plan-and-configure-agent-solutions

Microsoft Certified: AI Agent Builder Associate · 117 questions

• Meridian Logistics needs a Copilot Studio agent that can query SAP ERP to retrieve real-time shipment status and update delivery records. The SAP system is hosted on-premises behind the corporate firewall. The development team wants to avoid writing custom code and prefers a supported, low-code connector approach. Which connector type should the team configure in Copilot Studio to integrate with SAP?
• Northwind Bank is building an unattended Copilot Studio agent that runs on a schedule to read from Azure Blob Storage and write summarized results to Azure SQL Database. No human interaction occurs during the agent's run. The security team mandates that no client secrets or certificates be stored in application settings or environment variables. Which Entra ID identity strategy should the solution architect recommend?
• Fabrikam Manufacturing has deployed a Copilot Studio agent to Microsoft Teams for internal employees. They now want external partners — vendors who have been added as guest users in Fabrikam's Entra ID tenant — to also be able to interact with the agent from within Teams. The Teams administrator needs to enable this capability. Which Teams channel setting must be configured to allow guest users to interact with the Copilot Studio agent?
• Alpine HR Solutions is building a Copilot Studio agent that allows employees to query their own leave balances and submit time-off requests through a third-party REST API. The HR system supports OAuth 2.0 and the agent must access data on behalf of the signed-in employee — not as a background service. The agent is deployed in the Microsoft Teams channel where employees are already authenticated with their corporate identity. Which OAuth 2.0 flow should the team configure for the agent's connection to the HR REST API?
• Contoso Retail has built a Copilot Studio agent that helps employees navigate internal HR policies. The communications team wants to embed the agent directly on the company intranet so employees can chat with it without leaving SharePoint. The agent has already been published in Copilot Studio. What is the correct method to embed the agent on a SharePoint Online page?
• Global Shipping Co. is designing a Copilot Studio agent for their IT help desk. The agent must read open incidents from ServiceNow and create new incidents when a user reports an issue. The team wants to use the most purpose-built, officially supported connector available within the Power Platform ecosystem rather than building a custom HTTP integration. The ServiceNow instance is cloud-hosted. Which connector approach should they choose?
• A developer at Pacific Telco is building a Copilot Studio agent for customer self-service. When a customer starts a conversation, the agent should display a welcome message, ask what kind of help they need, and then route them to the appropriate topic based on their response. The developer is designing the opening topic flow. Which combination of node types should the developer use to implement this greeting and initial routing?
• Westlake Insurance is deploying a Copilot Studio agent for claims inquiries. The business team has defined three escalation triggers: (1) the customer explicitly asks to speak with a human, (2) the agent has failed to resolve the customer's issue after two reprompts, or (3) the conversation involves a claim amount over $50,000. The developer needs to implement this human-in-the-loop logic. Which Copilot Studio capability should the developer primarily use to handle all three of these escalation triggers?
• A developer at Summit Retail is building a Copilot Studio agent that needs to look up a customer's order status. The lookup logic is already built as a Power Automate cloud flow that accepts an order number as input and returns the status as output. The developer needs to wire this flow into a Copilot Studio topic so that when the customer provides their order number, the agent calls the flow and presents the result. What are the correct steps to add this cloud flow as an action in the topic?
• A developer at Redwood Financial is building a Copilot Studio agent that delivers investment product summaries to advisors via Microsoft Teams. The summaries include bold headings, bullet-point lists, and hyperlinks to product documents. The developer wants the formatting to render properly in the Teams chat window rather than displaying as raw symbols. Which Send Message response type should the developer configure in the topic node to support this formatted output?
• Pinecrest Energy runs a Copilot Studio agent that generates nightly compliance reports by reading data from Azure Data Lake Storage Gen2 and writing results to a SharePoint document library. The agent runs on a schedule with no user interaction. A junior developer suggests authenticating the agent's Power Automate flows using a shared service account (a licensed user in Entra ID) with delegated OAuth tokens. The architect disagrees. Which is the most compelling reason to prefer a service principal over a user-delegated token in this scenario?
