Question 30
A customer-support organization uses three specialized agents: one verifies customer identity, one evaluates product eligibility, and one schedules service. The team wants predictable ownership and traceable transitions, without granting every agent all the tools. What orchestration design is most appropriate?
- Use a shared conversation store to let every specialist discover work by monitoring the transcript, without an explicit coordinator or declared handoff state.
- Run the three specialist agents in parallel and ask a final language model to reconcile their outputs into one answer, without ensuring eligibility uses the identity-verification result or scheduling uses the eligibility decision.
- Give every specialist its own API identity but assign each identity identical commerce write permissions, relying on agent role prompts to prevent an identity checker from scheduling or changing accounts.
- Use a coordinator that routes work to specialized agents, passes verified state between explicit handoffs, and limits each agent to its tools.
Explanation
Correct Answer
D:A coordinator can enforce a workflow where identity verification produces a trusted state passed to eligibility, which in turn supplies a validated decision to scheduling. Give each specialist only the read/write actions it needs and define allowed handoff conditions, ownership of outcomes and trace identifiers. Persist the minimal authorized context needed between agents, and require approval before consequential external actions where applicable. This architecture supports independent specialist evaluation while keeping orchestration explicit and auditable, rather than trusting conversational improvisation to enforce business sequencing.
Incorrect Answers
A:A shared conversation can exchange context among agents and therefore looks like a lightweight orchestration mechanism. Yet agents cannot reliably infer ownership, completion status or permissions from free-form dialogue alone. Identity checks might race with eligibility or scheduling, and a failed specialist could silently leave a partial process. An explicit coordinator should pass validated state and choose the next authorized agent with auditable handoff outcomes.
B:Parallel specialist execution can reduce latency for truly independent subtasks and is a legitimate orchestration pattern in some agent systems. These three responsibilities have dependencies: eligibility must be evaluated for the verified customer, and scheduling depends on the eligibility outcome. A final text merger cannot retroactively enforce those conditions or reliably prevent unauthorized tool calls that occurred in parallel. The workflow needs explicit state transitions, traceability and scoped tools so each specialist receives only validated prerequisites from the coordinator.
C:Separate workload identities improve auditability because a tool call can be attributed to a particular specialist. If all identities still have the same broad write privileges, however, the intended separation of duties is not enforced. Prompt-based role descriptions can be ignored or undermined by untrusted context, and an identity-check agent could perform scheduling side effects outside its scope. The organization requires predictable ownership and limited tools. A coordinator with constrained handoffs and least-privilege actions protects that boundary even when one agent behaves unexpectedly.
Question 31
A production Foundry model deployment begins returning HTTP 429 during traffic bursts. Monitoring reports that requests-per-minute is within its limit but prompt sizes increased dramatically, raising total token consumption. Which quota dimension should the team examine first?
- Truncate every retrieval result to a fixed small number of characters before measuring which request and token-rate quota is responsible for the 429 responses.
- Lower the maximum completion-token setting on every response and conclude that request throttling is fixed without checking the measured input-token surge or deployment TPM limit.
- Inspect tokens-per-minute usage and the deployment's token-related rate limits, then apply appropriate throttling/backoff or capacity changes.
- Move the model to a different supported deployment name within the same geography and replay the unchanged long prompts at peak concurrency, assuming the rename resets rate enforcement without verifying tokens-per-minute use.
Explanation
Correct Answer
C:A model deployment may enforce requests-per-minute and tokens-per-minute or other deployment-specific rate limits. When request count remains below its threshold but token volume surges, examine input/output token accounting, current TPM capacity and the service's retry-after or throttling signals. Reduce unnecessary context, use appropriate backoff, batch only where asynchronous behavior is acceptable, or request supported capacity adjustments. Check quota scope by model and deployment type instead of assuming all limits apply identically. This matches the stated token-growth evidence rather than misdiagnosing an unrelated control-plane problem.
Incorrect Answers
A:Limiting retrieved context can reduce token consumption and may become a useful mitigation after profiling prompt growth. A blind fixed cutoff risks removing evidence needed for grounded answers and does not identify whether token-per-minute, request-per-minute, or another service limit caused throttling. The scenario already supplies evidence that token volumes increased. First inspect actual request usage and applicable quota, then tune context selection or capacity without silently degrading factual support.
