integrate-and-extend-agents

Microsoft Certified: AI Agent Builder Associate · 123 questions

• Priya is a Copilot Studio developer at Northstar Insurance. Her manager wants the company's claims agent to surface relevant SharePoint documents when a customer asks about policy coverage. Priya knows there is a prebuilt Copilot connector for SharePoint available in the connector gallery. Which sequence of steps should Priya follow to add this connector to the agent?
• Marcus is building a customer service agent for Meridian Retail using Copilot Studio. The IT team has already set up a certified Power Platform connector to the company's inventory management system. Marcus wants the agent to be able to look up stock levels in real time when a customer asks. How should Marcus make the existing Power Platform connector available as an action in the agent?
• Valeria is configuring a support agent for Deltawave Telecom in Copilot Studio. She wants to connect Azure AI Search as a knowledge source so the agent can answer technical questions from a large indexed document repository. Which set of steps correctly describes how to link Azure AI Search to the agent?
• Dominic is a Power Platform developer at Crestview Financial. He is creating a Power Automate cloud flow that a Copilot Studio agent will call when a customer requests to freeze their credit card. The agent must pass the card's last four digits to the flow, and the flow should immediately execute when triggered by the agent. Which trigger should Dominic configure in Power Automate, and what must he do to make the flow callable from Copilot Studio?
• Lena is building a custom connector in Power Platform for Apexeon Analytics. The third-party REST API she is integrating requires callers to pass a static secret key in an HTTP header named 'X-Api-Key'. There is no OAuth or Azure AD flow involved — just a single header value that never changes per customer. Which authentication type should Lena select when configuring the custom connector's security settings?
• Hakim is preparing an Azure AI Search index at Starbridge Logistics so their Copilot Studio agent can query shipment documentation. He has uploaded 3,000 PDF-derived documents to an Azure Blob container and created an indexer. Before the agent can query the index successfully, which TWO configuration elements must Hakim ensure are in place? (Choose the best single answer that correctly identifies both.)
• Svetlana is a Copilot Studio developer at Ironbridge Manufacturing. She has imported a plugin action that calls an ERP system to look up purchase order status. She now needs to wire this plugin into an agent topic so that when a procurement manager asks 'What is the status of PO #12345?', the agent invokes the plugin and displays the result. Which configuration steps are required to enable the plugin action within the topic?
• A solution architect at Kestrel Healthcare is designing a Copilot Studio agent that will use custom Power Platform connectors built by the integration team. The integration team maintains these connectors in a development environment (Dev), while the business wants the agent deployed in the production environment (Prod). The architect proposes connecting the agent in Prod directly to the connectors in Dev to avoid duplication. Why will this proposal fail, and what is the correct approach?
• Oluwaseun is a knowledge engineer at Bridgemont Legal. The firm's Copilot Studio agent searches a 50,000-document Azure AI Search index of case law. Users complain that simple keyword matches return tangentially related documents ranked above highly relevant ones. Oluwaseun wants to enable semantic re-ranking so the index uses language understanding to score results by contextual relevance rather than pure keyword frequency. What must Oluwaseun configure to enable this capability?
• Thanh is a developer at Polaris Energy building a custom connector in Power Platform that will call an internal API secured with Microsoft Entra ID (Azure AD) OAuth 2.0. To complete the OAuth configuration in the custom connector wizard, Thanh needs a Client ID and Client Secret. Where should Thanh obtain these values, and what additional step is required to make the connector's redirect URL trusted?
• Renata is building a Copilot Studio agent for Sundown Hotels that allows guests to extend their stay. The topic collects the guest's reservation ID (stored in 'Topic.ReservationID') and the additional number of nights (stored in 'Topic.ExtraNights'). Renata has created a Power Automate cloud flow with the 'Run a flow from Copilot' trigger that has two input parameters: 'ReservationID' (Text) and 'ExtraNights' (Number). How does Renata correctly pass the topic variable values to the cloud flow when calling it from the topic?
• Farouk is deploying a Copilot Studio agent at Westbrook Consulting that uses a Copilot connector to search the user's Outlook email for client-related messages. During testing, Farouk notices that when a consultant first interacts with the agent and asks about client emails, the agent responds with an error instead of email results. The connector is correctly configured in the agent. What is the most likely cause, and what must happen for the agent to successfully access the consultant's email?
• Yuki is a knowledge engineer at Cedarwood Research Institute. The institute's Copilot Studio agent queries an Azure AI Search index built from 800-page technical research reports. Users report that the agent's answers are vague and sometimes combine unrelated information from different sections of the same report. The index currently stores each full document as a single record with one searchable text field. What should Yuki do to improve the agent's answer quality?