• BlueStar Retail wants to deploy a Copilot Studio agent to a custom-built iOS and Android mobile app used by field sales representatives. The mobile app is built with React Native and is distributed through the company's MDM solution. The product manager asks whether the agent can display Adaptive Cards with interactive form controls inside the custom mobile app. Which statement about deploying Copilot Studio agents to custom mobile apps is accurate?
• A developer at Ironwood Bank is building a Copilot Studio topic that assists customers with account inquiries. The topic uses an Ask a Question node with three multiple-choice options: 'Check Balance', 'Recent Transactions', and 'Report a Lost Card'. The customer's choice is stored in a variable named CustomerChoice. The developer needs to route each choice to a different sub-flow. Which node and configuration should the developer add immediately after the Ask a Question node to implement this routing?
• A developer at Horizon Healthcare is building a Copilot Studio agent that allows clinical staff to submit patient intake information — including text fields, a dropdown for department, and a date picker — directly within the chat window. The form data needs to be collected and passed to a Power Automate flow for processing. Which response type in Copilot Studio should the developer use to implement this interactive form within the conversation?
• Quantum Dynamics is designing a Copilot Studio agent for procurement staff. When a purchase order is flagged in SAP (on-premises), the agent must automatically create a corresponding ServiceNow change request and notify the procurement manager via Teams. The architect must design the integration layer. SAP requires the on-premises data gateway; ServiceNow is cloud-hosted. Which integration architecture best meets all three requirements with the least custom development?
• Parkway Insurance has deployed a Copilot Studio agent integrated with Dynamics 365 Customer Service omnichannel. When the agent escalates to a live agent, the human agent receives no context about the prior conversation, forcing them to ask the customer to repeat everything. The developer needs to configure the escalation node to pass a summary and key variables to the live agent's queue. Which properties of the Transfer to Agent node should the developer configure to resolve this problem?
• Silverstone Legal's security team is reviewing the OAuth 2.0 scopes requested by a new Copilot Studio agent. The agent only reads case documents from SharePoint Online document libraries — it never creates, modifies, or deletes any content. The current app registration requests 'Sites.FullControl.All' and 'Files.ReadWrite.All' from Microsoft Graph. The security team has flagged this as over-privileged. Which minimum set of Microsoft Graph OAuth scopes should the developer configure to satisfy the principle of least privilege for this read-only agent?
• Northwind Traders is planning to deploy a Copilot Studio agent for their HR department. They have three Power Platform environments: Development, Test, and Production. The HR team wants to experiment with new agent features without affecting the live production agent used daily by employees. Which approach should the solution architect recommend?
• Contoso Bank is deploying a Copilot Studio agent that helps customers understand loan eligibility. The compliance team requires that users always know when the response is AI-generated and be able to request a human review. Which responsible AI principle is the compliance team most directly enforcing?
• A company wants to deploy a Copilot Studio agent on their internal SharePoint intranet site accessible to 500 employees. The IT manager asks which licensing model applies to this scenario. Which statement correctly describes the licensing for internal users accessing a Copilot Studio agent embedded on SharePoint?
• Fabrikam HR is building a Copilot Studio agent to pre-screen job applicants. During testing, the team notices that the agent consistently ranks applicants from certain zip codes lower than equally qualified candidates from other areas. Which responsible AI principle should the team prioritize to address this issue?
• Adventure Works is deploying a customer service agent in Copilot Studio to handle refund requests up to $500. For refund requests exceeding $500, a human agent must review and approve. Which Copilot Studio feature should the architect configure to implement this human oversight requirement?
• A solution architect is planning authentication for a Copilot Studio agent that needs to call an Azure Function. The team wants to avoid storing credentials or rotating secrets manually. Which authentication approach best meets this requirement?
