest of the approved photograph unchanged. A visually plausible edit can silently alter product color, branding or a background item that customers use to judge the product. Ignoring those differences would violate catalog consistency and make the correction hard to audit. The edit must be assessed for both target success and preservation of content outside the permitted region.

B:

Changing a mask or re-running inpainting can improve a local repair when the first output contains artifacts. The original issue is that unmasked regions such as shoe color and background changed, not only whether the scratch remains. A successful scratch removal is therefore an incomplete acceptance criterion. The quality gate must compare unaffected regions to the approved reference, using appropriate tolerances, while separately checking the masked correction; repeated generation alone cannot prove preservation.

D:

Expanding a mask can sometimes improve reconstruction around a damaged region and is a legitimate image-editing tactic. It also increases the area the model may alter, potentially worsening shoe-color or background drift that reviewers already detected. The acceptance requirement includes preservation of unaffected pixels and product identity. Keep a narrowly justified mask and compare the final export against the original outside the edit region.

Question 387

A localization service translates a source product description into Japanese, French and Portuguese. Its old code creates three separate v3.0 translation requests and the team is moving to Azure Translator 2026-06-06. They want to combine supported targets while keeping independent target-language outputs. What migration design fits?

  1. Continue using v3.0's repeated 'to' query parameter inside the 2026-06-06 request without changing the payload.
  2. Configure the 2026-06-06 request with supported target language entries in its targets array, parse the revised response structure and regression-test all three translations.
  3. Translate all product descriptions into French first, then use the French output as the sole source for Japanese and Portuguese requests without checking meaning drift against the original language.
  4. Migrate the request body to the 2026-06-06 targets array but continue parsing each result as the old v3.0 top-level translation response, assuming only the request schema changed.

Explanation

Correct Answer

B:

Use the documented 2026-06-06 translation operation with a targets array naming each supported language and its applicable options; one request can ask for multiple targets where supported. Process the revised response structure so Japanese, French and Portuguese outputs remain individually associated with the correct target. Validate identifiers, preserved SKUs, numerical values and locale-specific terminology against regression examples. Test rate, payload and authentication limits before removing the v3.0 path. This reduces repeated calls when appropriate without pretending the migration retains the old schema or that all targets have identical translation quality.

Incorrect Answers

A:

The 2026-06-06 GA API introduces a revised request and response contract and is not a drop-in replacement for v3.0. Keeping the old target parameter without migration can produce a validation error or incorrect parsing. The organization should update both request composition and result handling together. A change in API version alone does not guarantee backward compatibility, even when the same source and target language pair is supported.

C:

Pivot translation can be a practical workaround for an unsupported direct language pair, but this endpoint supports independent target translations from the source. Cascading every requested language through French introduces a second translation step and can compound terminology and product-specific errors. It also fails to use the newly documented multi-target request and response structure. Configure the supported targets and validate each returned language result against the original description rather than serially copying a pivot.

D:

Updating the targets array is necessary for the new API, so this option reflects genuine migration work. It remains incomplete because the GA release changes the response envelope as well. Client code expecting the legacy translation layout can misassociate Japanese, French, and Portuguese outputs or silently lose them. The correct migration updates both the request and value/translations response parser and verifies each target language using regression tests.

Question 388

An Azure AI Search enrichment pipeline reads scanned documents and successfully generates OCR text and embedding vectors. A new index remains empty for chunk records because the skillset's output mapping points to a nonexistent enriched-document node. What should the engineer inspect?

  1. Use an indexer debug session to inspect enrichment-tree paths, skill inputs/outputs and index projections or output field mappings, then repair the path to the intended index field.
  2. Increase the indexer's execution frequency and retry failed runs without changing the nonexistent enrichment-tree path currently referenced by the projection.
  3. Remove OCR from the pipeline even though it produces correct text, assuming this fixes an unrelated projection path.
  4. Create a new vector field mapping using the existing OCR text but leave the indexer’s embedding skill output and projection paths disconnected from that field.

Explanation

Correct Answer

A:

Run a targeted indexer debug session on a representative document and inspect the enrichment tree to see where OCR output and split or embedding results actually appear. Compare that path with field mappings, skill contexts and child-index projections, including parent IDs and target field types. Correct the nonexistent source node and reprocess the affected input, then query the index to verify both chunks and provenance exist. This addresses a specific data-path mismatch between successful enrichment and persistence, which cannot be repaired by later retrieval or text-generation parameters.

Incorrect Answers

B:

Scheduling and retries are legitimate fixes for transient indexing outages, and they can improve data freshness once a working skillset is configured. In this incident OCR and embedding outputs exist, but the index projection points to a node that does not. Every retry repeats that deterministic mapping error, so extra executions cannot create chunk records. An indexer debug session should reveal the actual enriched-document output path, and the projection should be repaired to reference it before runs are repeated.

C:

OCR is succeeding and supplies the text used to create meaningful chunks; removing it could strip scanned documents of their content. The observed defect is that a later projection references a nonexistent path, so changing an upstream working skill is unwarranted. Diagnose the precise enrichment node and target mapping instead of disabling successful extraction. The output field mapping must connect actual generated data to the index schema with valid parent and child relationships.

D:

Defining a vector field is necessary for semantic retrieval and can correct a missing or wrong schema target. Here both OCR and embedding generation already work, but vector records fail to appear in the destination index. A field declaration alone will not populate vectors if the skillset output projection points elsewhere. Inspect output mappings, index projections, and indexer execution errors so generated vectors are actually stored in the intended document and field.

Question 389

A product assistant precomputes image embeddings for an overnight catalog import, then answers interactive customer questions using the completed vector index. A developer proposes doing every catalog import inside each user's chat turn to simplify orchestration. What workload split makes the most sense?