B:Limiting generated tokens can reduce usage and might be a worthwhile optimization for an assistant producing excessively long answers. The scenario identifies dramatically larger prompts while requests per minute remain under quota. A completion cap does not measure or necessarily remove that input-side pressure. Before choosing a mitigation, the team must inspect token accounting and the actual rate limit producing HTTP 429, then adapt context size, quota, or retry handling to that evidence.
D:Deployment names and allocation details can matter when a service imposes per-deployment limits, so creating a separate deployment is not inherently unrelated to scaling. Here the traffic surge increased tokens per request and the existing RPM remains below its threshold. Renaming alone does not diagnose the active token-rate limit or ensure additional approved capacity. Measure TPM and retry headers, then adjust pacing, context size or supported quota rather than relying on a naming change.
Question 32
An agent can initiate a bank-transfer request through a tool. Before money moves, policy requires an authorized human to review the payee, amount and account balance, and the agent must not retry a previously approved transfer as a new one. Which control closes the critical gap?
- Let the agent complete the transfer and send a notification afterward, because audit logging is the same as prior approval.
- Introduce an approval checkpoint tied to the validated transaction payload and a unique idempotency key before enabling the write action.
- Require human approval of a natural-language transfer summary, but permit the agent to change the payee or amount before the write request executes.
- Generate a new transaction identifier on each retry so every transfer request is traceable, without checking the outcome of earlier attempts.
Explanation
Correct Answer
B:Pause execution after assembling and validating the payee, amount and source account, then obtain approval from an authorized reviewer for that exact payload. Bind the approval to an immutable transaction ID, enforce least-privilege transfer permissions and use an idempotency key so network retries do not duplicate the payment. Record decision provenance and expiry; any materially changed payee or amount needs fresh approval. This makes the human-in-the-loop checkpoint a real precondition for a financial side effect, not a cosmetic confirmation dialog. The model must not independently bypass that gate.
Incorrect Answers
A:Sending a notification after a transfer helps audit an event but does not satisfy the explicit requirement that a person approve the payment before it occurs. If the transfer is fraudulent or the amount is wrong, an after-the-fact message cannot undo the risk. The scenario also calls for duplicate-retry protection, which a notification alone does not provide. A real approval state must gate access to the write tool, tied to the reviewed payload and its unique transaction identity.
C:A human review step is important and therefore may seem compliant. Its value disappears if the approved summary is not cryptographically or transactionally bound to the exact payload later sent to the bank. The model could alter a destination or amount after review. The approval must cover immutable validated transfer fields, with a unique operation ID and idempotency control that handles retries safely.
D:Unique request identifiers help trace operations, but changing the identifier on a retry can defeat idempotency and cause duplicate transfers when the first request succeeded despite a lost response. The scenario explicitly prohibits a previously approved transfer being executed twice. Keep a stable business transaction key, reconcile unknown outcomes and bind the execution to the already approved payee and amount.
Question 33
A design tool's existing image-generation deployment produces good square illustrations. A client now wants 16:9 landscape banners, but the API returns an unsupported-size error when the team changes the size parameter. What should the implementation do?
- Check the current model/version's supported output dimensions or aspect-ratio controls and choose a compatible deployment or approved crop workflow.
- Generate the banner at the current supported square dimension, then use an uncropped canvas-stretch transform to reach 16:9 while assuming the original character and logo proportions remain unchanged.
- Copy the landscape size parameter from another Foundry image model into this deployment’s request, without checking whether its selected model and API version accept that dimension.
- Resize the square output with a postprocessing scaler to 16:9 by stretching its pixels, rather than requesting one of the image model’s supported landscape sizes or composing a crop.
Explanation
Correct Answer
A:Image-generation deployments expose model-specific size or aspect-ratio controls and may support only a documented set of dimensions. Check the current version and endpoint contract, request a supported landscape size if available, or choose an approved edit/crop stage that preserves necessary composition and safety requirements. Test output framing with realistic banners rather than assuming square-to-wide conversion always preserves content. This addresses the API's concrete rejection and distinguishes parameters enforced by the service from descriptive words inside a creative prompt.
Incorrect Answers
B:A postprocessing pipeline can legitimately convert image sizes, and it may be faster than adopting another generation model. But nonuniformly stretching a square design into a wide canvas changes object proportions and can distort a product mark or illustrated subject. It does not solve the requested image-composition issue cleanly. The engineer should use supported model dimensions or an approved crop, outpainting, or layout procedure and inspect the actual resulting frame.