• Fabrikam wants to deploy their Copilot Studio IT support agent to be available to employees both inside Microsoft Teams and on the company's external customer support portal website. Which deployment approach should the team use?
• Northwind Traders has five different Copilot Studio agents — one each for Sales, HR, IT, Finance, and Legal departments. All five agents need to handle the same 'Office Location Lookup' functionality. The team wants to avoid maintaining five separate copies of this topic. What is the recommended approach?
• A developer is building a Copilot Studio agent that calls an external API. The API base URL differs between development (https://api-dev.contoso.com) and production (https://api.contoso.com). The developer wants to manage this difference without modifying the agent's topics or flows when promoting between environments. What is the recommended approach?
• A solutions architect at Lamna Healthcare is designing a Copilot Studio implementation for 12 agents across different clinical departments. She wants to establish a governance model for reusable components. Which combination of items can be stored and reused from a Copilot Studio component library?
• Blue Yonder is building two Copilot Studio agents: Agent A is for internal employees who are already signed into Microsoft 365, and Agent B is for external customers who have no Microsoft account. Which authentication configuration should be used for each agent?
• A company runs an on-premises SQL Server database that contains product inventory data. A Copilot Studio agent needs to query this database to answer customer questions about product availability. The SQL Server is behind a corporate firewall with no inbound internet access. What is the required network component to enable this integration?
• A developer at Contoso is configuring a Copilot Studio agent for internal use by employees. The agent needs to read the signed-in user's calendar from Microsoft Graph. Which authentication setting in Copilot Studio enables this scenario?
• A Power Platform developer is creating a new Copilot Studio agent that will eventually be promoted to production using ALM pipelines. What is the recommended first step to ensure the agent is properly included in the ALM lifecycle?
• A development team is planning an agent that needs to store customer ticket data collected during conversations and allow other Power Apps to read that data. Which storage solution should they use to align with Power Platform best practices?
• Tailspin Toys is launching a customer-facing Copilot Studio agent on their public website. Customers sign in using their existing Tailspin loyalty account (managed in a third-party identity provider). Which steps are required to configure custom authentication for this agent?
• A Power Platform administrator has created a DLP policy that places the HTTP connector in the 'Blocked' data group for the production environment. A developer reports that a Copilot Studio agent topic that previously made direct HTTP requests to an external REST API is now failing. What is the correct explanation and resolution?
• The enterprise architecture team at Woodgrove Bank is defining governance for their Copilot Studio Center of Excellence. They want to ensure that when a shared topic in the component library is updated, all dependent agents are notified so they can test and validate before the change goes live in production. Which approach best supports this governance requirement?
• A developer needs a Power Automate flow to look up a customer's order status. The Copilot Studio topic collects the order number from the user and must pass it to the flow. How should the developer pass the order number to the flow?
• A Copilot Studio agent uses Entra ID authentication and accesses Dataverse tables to retrieve employee records. An HR manager reports that employees can chat with the agent but receive 'access denied' errors when the agent tries to look up their own records. Which configuration is most likely causing this error?
• A Copilot Studio topic calls a Power Automate flow to retrieve a customer's account balance. After the flow runs, the topic must display the balance in a message to the user. What is the correct way to receive the balance from the flow back into the topic?
• Pacific Airlines wants to add a Copilot Studio agent to their public booking website. Most visitors are anonymous (not logged in) and should be able to ask flight schedule questions without signing in. Only a small subset of interactions (like retrieving a booking) require the user to authenticate. Which configuration approach is correct?
• A Copilot Studio agent for Contoso's internal IT helpdesk is deployed via the Microsoft Teams channel. An employee opens the agent in Teams and immediately receives a personalized greeting using their display name, without any login prompt. Which capability makes this possible?
• Datum Corporation is building a Copilot Studio agent that handles customer complaints. During conversations, customers often share personal details (SSN, address) that are not needed to resolve the complaint. The architect must ensure the agent handles this data responsibly. Which approach best implements the Privacy responsible AI principle?