• Amara is a developer at Vortex Logistics. The company's Copilot Studio agent calls a Power Platform connector to look up shipment tracking data. During peak hours, the connector returns HTTP 429 'Too Many Requests' errors because the underlying logistics API enforces a rate limit of 60 calls per minute. The agent currently shows a generic error message when this happens. What is the recommended approach to handle 429 errors gracefully in this scenario?
• Celeste is building a Copilot Studio agent for Horizon Benefits that checks a member's remaining dental benefit balance. She has a Power Automate flow that calls the benefits API and returns a 'RemainingBalance' output parameter (Number type). After the 'Call an action' node runs in the topic, Celeste needs to display the balance in a message. How does she correctly access the flow's output value in the topic?
• Nikolai is the AI lead at Greenfield Pharma. He is designing the knowledge retrieval strategy for a Copilot Studio agent that answers researcher questions about drug interaction studies. Researchers often phrase questions conceptually — for example, 'What happens when a patient stops taking a beta blocker suddenly?' — and the indexed documents use clinical terminology like 'abrupt beta-blocker discontinuation syndrome'. Keyword search frequently returns zero results because the query terms don't match document terms. Which retrieval approach should Nikolai implement, and why?
• Justine is developing a Copilot Studio agent for Metro City Council. The agent has a registered plugin action named 'GetPermitStatus' that accepts a 'PermitNumber' input (Text) and returns a 'Status' output (Text) and 'ExpiryDate' output (Text). Justine needs to build a topic that lets residents query their building permit status and display both the status and expiry date in a single formatted message. Which topic design correctly invokes the plugin and displays the response?
• Bridget is a Power Platform architect at Clearview Financial advising her team on which Power Automate trigger type to use for three different agent scenarios: (1) A flow that the Copilot Studio agent calls immediately when a user requests a loan pre-qualification; (2) A flow that automatically fires when a new loan application record is created in Dataverse; (3) A flow that runs nightly at midnight to archive closed loan cases. Which trigger matches each scenario correctly?
• Ingrid is a Power Platform administrator at Nexum Energy. The security team has enacted a data loss prevention (DLP) policy that places the SharePoint connector in the 'Business' data group and places the Twitter (X) connector in the 'Non-Business' data group. A developer is trying to build a Copilot Studio action that uses both connectors in the same cloud flow — the flow should read internal documents from SharePoint and post a public update to the company's Twitter account. Ingrid is reviewing whether this is possible under the current DLP policy. What will happen?
• Kenji is a search engineer at Pinnacle Insurance. The company's Copilot Studio agent queries an Azure AI Search index of regulatory compliance documents. Users complain that the agent cites outdated regulations from 2018 even when updated 2024 versions of the same document exist in the index. Both versions score equally under the current BM25 keyword ranking because their text is similar. Kenji wants the search engine to automatically rank newer documents higher. What should he configure?
• Priscilla is an enterprise architect at Fenway Consulting advising a client on which data sources can be surfaced to a Copilot Studio agent through prebuilt Copilot connectors without building custom connectors. The client has four data repositories they want to make available: (1) SharePoint Online document libraries, (2) Microsoft Graph-indexed content from Teams channels, (3) A legacy on-premises Oracle database, (4) ServiceNow incident records. Which of the following correctly identifies which sources are natively supported by prebuilt Copilot connectors?
• Tobias is a Power Platform administrator at Meridian Healthcare. He is reviewing a DLP policy for the production environment. A developer needs to build a cloud flow that uses BOTH the Dynamics 365 connector (currently in 'Business') and a third-party appointment scheduling SaaS connector (currently in 'Non-Business'). The developer wants to move the scheduling connector to 'Business' to allow the two connectors to work together. Tobias must evaluate whether this change is appropriate. What are the implications of moving the scheduling connector to the 'Business' data group?
• A Copilot Studio developer is building a topic that calls an external REST API to fetch inventory data. The API occasionally times out. The developer needs the agent to display a friendly error message and offer the user a retry option if the API call fails. Which approach correctly implements this error handling?
• Users of a Contoso IT helpdesk Copilot Studio agent frequently type messages that do not match any configured topic — for example, 'I need help with the thingy on my screen.' The agent currently responds with a generic 'I didn't understand that' message. The product team wants a better experience. Which Copilot Studio feature should the developer modify?
• LitWare Inc. is building a Copilot Studio agent with a distinct brand persona — the agent should always respond in a professional, concise tone, refer to itself as 'Aria', and avoid mentioning competitors. Where in Copilot Studio should the developer configure these persona and behavioral instructions?