  1. Move catalog embedding into the web request path but cache the completed full-catalog vectors only for the duration of that individual chat turn.
  2. Cache a monthly snapshot of catalog descriptions in the agent's system prompt and answer all interactive inventory questions from that snapshot, without querying the asynchronously refreshed vector index.
  3. Keep large ingestion/enrichment as an offline or asynchronous pipeline, publish validated index updates, and let the interactive agent perform bounded retrieval and response generation against ready records.
  4. Run the overnight embedding job on a shorter daily schedule, but block each interactive answer until the latest full-catalog reindex has completed, rather than querying the last validated published index.

Explanation

Correct Answer

C:

Schedule ingestion, OCR or image feature extraction and embedding jobs when source files are added or changed, with controlled retries, provenance and successful-index-version publication. Keep these potentially slow operations outside the latency-sensitive user path. The agent can then retrieve relevant product records and generate a concise grounded answer, optionally checking the most current transactional stock through a separate tool. Track when an index update becomes ready and avoid exposing partially built results. This division respects different workload timing without assuming asynchronous bulk processing can satisfy an interactive request directly.

Incorrect Answers

A:

On-demand embedding is a valid pattern for small, fast-changing inputs, and request-scoped caching can prevent repeated calls within one user interaction. Here the catalog is large and already refreshed overnight. Rebuilding or loading every item per chat creates unnecessary latency and inference cost, even if it prevents reuse of old results between users. Maintain an asynchronous bulk ingestion pipeline and serve online retrieval from a validated published index.

B:

Caching frequently used catalog context can reduce request latency, and a language model can summarize product information supplied as text. But a monthly prompt snapshot is a poor substitute for the indexed catalog that has already been built and updated overnight. The assistant would lose current stock and product changes, and prompt size could grow as records accumulate. The efficient split is to ingest embeddings asynchronously and retrieve bounded, relevant results at answer time, not to bypass the ready index with a frozen prompt.

D:

More frequent catalog refreshes can improve data freshness and a bounded update schedule may be desirable for product availability. However, waiting for a full bulk job inside every chat turn couples response latency to a potentially large asynchronous process. The assistant already has a completed published index that can answer interactive queries while ingestion prepares an updated version. A sound architecture uses validated index swaps or incremental refresh and bounded online retrieval, not a mandatory whole-catalog rebuild gate for every user question.

Question 390

A pharmaceutical support chatbot must not submit medication-change requests without an authenticated clinician approval. Its system prompt says to refuse such requests, but a user finds a phrasing that causes the agent to call a write-capable prescription tool. What safeguard should the application enforce?

  1. Add several more refusal examples to the prompt while leaving unrestricted prescription-tool permissions enabled.
  2. Require a nurse or support representative to approve the generated text, but do not authenticate clinician authority for the separate prescription-write tool call.
  3. Rely on the model’s built-in tool-choice restrictions to omit the prescription-write action from most prompts, while leaving the write-capable token usable if a call is made.
  4. Enforce a policy check at the tool boundary that denies medication-change actions without verified clinician authorization and transaction-specific approval, independent of model-generated text.

Explanation

Correct Answer

D:

Put a trusted policy guard around the prescription tool that verifies clinician identity, required role, patient association and explicit approval for the exact medication, dose and patient before sending a write to the clinical system. Block and log unauthorized attempts, require reapproval when the payload changes, and treat model suggestions as nonbinding proposals. Do not expose a privileged token to an agent that lacks permission. This makes the restriction effective even when prompts, retrieved documents or user wording attempt to override the rule.

Incorrect Answers

A:

Examples can improve intended behavior but do not remove the model's ability to invoke a privileged write tool. Prompt injection or a novel phrasing can still reach the function call. In a clinical workflow, this is insufficient because an unauthorized medication change can have immediate safety consequences. The rule must apply to the actual request payload and caller before execution, not only to whether the model's generated sentence sounds like a refusal.

B:

A human content-review stage can reduce unsafe statements before they reach patients and is valuable in a clinical assistant. It does not establish that the person authorized to change medication orders has approved the actual transaction. The case involves an executable prescription action, not only medical prose. The tool boundary must verify an authenticated clinician and approval tied to the proposed change before permitting the external write, regardless of who reviewed the chatbot’s wording.

C:

Tool-choice configuration can constrain ordinary generation paths, and excluding a tool from many requests reduces the surface for accidental use. It does not satisfy a clinical requirement that every medication change receive authenticated clinician approval when the backend still accepts an authorized write. The failure already shows that language instructions can be bypassed. Validate permission and approval at the prescription API boundary so no model output can execute an unapproved change.


Developing AI Apps and Agents on Azure (AI-103) Practice Tests

Purchase Individually

AI-103 Premium File

Premium File
AI-103 Premium File
187 Q&A
$98.99$89.99

Site Search:

 

VISA, MasterCard, AmericanExpress, UnionPay

SPECIAL OFFER: GET 10% OFF

ExamCollection Premium

ExamCollection Premium Files

Pass your Exam with ExamCollection's PREMIUM files!

  • ExamCollection Certified Safe Files
  • Guaranteed to have ACTUAL Exam Questions
  • Up-to-Date Exam Study Material - Verified by Experts
  • Instant Downloads
Enter Your Email Address to Receive Your 10% Off Discount Code
A Confirmation Link will be sent to this email address to verify your login
We value your privacy. We will not rent or sell your email address

SPECIAL OFFER: GET 10% OFF

Use Discount Code:

MIN10OFF

A confirmation link was sent to your e-mail.
Please check your mailbox for a message from support@examcollection.com and follow the directions.

Next

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your e-mail address below to get started with our interactive software demo of your free trial.

Free Demo Limits: In the demo version you will be able to access only first 5 questions from exam.