C:Using a successful configuration from a nearby image-generation model is a common integration shortcut and appears more specific than adjusting natural-language instructions. Different deployed image models, however, expose distinct size and aspect-ratio contracts. The server has already rejected the current size, so reusing parameters from an unrelated deployment has no compatibility guarantee. Consult the actual deployed model's supported sizes or choose a suitable supported edit/crop process and validate composition.
D:A postprocessing resize can satisfy a nominal pixel-dimension requirement and is technically possible without changing the generation request. Stretching a square illustration into a landscape ratio, however, distorts the subject and fails the expected banner composition. It also does not explain or resolve the unsupported-size response from the generation API. The developer should verify the model’s legitimate size options and use a compatible landscape generation or approved framing workflow.
Question 34
A conference app must display captions while speakers are still talking, with partial results updating several times per second. The developers currently send recorded audio files to an asynchronous transcription job that returns results much later. Which Speech capability should be used?
- Use Azure Speech batch transcription on very short rolling recordings and publish the completed job output as each caption, assuming batch completion meets the required subsecond interim-caption rate.
- Configure the real-time Speech recognizer to emit final results only after each speaker finishes a long paragraph, disabling interim hypotheses to simplify the caption UI.
- Stream audio into a custom buffer and transcribe only after each multi-minute recording segment finishes, then display that result as the live caption.
- Use supported real-time streaming speech-to-text recognition with partial hypotheses and final transcription events.
Explanation
Correct Answer
D:Configure real-time speech-to-text using a supported streaming transport or SDK and feed microphone audio in the required format. The app can display provisional recognition hypotheses as they arrive and replace them with finalized text when each utterance is resolved. Account for language selection, acoustic conditions, latency and captions accessibility. This approach provides the incremental events needed for live display, unlike an asynchronous job that completes only after a recording has been collected and processed. The event stream should distinguish provisional hypotheses from committed final text so the interface can replace interim captions rather than duplicate words.
Incorrect Answers
A:Reducing recorded file duration does not convert an asynchronous batch transcription API into a low-latency stream with provisional hypotheses. Job submission, queuing and completion can take longer than each short recording, and the application would receive discontinuous delayed blocks rather than several partial updates per second. The live conference requirement calls for real-time streaming recognition events, with provisional captions replaced by final text when utterances complete.
B:A live recognizer can process microphone audio continuously, but disabling provisional recognition events means users do not see text as speech unfolds. In this scenario the interface must update captions several times per second while a person is still talking. Final-only results may be adequate for a transcript archive, but they create avoidable latency for live accessibility. Use the supported intermediate and final event types and reconcile them without duplicating text.
C:Chunked offline transcription can be a practical way to process recordings and may use the same underlying speech-recognition technology. It fails the accessibility requirement when partial captions are expected several times per second while a speaker is talking. Waiting for long audio segments creates avoidable and unpredictable latency. The application needs a supported real-time recognition stream with provisional and final events, and the UI must update current text as those events arrive.
Question 35
A manufacturing support agent must answer from an internal maintenance manual. The manual was added yesterday, but the agent still generates answers from generic training knowledge. What integration closes the knowledge gap while restricting access to authorized documents?
- Add yesterday’s maintenance manual to a one-time model fine-tuning dataset and continue serving answers from the model without a version-aware, permission-filtered retrieval connection.
- Register the new Azure AI Search index as an agent knowledge source using a broad service identity, then depend on the model prompt to avoid citing documents outside the caller’s permission scope.
- Connect an approved search or knowledge-retrieval tool to the agent with document-level authorization and source citations.
- Extend the model context window and attach an old archived manual excerpt to every prompt, without checking whether yesterday’s approved maintenance edition has entered an authorized retrieval index.
Explanation
Correct Answer
C:Configure a supported retrieval or knowledge tool that queries the latest indexed manual, preserves document identifiers and applies the user's authorized access scope. Feed relevant retrieved passages into generation and require the agent to ground answers in those passages, citing the current manual where appropriate. Verify ingestion and indexing status for yesterday's upload, because a tool cannot retrieve content that has not entered the index. This is the direct integration that supplies new facts to an agent while keeping knowledge access consistent with company policy.