• A developer at Graphic Design Institute adds a 'Generative answers' node to a topic in Copilot Studio. The topic should answer questions about the company's design policies using content from a SharePoint site. What configuration is required in the Generative answers node?
• Southridge Video is evaluating whether to use Copilot Studio's classic topic-based authoring or generative AI (orchestration) mode. A product manager asks the developer to explain when to use a Generative answers node inside a classic topic versus enabling full generative orchestration. Which statement correctly distinguishes the two?
• A Copilot Studio agent for Bellows College collects a student's ID number early in the conversation and needs to use it in multiple subsequent topics without asking the student to re-enter it. Which variable type should the developer use?
• A developer at Relecloud is building a multi-step topic that collects a user's shipping address across several question nodes. The address components (street, city, zip) are only needed within this topic to pass to an action. Which variable type is most appropriate?
• A Copilot Studio developer needs to log the channel through which a user accessed the agent (e.g., Teams, web chat, or direct line) to route conversations differently based on the surface. Without writing any custom code, how can the developer access this information?
• A developer at Fourth Coffee wants to add a weather service to their Copilot Studio agent. The weather service exposes a Model Context Protocol (MCP) server endpoint. What is the correct way to integrate this MCP tool into the agent?
• A Copilot Studio developer is integrating a GitHub MCP server that requires OAuth 2.0 authentication. The agent should be able to call GitHub on behalf of the signed-in user. Which configuration is required for the MCP tool in Copilot Studio?
• Trey Research is designing a Copilot Studio multi-agent solution. The orchestrator agent needs to route a user's question about clinical trial eligibility to the Clinical Trials specialist agent. In Copilot Studio, how does the orchestrator agent invoke the specialist agent?
• A solution architect at Adatum Corporation is designing a Copilot Studio multi-agent system. She needs to choose between a 'vertical' multi-agent pattern (each agent handles one domain end-to-end) and a 'horizontal' pattern (a shared orchestrator routes all domains). When is the vertical pattern preferred?
• A developer at Coho Winery is configuring a 'Create generative answers' node in a topic. The node should generate a wine pairing recommendation, but responses must only use content from the winery's official pairing guide and must not speculate beyond it. Which prompt engineering technique should be applied in the node's prompt configuration?
• A Copilot Studio developer builds a 'Get Customer Profile' topic that collects a customer's account tier (Bronze, Silver, Gold) and stores it in a topic variable. A separate 'Process Discount' topic needs to read the account tier to calculate the appropriate discount. What is the correct way to pass the account tier between topics?
• A Copilot Studio agent at Wingtip Toys calls a live inventory API during checkout. The API is occasionally unavailable due to maintenance. The business requires that customers still complete checkout using cached inventory data rather than seeing an error. Which pattern implements graceful degradation?
• A developer adds a calendar scheduling MCP tool to a Copilot Studio agent. In generative orchestration mode, a user asks 'Can you book a meeting with Alex next Tuesday at 2pm?' The developer has not authored any topics about meeting scheduling. How does the agent handle this request?
• In a Copilot Studio multi-agent solution, the orchestrator agent collects the user's name and issue category before routing to a specialist agent. The specialist agent needs both pieces of information to provide a personalized response. How should the orchestrator pass this context to the specialist?
• A Copilot Studio developer configures two separate Generative answers nodes in the same agent — one for HR policies and one for IT policies. She wants each node to respond in a different tone (formal for HR, casual for IT) and use different knowledge sources. How should she configure this?
• A developer at Margie's Travel is building an agent where a user's travel preferences (seat preference, meal preference) should persist between separate conversation sessions — so the next time the user opens the agent, it remembers their preferences from last time. Which approach correctly implements cross-session persistence?
• A Copilot Studio agent at Wide World Importers crashes unexpectedly due to an unhandled exception not caught by any action node's OnError path. The current behavior is to display a generic platform error. The team wants a custom branded error experience. Which Copilot Studio configuration addresses this?
• A Copilot Studio developer at Northwind Traders wants the agent to display product search results as a structured card with an image, product name, price, and a 'Buy Now' button. Which node type should the developer use in the topic?
• A developer team at Fabrikam has built an orchestrator agent and three specialist agents in a Copilot Studio multi-agent solution. Before testing the full multi-agent flow, they want to validate that the Billing specialist agent handles all its scenarios correctly in isolation. What is the recommended testing approach?
• You are authoring a Copilot Studio topic that handles customer refund requests. You want the agent to present the user with three selectable options — 'Refund to original payment', 'Store credit', 'Exchange' — as clickable buttons rather than requiring the user to type. Which topic element should you add?