• VanArsdel Ltd. needs to build an AI solution where a primary customer-facing agent routes incoming requests to specialized agents: one for billing, one for technical support, and one for account management. Which Copilot Studio architectural pattern should the solution architect recommend?
• Proseware Inc. is establishing a governance framework for Copilot Studio agents used in customer-facing financial decisions. The legal team requires that every AI-influenced decision have a named human responsible for reviewing edge cases and appeals. Which responsible AI principle does this requirement reflect?
• A Copilot Studio agent uses a SharePoint site URL that differs between the Development, Test, and Production environments. The developer wants to avoid hardcoding the URL in the agent and needs it to change automatically when the solution is deployed to each environment. What is the correct approach?
• Your organization wants to deploy a Copilot Studio agent that can autonomously log into an internal web portal, fill out a time-entry form, and click Submit — all without human assistance. Which capability must you enable in Copilot Studio to allow the agent to perform these desktop and browser interactions?
• A compliance officer asks you to review what actions a computer-use agent took during a session last Tuesday, including every URL it visited and every button it clicked. Where in the Microsoft ecosystem can you find this session-level audit trail for computer use activity?
• You want to give your Copilot Studio agent the ability to look up product inventory by calling your company's existing REST API. The API has a published OpenAPI 3.0 specification file. What is the most direct method to add this API capability to your agent?
• While configuring an HTTP action for a Copilot Studio agent to call a third-party REST API, you need to pass an API key in the request header. The key must not be visible to agent authors in plain text. Which authentication configuration should you use?
• Your IT security team wants to prevent Copilot Studio agents in the HR environment from sending data to any social media connectors, while still allowing agents to use SharePoint and Microsoft Teams connectors. Which Power Platform governance tool should you configure?
• Your legal department requires that any document summary produced by a Copilot Studio agent that contains confidential contract data must automatically be labeled as 'Confidential – Legal' and have encryption applied. Which Microsoft technology enables this automatic labeling on agent outputs?
• A European financial institution must ensure that all Copilot Studio agent conversation data remains within the European Union and never crosses to US-based Azure regions. Which configuration satisfies this data residency requirement?
• You are importing a company REST API into Copilot Studio using the OpenAPI specification. During import, Copilot Studio rejects the spec with a validation error. Which of the following is a documented requirement for OpenAPI specs imported into Copilot Studio?
• A manager asks you to describe what a computer-use agent in Copilot Studio can realistically do. Which combination of actions is within the scope of computer use capability?
• Your Copilot Studio agent is deployed on both the public company website (unauthenticated) and the internal Microsoft Teams channel (authenticated). From a security governance perspective, which statement correctly describes a key difference in what these two deployments should be allowed to do?
• You are configuring a Copilot Studio agent to answer employee questions using your company's SharePoint intranet. After adding the SharePoint site as a knowledge source, employees report that the agent sometimes returns information from pages they should not have access to. What is the correct approach to resolve this security issue?
• A project manager wants to upload a collection of internal process documents directly to a Copilot Studio agent as a knowledge source. Which file format is NOT supported for direct upload as a knowledge source in Copilot Studio?
• Your Copilot Studio agent is configured with a SharePoint knowledge source and generative answers enabled. A user asks a question that is not covered by any document in the knowledge source. What is the default behavior of the agent?
• Your security architect raises a concern: if a computer-use agent visits a malicious website during an automated session, could malware on that site compromise your corporate network? Which design feature of Copilot Studio computer use specifically addresses this threat?
• Users report that your Copilot Studio agent frequently returns answers that are technically correct but cite only a small fragment of a larger document, missing important context from surrounding paragraphs. Which knowledge source configuration adjustment should you evaluate?
• After adding a REST API action to your Copilot Studio agent, you need to pass the user's employee ID (collected earlier in the conversation) to the API's query parameter and store the API's JSON response field 'employeeLevel' in a topic variable for later use. Where in the Copilot Studio authoring canvas do you configure this input/output mapping?