Incorrect Answers
A:Fine-tuning may improve task wording or specialized response behavior, and adding company terminology to training data sounds like a way to teach a support assistant about manuals. It does not provide a reliable immediate path to the latest approved document, a source citation, or per-user access to sensitive passages. Retraining after each update also increases delay and audit complexity. Connecting the actual authorized retrieval tool supplies the fresh evidence when each employee asks.
B:Connecting an index is genuinely relevant to the missing maintenance manual, and a service identity can authenticate the tool, which makes this distractor technically tempting. But the business requires authorized document access, not just a working connection. A broad identity that retrieves restricted passages into the model cannot be made safe solely by requesting discretionary self-censorship in the prompt. Filter and authorize eligible documents before retrieval results enter generation, and keep source identifiers for citations.
D:A longer context can help a generation model process larger retrieved passages, and adding relevant documentation is a legitimate grounding technique. The scenario’s freshness gap concerns a newly uploaded manual that is not being used by the agent. Repeating an archived excerpt cannot supply yesterday’s changes and may produce stale maintenance instructions. Connect a permissioned retrieval tool to the current indexed source, validate ingestion and carry citation provenance into responses.
Question 36
The operational dashboard for a Foundry assistant shows average response time of 2 seconds, but the customer-service team reports that roughly one in a hundred answers takes more than 20 seconds. Which instrumentation best explains why the average hides the issue?
- Report only average response time for all requests because a single aggregate guarantees the tail is acceptable.
- Aggregate p95/p99 end-to-end latency and break it down by input/output tokens, retrieval, model inference and tool spans.
- Track total token consumption and mean model latency by hour, but omit per-request duration distributions and correlated retrieval or tool spans.
- Collect GPU utilization and deployed-model inventory metrics for the Foundry resource, but omit per-request p95/p99 timing and correlated retrieval/tool spans.
Explanation
Correct Answer
B:Track latency distributions such as p95 and p99 for the complete request, then correlate slow traces with token counts, retrieval and model inference durations, external tool calls and retries. A small fraction of extremely slow requests can be invisible in a global average, so percentile views reveal the affected user experience. Segment by deployment, traffic cohort and time window to distinguish persistent capacity constraints from isolated slow dependencies. Instrumenting the response path makes the tail diagnosable rather than assuming the mean represents every customer request.
Incorrect Answers
A:An average can be dominated by many fast requests while masking a small group with unacceptable delays. In this example, one percent of answers exceed 20 seconds even though the mean looks healthy. Reporting only the mean would preserve the false conclusion that performance meets the service target. The team needs a distribution or percentile metric and traces of the slow requests. The arithmetic mean by itself does not identify the affected workload, tool or stage.
C:Token and average latency dashboards are useful operational measures, and hourly trends can indicate large changes in load. They do not explain why a small group of requests exceeds twenty seconds while most remain fast. Aggregated means hide the tail, and token totals cannot distinguish a stalled external tool from model inference. The team needs percentile latency, individual slow traces, and component timing to diagnose the one-percent cohort directly.
D:Capacity and deployment inventory are relevant operations signals, especially if resource saturation contributes to latency. However, they do not show which one percent of user requests exceeds twenty seconds or whether those requests waited on retrieval, an external tool, or generation. The scenario identifies tail experience masked by a mean, so aggregate resource measurements alone leave the actual outlier path unidentified. Per-request timing and trace spans are needed to explain the complaint.
Question 37
An agent performs three operations for each insurance claim: search a policy, call a coverage-check API, and generate the final response. After deployment, some requests take 25 seconds, but the team cannot tell which operation causes the delay. What should be instrumented?
- Add distributed trace spans around retrieval, each tool call and model inference, propagating a correlation ID through the agent execution.
- Record one aggregate timer for the complete claim conversation and compare slow versus fast cases, without attaching separate spans to Search, coverage checking and model generation.
- Measure generated token counts and correlate them with total response time, then assume large outputs explain every slow claim without timing the coverage API or policy search.
- Instrument only the model inference call and its output-token count, while leaving policy retrieval and the coverage-check API without timed spans.