• A developer wants to add a Salesforce connector action to a Copilot Studio topic so the agent can look up lead records during a conversation. The Salesforce connector already exists as a Power Platform certified connector. What is the fastest path to add this as a callable tool in the topic?
• Your company has an internal API for managing IT service desk tickets that has no Power Platform certified connector. You need Copilot Studio agents to call this API. What must you create before the API can be added as a tool in a topic?
• Your team has built a specialized 'IT Helpdesk' Copilot Studio agent in a development environment. You want to reference this agent as a child agent from a new 'Company Portal' agent in the same production environment. What is the prerequisite for the Company Portal agent to invoke the IT Helpdesk agent?
• A parent Copilot Studio agent collects the user's name and department in its opening topic, then routes the conversation to a child HR agent. The child agent needs to know the user's department to personalize its responses. How is this context passed from parent to child agent?
• Your data science team has built a sophisticated AI agent in Azure AI Foundry that uses custom fine-tuned models and advanced RAG pipelines. The business wants to surface this agent's capabilities through the company's existing Copilot Studio deployment. What integration approach should you use?
• When configuring the connection between Copilot Studio and an Azure AI Foundry agent, which authentication mechanism is used to authorize Copilot Studio to invoke the Foundry agent?
• An agent author is deciding whether to use a Power Automate cloud flow or a native connector action when adding a tool to a Copilot Studio topic that needs to send an email notification after a refund is processed. Which scenario would make a Power Automate flow the BETTER choice over a native connector action?
• You have added multiple knowledge sources to a Copilot Studio agent (SharePoint, a website, and uploaded PDFs). Users complain the agent sometimes combines contradictory information from different sources in the same answer. Which setting helps prioritize one knowledge source over others?
• In a multi-agent Copilot Studio setup using generative orchestration, how does the parent agent determine when to route a user's message to a child agent versus handling it internally?
• An Azure AI Foundry agent integrated with Copilot Studio uses Azure AI Search as its knowledge grounding index. When a Copilot Studio user asks a question and the Foundry agent retrieves an answer, where does the search for relevant knowledge actually occur?
• You have built a Copilot Studio agent and now need to include it in a Power Platform solution so it can be deployed from development to test to production via pipelines. What must you do to include the agent in the solution?
• A Copilot Studio topic calls an action that requires three inputs: customer ID, product SKU, and order date. Instead of asking for each in separate turns, you want the agent to collect all three in a single conversational exchange if the user provides multiple pieces in one message. Which feature enables this?
• You add a plugin tool to a Copilot Studio agent that can retrieve customer account balances. Despite being configured correctly, the generative orchestrator rarely invokes the tool when users ask about their balance. What is the most likely configuration issue?
• You are building a Company Hub agent and want to reuse the existing 'Benefits Enrollment' agent that was built by the HR team. Rather than rebuilding the HR logic, you want the Company Hub agent to simply hand off relevant conversations to the Benefits agent. What configuration step enables this specific routing?
• A Copilot Studio agent retrieves a list of open IT tickets from a REST API action. You want to display each ticket as a visually formatted card (with title, status color, and a 'View Ticket' button) rather than a plain text list. What should you configure in the topic to achieve this?
• A Copilot Studio topic calls a Power Automate cloud flow and needs to use the flow's output in a subsequent condition node. The flow returns a string value called 'approvalStatus'. How does the topic access this returned value?
• You deploy a solution containing a Copilot Studio agent from the development environment to production. The deployment succeeds, but the agent fails to function correctly in production because it cannot call a connector action. What dependency was most likely missing from the solution package?
• A Copilot Studio topic calls an external REST API via an HTTP action. Occasionally the API returns a 503 (Service Unavailable) error. You want the agent to retry the call once before informing the user of a service outage. Which design approach achieves this?
• Your Copilot Studio agent uses an environment variable to store the base URL of a backend API. The development environment points to dev.api.contoso.com and production should point to api.contoso.com. When you deploy the solution from dev to prod, what happens to the environment variable value?
• A Copilot Studio agent needs to remember the user's language preference across multiple topics throughout a single conversation session. Which variable type should you use to store this preference?
• You deploy a Copilot Studio agent in Microsoft Teams for employees. You want the agent to access each employee's personal OneDrive files without requiring a separate login prompt within the conversation. Which configuration enables this silent authentication experience?
• An operations maker needs a Copilot Studio topic to create a Dataverse work order after the user confirms details. The team already has a Power Automate cloud flow that creates the work order. What is the correct way to invoke that flow from the topic?