• Contoso HR is building a Copilot Studio agent for employee leave requests. The agent must reliably open the Leave Request topic when users say things like "I need time off," "book PTO," or "schedule vacation." A maker notices that "can I take Friday off" sometimes falls to the fallback topic instead. Which change most effectively improves intent coverage for this topic without broadening it to unrelated HR questions?
• Fabrikam Legal wants generative answers in Copilot Studio grounded only on an internal SharePoint knowledge library of approved policies. Users must not receive model answers invented from general training data when no policy chunk is found. Which configuration best meets this requirement?
• Adventure Works is publishing an internal HR Copilot Studio agent to employees. The agent must identify the signed-in user so it can personalize leave balances and must not allow anonymous public access. Which authentication approach should they configure for end users?
• Northwind Traders finished building a Copilot Studio agent for field technicians and wants employees to use it inside Microsoft Teams. What must the team do to make the agent available as a Teams bot for the organization?
• An agent uses a SharePoint Online document library as a knowledge source for benefits FAQs. After go-live, some employees report the agent cannot answer questions that are clearly covered in documents they can open in the browser. Makers can see the files when browsing SharePoint as site owners. What is the most likely cause related to knowledge access design?
• You are authoring a "Report damaged shipment" topic. Before creating a case, the agent must collect shipment ID (string) and damage severity (a fixed list: Minor, Major, Total loss). Which topic design best collects both values reliably?
• A product owner asks when to enable generative orchestration for a Copilot Studio agent versus relying primarily on classic topic trigger phrases. Which statement best guides the decision?
• Users occasionally ask questions outside the agent’s scope. The business wants a polite message, optional suggested topics, and an escalation path — not a silent failure. Which system capability should you customize?
• You are planning a Teams-channel Copilot Studio agent that shows Adaptive Cards for order status and performs actions that call Dataverse as the signed-in user. Which TWO requirements are most important for this design? (Choose two.)
• Multiple topics need the same "verify employee ID" conversation steps before continuing. What is the best authoring pattern in Copilot Studio?
• A public-facing FAQ agent should answer only from the company’s support website product pages under https://support.contoso.com/products/. Makers enabled a website knowledge source but the agent cites blog posts from another path on the same domain. What should they adjust first?
• A maker stores a customer’s loyalty tier in a variable during the Greeting topic and needs that value in a later Returns topic without asking again. Which variable scope should they use?
• Woodgrove Bank wants generative answers to be concise, cite policy names when available, and refuse investment advice outside published FAQs. Where should makers primarily encode these constraints for generative answers?
• In a claims topic, after collecting Topic.ClaimAmount (number), you must route amounts over 10,000 to a supervisor escalation branch. Which approach is correct?
• A maker wants to upload internal process documentation as file knowledge for an agent. Which set is most appropriate for direct file upload knowledge sources?
• Contoso invites vendor guest users in Teams and wants them to use an internal Copilot Studio agent that reads confidential HR policies from SharePoint. What is the primary risk if guests are granted agent access without redesign?
• Topic A redirects to Topic B to calculate a shipping quote. Topic B needs weight and destination from A and must return quoteAmount to A. How should variables be designed?
• When generative answers find no relevant chunks in configured knowledge sources, what is the preferred enterprise behavior?
• Marketing wants to embed the Copilot Studio web chat on https://www.contoso.com but not allow arbitrary third-party sites to host it. What security configuration matters for the web channel?
• An agent has both a SharePoint policy library and uploaded FAQ PDFs that sometimes overlap. Users get conflicting answers. What is a sound governance approach?
• Users free-type product codes that must match a known catalog of 50 SKUs before ordering. What is the best Copilot Studio collection strategy?
• A public web agent for product FAQs must reduce harmful or abusive user inputs and unsafe model outputs. Which statement best reflects a responsible configuration approach?