Explanation
Correct Answer
A:Create a correlated trace for the request and timed spans for policy search, coverage-check API execution, model calls and any retries or waiting stages. The spans should share a trace or correlation ID so the team can reconstruct the critical path and see exactly where a slow request spent its time. Protect sensitive claim data in telemetry, but retain safe identifiers, durations, status codes and errors. This lets engineers distinguish a slow search query from a slow external coverage service or long generation, enabling targeted remediation.
Incorrect Answers
B:An end-to-end timer is useful for quantifying the customer-facing latency problem and identifying which requests exceeded the service target. It cannot reveal which of the three sequential dependencies is responsible for a 25-second outlier. The team needs per-stage durations and a correlation ID across retrieval, API and model calls. Without child spans, any attribution to a specific service is speculative even if the aggregate latency measurement is accurate.
C:Token counts can explain a portion of language-model generation latency and are a useful trace attribute. In a multistep claims agent, a short answer can follow a long upstream API wait, while a longer response may be generated quickly after cached retrieval. Correlation between output size and duration does not establish which tool delayed a particular run. Instrument and correlate the individual retrieval, coverage and inference spans to find the actual critical path.
D:Model tracing is a legitimate starting point for diagnosing a slow generative request, but the insurance workflow has three separate operations. If retrieval or the external coverage service causes the delay, a model-only span will look healthy while the customer still waits. A correlated trace must reveal whether inference, retrieval or an external service dominates the 25-second delay. A correlated distributed trace must cover the tool calls as well as inference, including retry and error intervals, to make that distinction.
Question 38
An Azure AI Search indexer runs every hour to import new maintenance bulletins. Staff see yesterday's bulletins but today's never appear. A teammate proposes changing the response model's temperature. What should be investigated first?
- Increase the search query's returned top-k and enable a stronger semantic reranker, even though the missing bulletins have not been confirmed in the indexer’s latest successful run.
- Reset the Search indexer’s change-tracking state and force a complete reimport of the data source, without first checking the failed-document messages, schedule, source filters or enrichment errors in its last run.
- Rebuild the searchable index immediately and adjust retrieval ranking, without first examining the scheduled indexer run and its per-document ingestion failures.
- Inspect the indexer's latest execution history, status, errors, data source and skillset processing counts for the missing documents.
Explanation
Correct Answer
D:Review the indexer's latest run result and time, documents read versus indexed, errors, warnings and failed enrichment or projection stages. Verify that the data source exposes today's bulletins, that filters and change detection include them, and that any chunking or embedding skillset did not reject them. If the run never completed, investigate authentication, scheduling or throttling. These checks locate the missing documents in the pipeline before changing answer generation. A model cannot cite a current bulletin that was never successfully added to the searchable index.
Incorrect Answers
A:Increasing retrieval breadth and using a semantic ranker can make existing maintenance bulletins easier to locate when they are indexed but ranked poorly. Here an entire day's new documents are absent, so the first question is whether ingestion succeeded. Query tuning cannot recover passages that a failed indexer never added. Inspect execution times, document counts, source-change detection and per-document failures before treating this as a search-relevance problem.
B:A deliberate full reimport can recover some missed updates, but it can also repeat the same parsing, permission or skillset failures at greater cost. The team does not yet know whether today’s files were read, rejected, omitted by change detection, or never supplied by the source. Execution history and per-document status are the most direct diagnostic evidence. Blindly resetting the indexer could discard useful state without identifying the underlying fault.
C:Rebuilding an index can be appropriate after a damaged schema or unrecoverable ingestion state, so it is a recognizable operational response. It is disruptive and may repeat the same failure if the source connection, schedule, or enrichment stage is broken. The observation that older bulletins exist but newer ones do not points to a freshness and indexing-path problem. Execution history, processed counts, and document-specific errors provide a cheaper, more precise first diagnosis.
Question 39
An insurance API requires each assistant response to contain a JSON object with exactly claimId, status and nextAction using documented data types. Despite a prompt example, the model sometimes adds a conversational preface or omits status. What is the strongest integration correction?
- Repair malformed responses by stripping the conversational preface and inserting a default 'pending' status when the field is missing, then accept the reconstructed JSON without checking whether the status was actually supported.
- Add several few-shot examples showing the desired JSON fields to the prompt and accept outputs directly without enforcing the downstream schema.
- Enforce a supported structured-output JSON schema, validate the returned payload and reject or retry any response that violates the contract.