• Wide World Importers receives PDF invoices by email and wants a Copilot Studio agent to help AP clerks extract vendor name, invoice number, and total. Which AI Builder approach best fits inside a Power Platform automation the agent can call?
• A maker adds a Twitter/X connector action inside a cloud flow used by a Copilot Studio agent. Saving the flow fails after a tenant DLP policy update. SharePoint remains usable in other flows. What is the most likely DLP-related explanation?
• A Copilot Studio solution must call a partner REST API that authenticates with an API key in a custom HTTP header. The team uses a Power Automate HTTP action (or custom connector) invoked from a topic. Where should the API key be stored for production?
• During a billing dispute topic, the user requests a live agent. The contact center uses a connected handoff system. What should the Copilot Studio topic do for an effective human handoff?
• Your LOB team exposes an internal REST API with an OpenAPI (Swagger) definition. You need Copilot Studio to call specific operations as tools. What is the recommended low-code approach?
• An agent must answer questions about active service contracts stored as Dataverse rows and sometimes update a contract status field. Which design split is most appropriate?
• You enable generative orchestration and add several tools (flows and connectors). The model rarely picks the "Create Support Ticket" tool. Which TWO improvements most directly help tool selection? (Choose two.)
• A credit team wants a score estimating likelihood a case needs specialist review, based on historical Dataverse features, displayed in the agent before escalation. Which capability fits better than generative answers alone?
• A topic calls a cloud flow to reserve inventory. The flow can fail when stock is insufficient or the API times out. What should the topic include?
• Developers can edit an agent in the maker portal, but frontline users only need to chat with the published agent in Teams. How should access generally be separated?
• Which Power Automate trigger type is appropriate for a flow that must run synchronously when a Copilot Studio topic action invokes it and return outputs to the conversation?
• A Power Platform admin must ensure Copilot Studio agents across environments cannot exfiltrate Dataverse customer data to unsanctioned consumer connectors. Which governance control is primary?
• A Copilot Studio developer is connecting an agent to Azure AI Search. The company's product catalog index has fields named 'productname', 'category', 'price', and 'description'. The agent needs to return only products in the 'Electronics' category, and results should be ranked by semantic relevance to the user's query rather than simple keyword matching. When configuring the Azure AI Search knowledge source, what two settings must be correctly configured to meet these requirements?
• A developer has built a Model Context Protocol (MCP) server that exposes inventory lookup tools for a Copilot Studio agent. The MCP server is hosted at https://api.contoso.com/mcp and requires Bearer token authentication. When registering this MCP server in Copilot Studio, which combination of values must be provided during the registration process?
• A retail company uses a Copilot Studio agent for customer service. Management requires that the agent automatically escalate to a live agent when: (1) the agent's confidence score falls below 50% on a customer's question, or (2) a customer explicitly says 'speak to a human' or similar phrases. A developer must implement both escalation paths. Which approach correctly implements both triggers?
• A Copilot Studio developer is building an HR agent that should dynamically answer questions from a SharePoint knowledge base without requiring a pre-built topic for every question. The agent should also fall back gracefully to a predefined response when no relevant information is found in the knowledge base. The developer enables generative answers. Which mode should be selected, and what fallback behavior should be configured?
• A company wants to deploy a Copilot Studio agent to Microsoft Teams so employees can interact with it inside the Teams client. A developer has finished building and testing the agent. When publishing to the Teams channel, which step is specifically required that is NOT required when publishing to the web chat channel?
• A Copilot Studio developer needs to integrate a Power Automate flow that creates a support ticket in ServiceNow whenever the agent collects a user's name, email, and issue description. The flow should receive these three values from the agent and return the created ticket number back to the agent to confirm to the user. Which approach correctly implements this integration?
• A developer is configuring a Copilot Studio agent that must access a user's Microsoft 365 calendar to book meetings on their behalf. The agent should use the signed-in user's identity rather than a service account, and the user should only have to authenticate once per session. Which authentication configuration achieves this?
• A manufacturing company wants their Copilot Studio agent to automatically extract the purchase order number, vendor name, and total amount from PDF invoices that customers upload during a chat session. A developer plans to use AI Builder for the extraction. What is the correct sequence to implement this capability?
• A developer configures Azure AI Search as a knowledge source for a Copilot Studio agent. After testing, users report that the agent often returns technically correct but poorly ranked results — a document mentioning the topic once near the end appears above a document that comprehensively covers it. The index already has a scoring profile based on field boost weights. What change would most directly improve result relevance ranking for natural language queries?
• A developer is building an MCP server that exposes a 'getOrderStatus' tool for a Copilot Studio agent. The tool takes an order ID (string, required) and a customer email (string, optional) as inputs and returns the order status. The developer must write the tool schema so the agent understands how to call it. Which JSON structure correctly defines this tool in the MCP server manifest?