• Three departmental agents need the same "reset MFA" guidance topic maintained once. What Power Platform approach supports reuse?
• A Copilot Studio developer is building an internal IT support agent. When users submit a hardware request form via an adaptive card, the agent must capture the selected asset type and urgency level, then route the request to the correct fulfillment topic. Which adaptive card element type and action type should the developer configure to ensure input values are passed to the topic?
• A company is deploying a Copilot Studio agent to answer employee questions from a large internal knowledge base. The product owner wants the agent to dynamically select the best source—whether a knowledge base article, a Power Automate flow, or a topic—to answer each question without requiring explicit topic triggers. Which node type and mode should the developer configure to achieve this behavior?
• A developer is connecting a Copilot Studio agent to an existing Azure AI Search index that contains product documentation. The index has fields for 'title', 'content', 'category', and 'lastModified'. When configuring the Azure AI Search knowledge source in Copilot Studio, which field mapping is required to ensure the agent can surface document answers correctly?
• A financial services company is building a Copilot Studio agent for internal employees only. The agent must verify that users are authenticated corporate employees before allowing them to query sensitive HR data, and employees should not be prompted to sign in separately—they are already signed in via their corporate Azure AD credentials. Which authentication configuration should the developer select?
• An organization wants to deploy a Copilot Studio agent to Microsoft Teams so that employees can interact with it directly in their Teams client. The agent must appear in the Teams app store for the corporate tenant and should be installable by employees without requiring them to navigate to an external website. Which deployment step must the developer complete after publishing the agent in Copilot Studio?
• A developer wants to extend a Copilot Studio agent with tools hosted on an external MCP (Model Context Protocol) server. The MCP server exposes a weather lookup tool and a calendar scheduling tool. To register this MCP server in Copilot Studio, what information must the developer provide during configuration?
• A Copilot Studio developer is designing an adaptive card for a leave request form. The form must collect: (1) a start date, (2) an end date, (3) the leave type from a predefined list, and (4) a brief reason in free text. The developer wants to use the most semantically appropriate input elements for each field. Which combination of adaptive card input elements is the best match?
• A Copilot Studio agent is configured with a Generative answers node connected to a company SharePoint knowledge base. During testing, users ask questions outside the scope of the SharePoint content—the agent either confabulates an answer or returns an unhelpful 'I don't know' response. A developer must configure the agent to gracefully handle out-of-scope questions by escalating to a live agent. Which configuration best addresses this requirement?
• A developer has connected a Copilot Studio agent to an Azure AI Search index containing thousands of technical support articles. Users report that search results are often keyword-matched but not contextually relevant—for example, a question about 'printer not connecting to WiFi' returns articles about WiFi routers instead of printer troubleshooting guides. Which Azure AI Search configuration should the developer enable to improve the contextual relevance of retrieved results?
• A developer has registered an MCP server in Copilot Studio that exposes an 'inventory-lookup' tool. During testing, the agent fails to pass the correct parameters to the tool, and the tool returns errors. The developer reviews the MCP server's tool schema and discovers the schema is missing the 'required' array for its input parameters. What is the impact of omitting the 'required' array in an MCP tool schema, and how should it be fixed?
• A developer is configuring a Copilot Studio agent that should retrieve answers from an internal SharePoint site containing company policies. The SharePoint site is restricted to authenticated employees only. The agent must respect SharePoint's existing permissions—employees should only see content they are individually authorized to access. Which configuration enables this user-level permission trimming when using SharePoint as a knowledge source?
• A retail company wants to embed a Copilot Studio customer service agent on their public-facing e-commerce website. The security team requires that the agent only loads on domains owned by the company and cannot be embedded on unauthorized third-party sites. Which Copilot Studio channel configuration setting enforces this domain restriction?