- Use a JSON-only instruction and a low temperature to improve format consistency, then pass the response directly to the claims processor without validating required fields or data types.
Explanation
Correct Answer
C:Define the required claimId, status and nextAction fields and types in a structured-output or function schema supported by the chosen deployment. Parse the response and validate against the contract before sending it to the claims API; handle missing/invalid fields with a bounded retry, correction or explicit error path. Also check values against authoritative claim records so syntactically valid JSON does not become fabricated business state. This approach protects both serialization and meaning, and directly prevents an unsolicited preface or missing status from silently corrupting downstream processing.
Incorrect Answers
A:Response post-processing can be helpful for removing harmless formatting around otherwise valid JSON, and a default state may be appropriate when its meaning is explicitly defined by the backend. Here status is a required factual claim field with documented semantics; filling it without evidence can misstate a claim's actual processing state. Ad hoc string repair also may miss type or schema violations. The integration should enforce supported structured output and validate all fields, rejecting or retrying invalid responses rather than silently inventing a status that could drive downstream actions.
B:Few-shot examples can improve the likelihood of consistent formatting and may be an appropriate prompt-design technique. They are not a deterministic contract: a model can still add a preface, omit a field, or return the wrong type under an unfamiliar input. This claims API requires exact keys and parseable structure on every accepted response. Supported structured output plus application-side validation handles that failure mode more reliably than prompting alone.
D:A clear JSON-only instruction and conservative sampling can reduce unwanted prefaces and variation in some model deployments. They do not guarantee a mandatory field will be present, correctly typed or restricted to the specified schema. The scenario already reports omissions despite prompt examples. Because another service consumes the record as a contract, the application must use supported structured-output enforcement where available and validate the actual payload after generation, failing safely when the contract is violated. Prompt compliance is not a substitute for input validation.
Question 40
An accounts-payable assistant sees a screenshot of an invoice in a chat. The image includes a supplier logo, a printed total and a handwritten adjustment. The user asks whether the visible total reflects that adjustment. The assistant must consider spatial context, not only printed characters. What capability should it use?
- Run printed-text OCR over the invoice screenshot and send the flat recognized text to a text-only model without preserving coordinates, handwritten notes, or visual grouping.
- Use a supported image-and-text understanding model, supply the invoice image, and ask for evidence-grounded interpretation of the total and adjustment.
- Retrieve the supplier’s usual invoice template from a lexical index and assume that its known field positions are sufficient to infer the current handwritten adjustment without passing the uploaded screenshot to a vision-capable analysis step.
- Extract the printed total with OCR and perform arithmetic on that value alone, treating any handwritten annotation outside the printed total field as optional commentary rather than evidence that changes the amount.
Explanation
Correct Answer
B:A vision-capable model can inspect the actual screenshot, read printed and handwritten fields where supported, and consider whether the adjustment is spatially tied to the total or another invoice line. Supply the image in the documented format, request explicit extraction of amounts and the claimed relationship, then independently validate arithmetic and flag illegible handwriting for human review. This is a more direct match than using only OCR text, because layout and handwritten placement matter. The model's judgment is evidence to review, not an authority to approve a financial payment.
Incorrect Answers
A:Printed-text OCR may recover the invoice number and printed total, making this a tempting low-cost preprocessing approach. The scenario also contains a handwritten adjustment whose relationship to the total must be inferred from the image. A flat text stream can omit handwriting, spatial placement, or marks that indicate which amount was changed. The supported multimodal image-and-text workflow has access to that visual context and can ground the interpretation in the actual screenshot.
C:Known vendor templates can improve invoice parsing and help locate printed totals, so this is a plausible assistive method. A handwritten adjustment may appear in a different location or modify the printed amount in a way a template cannot predict. The user asks about this specific visible image, not a historical vendor layout. The model needs the actual screenshot and its handwritten content with spatial relationships preserved before it can explain whether the total reflects the change.
D:Numerical validation of a recognized invoice total is useful, but a correct calculation over incomplete inputs can still return the wrong payable amount. The source image contains a handwritten adjustment, which may override or modify the printed figure. A text-only field extraction that ignores the annotation and its spatial connection to the total cannot answer the user’s question. The application must interpret both visual and textual evidence before reconciling the amount.
Developing AI Apps and Agents on Azure (AI-103) Practice Tests