• A financial services company uses Copilot Studio with Omnichannel for Customer Service. When an agent escalates to a live human agent, the live agent currently receives no context from the bot conversation — they must ask the customer to repeat everything. A developer must ensure the live agent receives the customer's name, account number, and a summary of the issue when the handoff occurs. What is the correct mechanism to pass this context during handoff?
• A Copilot Studio agent uses Classic mode with generative answers enabled and a company SharePoint site as the knowledge source. During testing, the developer notices that when a user asks a question completely outside the SharePoint content — such as asking about the weather — the agent generates a plausible but fabricated answer using its built-in AI knowledge rather than returning 'I don't know.' How should the developer prevent the agent from generating answers outside its authorized knowledge source?
• A developer publishes a Copilot Studio agent to the website channel and provides the embed code to the web team. After embedding the iframe on the company's public website (www.contoso.com), the chat widget does not load — the browser console shows a security error. The agent is also intended to be embedded on the company's internal portal (intranet.contoso.com). What must the developer configure in Copilot Studio to allow the agent to load on both sites?
• A Copilot Studio agent needs to integrate with two different backend systems: (1) a REST API that creates CRM leads in real time when a user provides contact information, and (2) a legacy Windows desktop application that processes refund requests through a local UI with no API. A developer is deciding which type of Power Automate flow to use for each integration. What is the correct choice?
• A Copilot Studio agent uses a custom connector to call a third-party weather service API that requires an API key passed as a query string parameter named 'apikey'. The developer must configure authentication for this connector so the API key is automatically appended to every request without exposing it in the topic designer or to end users. Which authentication type and configuration correctly implements this?
• A developer wants to use AI Builder to extract fields from employee expense report forms that have a consistent layout — same field positions and labels across all submissions. Expense reports arrive as uploaded image files (JPG) in a SharePoint library. Which AI Builder model type should be selected, and how many sample documents are typically needed to train an acceptable model for a fixed-layout form?
• A Copilot Studio agent provides HR policy answers from an Azure AI Search index. The index contains documents tagged with a 'department' field. During a conversation, the agent collects the user's department from their Azure AD profile. The developer wants search results to be automatically scoped to the user's department. However, when testing, results from all departments appear regardless of the user's department. What must be done to enable per-user department filtering?
• A developer registers an MCP server in Copilot Studio that exposes tools for reading and writing to a company's project management system. The MCP server uses OAuth 2.0 with scopes: 'projects.read' for read operations and 'projects.write' for write operations. The agent should only be able to read project data, never create or modify projects. How should the OAuth scopes be configured during MCP server registration?
• A healthcare company's Copilot Studio agent collects patient symptoms, medical history, and preferred appointment time before escalating complex cases to a nurse triage specialist. When the handoff occurs, the specialist must see the full conversation transcript plus the structured data (symptom list, history, preferred time) as labeled fields — not just the raw chat text. Which combination of Omnichannel for Customer Service features supports this requirement?
• A developer adds a generative answers node to a specific topic in a Copilot Studio agent to answer questions about product warranties. The node is configured to search a SharePoint document library. During testing, the agent successfully retrieves warranty information but displays citations as raw document URLs that include internal SharePoint path tokens — confusing for end users. The developer also notices responses sometimes include content from unrelated SharePoint libraries accessible to the service account. What two configuration changes address these issues?
• A company builds a customer-facing mobile app using React Native. They want to embed their Copilot Studio agent directly inside the mobile app so users can chat without leaving the app. The mobile app team cannot use an iframe (not supported in React Native). The agent must maintain session state and support rich responses including adaptive cards. Which deployment approach supports this requirement?
• An enterprise security team requires that a Copilot Studio agent authenticating to a high-security internal API use client certificate authentication instead of OAuth tokens or API keys. The certificate is managed by the company's PKI team and stored in Azure Key Vault. A developer must configure the integration so the agent sends the certificate with each API request. Which approach correctly implements client certificate authentication for the agent's API calls?
• A Copilot Studio agent is configured to answer questions about company IT policies stored in a SharePoint document library. The Azure AI Search index that powers the RAG pipeline was built last month. After HR updated 12 policy documents and uploaded three new ones two weeks ago, users are still receiving outdated answers based on the old policy content. The agent was not redeployed after the document changes. What is the most likely root cause of the stale responses, and which corrective action should the administrator take first?