• A Copilot Studio developer is building an agent deployed in Microsoft Teams. The agent sends an adaptive card with an approval request to a manager. When the manager clicks 'Approve' or 'Reject', the card must update in-place in the Teams chat (without sending a new message), and the response must be sent back to the agent for processing. Which action type should the developer use in the adaptive card to enable this in-place card refresh behavior in Teams?
• A compliance-focused insurance company is building a Copilot Studio agent to answer customer questions about policy coverage. The legal team requires that the agent only answer from pre-approved knowledge sources, that it never infers or synthesize answers beyond what is explicitly stated in those sources, and that all AI-generated content can be traced back to a specific document. Which Generative answers configuration best meets these requirements?
• A SaaS company uses a single Azure AI Search index containing documents from multiple customer tenants. Each document in the index has a 'tenantId' field. A Copilot Studio agent is deployed for each tenant, and each agent must only return search results belonging to its own tenant. Which Azure AI Search feature should the developer use to enforce this per-tenant data isolation at query time?
• A developer has registered an external MCP server in Copilot Studio that provides access to a company's CRM system. The CRM API requires OAuth 2.0 authorization, and the tools should only access CRM records on behalf of the signed-in user (not a shared service account). During testing, the agent is calling CRM tools using the developer's credentials even after other employees test it. What configuration change is needed to ensure each user's CRM access is scoped to their own identity?
• A logistics company wants to deploy a Copilot Studio field operations agent to their custom iOS and Android mobile app used by truck drivers. The mobile app is built natively and does not use a browser or Microsoft Teams. The agent must be accessible within the native app experience, with the mobile app handling the UI and passing user messages to the agent. Which Copilot Studio channel and integration approach should the developer use?
• An enterprise architect at a financial services company needs to design a Copilot Studio solution where a customer-facing agent must hand off specialized tasks to a compliance agent and a billing agent. The compliance agent must operate independently and should not be aware of the billing agent's operations. The solution must support asynchronous task completion and return results to the customer-facing agent. Which Agent2Agent (A2A) protocol pattern best supports this architecture requirement?
• A retail company is building a Copilot Studio multi-agent solution. An intake agent receives all customer messages and must route them to one of three specialized agents: a returns agent, an order-tracking agent, or a product-recommendations agent. The routing decision must be based on the semantic meaning of the customer's message, not keyword matching. The intake agent must also maintain conversation context so routed agents can access prior turns. Which design approach satisfies both requirements?
• A developer is building a Copilot Studio agent topic that retrieves a list of open support tickets for a user from a Dataverse table. The topic must store all returned records in memory, filter to show only tickets with Priority equal to 'High', and display the count of filtered tickets to the user in a message node. The agent must perform all of this without calling an external flow. Which Power Fx approach in the topic's variable assignment node correctly accomplishes all three operations?
• A healthcare organization is deploying a Copilot Studio agent that accesses patient records stored in Dataverse. The agent must read patient demographic data but must not be able to create, update, or delete any records. Different departments will use the same agent, but clinical staff should see full demographic records while administrative staff should see only name and contact information. Which Dataverse configuration approach correctly enforces both requirements?
• An IT operations team wants their Copilot Studio agent to answer employee questions using content from their ServiceNow knowledge base. The agent must only surface articles from knowledge bases marked as 'Public' in ServiceNow, and answers must include a citation link back to the source article. The connection must authenticate using the ServiceNow service account credentials stored in the organization's key vault. Which configuration sequence correctly implements this integration?
• A pharmaceutical company is deploying a Copilot Studio agent for external customer interactions. The company's AI governance policy requires that all agent responses be reviewed for safety before reaching customers, that any response flagged as potentially harmful be blocked and replaced with a predefined safe response, and that all flagged interactions be logged for compliance review. The solution must not require custom-built moderation code. Which Copilot Studio configuration combination satisfies all three governance requirements?
• A developer needs to configure a Copilot Studio agent deployed in Microsoft Teams so that it accesses the user's own Microsoft 365 calendar data. Each user should see only their own calendar events, not a shared service account's calendar. The connection must use the user's identity at runtime without requiring them to re-enter credentials each session. Which authentication configuration achieves this requirement?
• A Power Platform administrator has enforced a Data Loss Prevention (DLP) policy that places the Salesforce connector in the 'Blocked' group and the SharePoint connector in the 'Business' group. A developer then creates a Copilot Studio agent that uses a Power Automate flow calling both the Salesforce and SharePoint connectors. The developer publishes the agent and users begin testing. What is the impact of the DLP policy on this agent?
• A developer is building a Copilot Studio agent that retrieves customer account data from Dataverse. The Customer table has a one-to-many relationship with the Orders table (one customer can have many orders). The developer needs to write a Power Fx expression in an agent topic variable assignment to retrieve all orders for the currently identified customer and store them in a variable. The customer's account ID is stored in a topic variable named varCustomerID. Which Power Fx expression correctly traverses the relationship and retrieves the related orders?
• A financial services company must demonstrate to regulators that their Copilot Studio agent never provides investment advice and that all agent conversations are retained for seven years for audit purposes. The compliance team also requires that a human reviewer be notified immediately when the agent declines to answer a topic due to responsible AI policy. Which combination of Copilot Studio and Power Platform features satisfies all three compliance requirements?
• A Copilot Studio developer needs to build an agent topic that retrieves a list of pending approval requests from a Dataverse table, adds a computed field called 'DaysOverdue' to each record based on the difference between today's date and the RequestDate column, and stores the enriched records back into a variable. The DaysOverdue field does not exist in the Dataverse table. Which Power Fx approach correctly adds a computed column to the existing records and stores the result?
• A manufacturing company wants to integrate their SAP S/4HANA system with a Copilot Studio agent so employees can query production order status through natural language. The SAP system exposes OData APIs and is hosted on-premises behind the corporate firewall. The company does not want to expose SAP APIs directly to the internet. Which integration architecture enables the agent to securely access SAP data without direct internet exposure of the SAP endpoint?
• A solutions architect is designing a worker agent in a multi-agent Copilot Studio solution. The worker agent is responsible for processing document summarization requests from an orchestrator agent. The worker must accept structured input (document URL and summary length preference), perform the summarization using generative AI, and return a structured result to the orchestrator. The worker should not expose any conversational interface to end users. Which design elements are required when configuring the worker agent?
• A government agency is integrating a Copilot Studio agent with an internal REST API that enforces mutual TLS (mTLS) authentication. The API requires that the calling client present a valid client certificate signed by the agency's internal Certificate Authority. The certificate and private key are stored in Azure Key Vault. The agent must authenticate using this certificate without storing it in any environment variable or configuration file. Which implementation approach supports mTLS client certificate authentication for this scenario?
• An enterprise is designing a Copilot Studio multi-agent solution for an HR department. A front-door agent must handle all incoming employee requests. Requests related to benefits should go to a Benefits agent, requests about payroll should go to a Payroll agent, and requests about leave management should go to a Leave agent. Requests that don't clearly match any category should be handled by the front-door agent itself using generative AI answers from an HR knowledge base. The three specialized agents already exist and are published. Which front-door agent configuration achieves this design?
• A Power Platform administrator is reviewing a DLP policy that has the Microsoft Dataverse connector in the 'Business' group and the Twitter (X) connector in the 'Non-business' group. A developer creates a new Copilot Studio agent topic that uses a Power Automate flow. The flow reads employee salary data from Dataverse and then posts a summary to a corporate Twitter account for a social media campaign. The admin has not changed the DLP policy. What happens when the developer tries to save and publish the Power Automate flow?
• A developer is building a Copilot Studio agent that connects to a third-party weather data API. The API requires an API key for authentication. The security team mandates that the API key must not be embedded in topic code, must not be visible to Copilot Studio makers in the environment, and must be rotatable without requiring changes to the agent or its flows. Which approach satisfies all three security mandates?