• A legal department has deployed a Copilot Studio agent backed by a RAG pipeline over a corpus of 800 complex legal contracts, each averaging 45 pages. Users ask highly specific questions such as 'What is the penalty clause in the Northwind vendor contract for late delivery?' The agent currently uses fixed-size chunking at 512 tokens with 0 overlap, and users frequently report that answers are either incomplete or miss the relevant clause entirely. Which chunking strategy change would most directly improve retrieval accuracy for this specific legal use case?
• A solutions architect is evaluating whether a Copilot Studio computer-use agent can automate a complex onboarding workflow that involves four sequential tasks: (1) extracting new-hire data from an Excel spreadsheet, (2) entering that data into a legacy HR application that has no API or connector, (3) navigating to a web portal to generate a security badge request, and (4) sending a confirmation email in Outlook. The agent must complete all four tasks without human intervention. Which statement accurately describes a fundamental limitation the architect must address before approving this design?
• A security engineer is reviewing a Copilot Studio computer-use agent that automates invoice processing. The agent reads scanned invoice images from a shared network folder, extracts line items, and then enters the data into the company's ERP system using screen automation. During a threat modeling session, the engineer identifies that a malicious actor could embed hidden instructions inside a specially crafted invoice image to redirect the agent's actions. What is this attack vector called, and which primary mitigation should the engineer implement?
• An enterprise architect is selecting the right automation approach for four different business processes. The organization has Copilot Studio with computer-use agent capabilities, Power Automate with standard connectors, and the ability to build custom connectors. For which of the following scenarios is a computer-use agent the most appropriate and justifiable choice compared to the alternatives?
• A Copilot Studio developer is building an IT support agent. In a topic that collects the user's issue category, the developer needs to write a Power Fx condition that routes the conversation differently based on two variables: Topic.IssueType (a text variable that can be 'Hardware', 'Software', or 'Network') and Topic.Priority (a number variable from 1–5 where 5 is highest). The routing rule is: if the issue is Hardware or Network AND the priority is 4 or higher, route to the escalation branch; otherwise continue to the standard branch. Which Power Fx expression correctly implements this logic?
• A Copilot Studio developer is building an agent that retrieves a collection of employee records from a Dataverse table. The agent needs to display a formatted summary listing only employees whose department is 'Engineering' and whose salary exceeds 90000, sorted by last name, and showing only the FullName and Salary columns. The Dataverse table is named 'Employees' with columns: EmployeeID (number), FullName (text), Department (text), and Salary (number). Which Power Fx expression in a Parse value step correctly produces this formatted collection?
• A developer is designing a Copilot Studio agent that tracks IT support tickets. The agent must: (1) create new ticket records when users report issues, (2) update ticket status as the conversation progresses, (3) allow the help desk manager to run Power BI reports on ticket trends, and (4) enforce row-level security so that agents only see tickets assigned to them. The developer is choosing the Dataverse table type. Which table type is most appropriate for this scenario?
• A Copilot Studio agent is connected to a Dataverse environment and uses a service principal (application user) to read and write Customer records on behalf of employees. Employees should only be able to read and update Customer records they personally own. After deployment, the help desk reports that employees can view all Customer records in the organization, not just their own. The security role assigned to the application user grants Read access at the Organization level. What is the most targeted change that resolves the data visibility issue without breaking the agent's operational write capability?
• A developer is building a Copilot Studio agent that helps sales reps look up account information. The Dataverse environment has three related tables: Accounts (one), Contacts (many, with a lookup to Accounts), and Opportunities (many, with a lookup to Accounts). A sales rep asks the agent: 'Show me all open opportunities for Contoso Ltd.' The agent uses a Power Automate flow to retrieve the data. Which Power Fx expression in the flow's Dataverse 'List rows' action filter query most correctly returns only open Opportunities for the Contoso account using the relationship?
• An enterprise architect is designing a multi-agent system using the Agent2Agent (A2A) protocol. The system has an Orchestrator Agent that receives complex employee onboarding requests and must delegate to three specialized sub-agents: an HR Data Agent (creates Dataverse employee records), an IT Provisioning Agent (calls Azure AD Graph API to create accounts), and a Facilities Agent (submits a workspace ticket to ServiceNow). The orchestrator must collect results from all three sub-agents before sending a final confirmation. Which A2A interaction pattern and task-management approach best supports this architecture?
• A Copilot Studio orchestrator agent delegates a financial data retrieval task to a specialized Finance Sub-Agent using the A2A protocol. After dispatching the task, the orchestrator polls the task status endpoint. After 45 seconds, the task remains in the 'working' state. The SLA for the end-user response is 60 seconds. The Finance Sub-Agent's A2A capability card advertises a maxResponseTime of 30 seconds. What should the orchestrator do to comply with both the A2A protocol contract and the user SLA?
• A developer is integrating a Copilot Studio agent with ServiceNow as an enterprise knowledge source. The organization has 15 ServiceNow Knowledge Base articles in the 'IT Operations' category that should be searchable by the agent. Users are reporting that the agent returns correct answers for some IT articles but cannot find information from the most recently published 5 articles, even though those articles are marked 'Published' in ServiceNow. After investigating, the developer finds that the custom connector used to query ServiceNow is filtering with a hard-coded knowledge base sysid from the initial setup. What is the most complete corrective action?
• An enterprise is building a Copilot Studio agent that allows purchasing managers to query SAP for current purchase order status, vendor details, and open GR/IR (Goods Receipt/Invoice Receipt) items. SAP ECC is hosted on-premises. The organization has already deployed an on-premises data gateway. A developer needs to design the integration approach to expose relevant SAP data to the agent. Which integration architecture is most appropriate for this scenario?
• A Copilot Studio agent is being designed to integrate with a third-party expense management API that requires OAuth 2.0 authentication. Three different integration scenarios are under consideration: (A) The agent must call the expense API to submit expense reports on behalf of individual employees using their own identities; (B) A background agent must run nightly to consolidate all expense data for finance reporting, with no user interaction; (C) The organization manages the expense system and wants employees to log in using their corporate Entra ID credentials via federated identity. Which OAuth 2.0 grant type is most appropriate for each scenario respectively?
• A developer has built a Copilot Studio agent that calls a third-party weather API and a company-internal analytics API using separate API keys. During a security review, the reviewer finds that both API keys are stored as plain text in Power Automate environment variables of type 'Text' within the development environment. The organization is preparing to promote the solution to production. Which approach correctly secures API key management for this production deployment?
• A financial services company requires that its Copilot Studio agent authenticate to an internal high-security trading API using mutual TLS (mTLS) with a client certificate. The API validates both the server certificate and the client certificate on every request. The organization stores certificates in Azure Key Vault. A Power Automate premium flow is used to call the API. Which configuration correctly enables client certificate authentication for this API call within the Power Platform solution?
• A product manager wants to track a specific business event in a Copilot Studio agent: whenever a user successfully submits a vacation request through the agent (completing an entire multi-step topic), the event should be logged with the employee's department, the number of days requested, and whether it was flagged for manager approval. Copilot Studio's built-in analytics do not capture this level of business-context detail. Which approach correctly implements this custom event tracking using Azure Application Insights?
• A Copilot Studio agent guides employees through a five-step benefits enrollment process. The product team has configured custom events in Application Insights for each step: 'EnrollmentStarted', 'PlanSelected', 'DependentsAdded', 'ReviewCompleted', and 'EnrollmentSubmitted'. After one month of data, the product team wants to identify where most users abandon the process. Using Application Insights, which analysis method and KQL query approach would directly reveal the step-by-step drop-off rates between each enrollment stage?
• A healthcare organization is deploying a Copilot Studio agent that helps clinical staff access medical protocols stored in SharePoint. Due to regulatory requirements, physicians must only receive protocols relevant to their specialty (e.g., cardiologists cannot see oncology-only protocols). All documents are indexed in Azure AI Search. The agent uses Entra ID authentication and can identify the user's specialty from their Entra ID profile. Which RAG pipeline design ensures that protocol retrieval is filtered to the user's specialty at query time, without duplicating index content per specialty?
• A Copilot Studio developer needs to write a Power Fx formula in an agent topic's variable assignment step. The formula must find the most recent open service ticket in the Dataverse 'ServiceTickets' table for a specific customer (stored in Topic.CustomerID as a GUID), where the ticket's 'Priority' column is either 'High' or 'Critical', and return only the ticket's 'TicketNumber' text value. The ServiceTickets table has columns: TicketID (GUID), TicketNumber (text), CustomerID (lookup to Customers), Priority (choice), Status (choice, 'Open'=1), and CreatedOn (datetime). Which Power Fx formula correctly implements this logic?
• An enterprise has two agents: a General Procurement Copilot Studio Agent (GPCA) that handles employee procurement requests, and a specialized SAP Procurement Agent (SPA) built on Azure AI Foundry that directly integrates with SAP S/4HANA via the SAP Business Technology Platform APIs. The GPCA needs to delegate purchase order creation tasks to the SPA using the A2A protocol. The SPA's AgentCard is published at https://sap-agent.contoso.internal/agent. During testing, the GPCA successfully retrieves the SPA's AgentCard but receives a 403 Forbidden response when attempting to submit tasks. What is the most likely cause and resolution?