Microsoft Agentic AI Business Solutions Architect (AB-100) · 46% practice allocation

Microsoft AB-100: Deploy AI-powered business solutions Practice Questions

5 free sample questions from the Deploy AI-powered business solutions domain, with answers and explanations. The full AB-100 bank has 45 questions across 3 domains. Questions are scenario-based and written from the official Microsoft exam guide.

1.

Northwind Traders operates in the European Union and is deploying a Dynamics 365 Copilot feature. The data residency compliance team wants to validate that customer data processed by AI features does not leave the EU data boundary. Which TWO actions should the architect take to validate data residency compliance?

  • A. Configure a Conditional Access policy in Microsoft Entra ID that blocks sign-ins from non-EU IP addresses
  • B. Enable Azure DDoS Protection Standard on the tenant's virtual networks to prevent data from being routed outside the EU
  • C. Review the Microsoft Product Terms and the Data Protection Addendum (DPA) to verify that the specific Copilot feature's data processing commitments cover EU data residency for the tenant's subscription✓ Correct
  • D. Apply an Azure Policy that denies resource deployment outside of West Europe and North Europe regions across the entire Azure subscription
  • E. Confirm that the Power Platform environment is provisioned in an EU-region geography and that the 'Move data across regions' setting is disabled in the Power Platform admin center for that environment✓ Correct
Explanation

Provisioning the environment in an EU geography and disabling cross-region data movement is the platform-level control that keeps data processing within the EU boundary for Power Platform and Dataverse workloads. Reviewing the Microsoft Product Terms and DPA validates Microsoft's contractual commitments for the specific Copilot feature — essential for compliance assurance when data is processed by Microsoft-hosted AI services. Azure Policy on Azure regions governs IaaS/PaaS resource deployment and does not control where Power Platform or Dynamics 365 SaaS features process data. DDoS Protection Standard protects against volumetric network attacks and has no effect on data residency. Conditional Access IP-based policies restrict which users can authenticate — they do not control where Microsoft's backend services process AI workloads.

2.

A Power Platform architect is designing the ALM process for custom connectors used by a Copilot Studio agent solution that will be deployed across 15 customer tenants. Which TWO practices should be mandated in the ALM process to ensure consistency and security across tenants?

  • A. Include automated OpenAPI schema validation in the CI/CD pipeline to detect breaking changes to connector endpoints before deployment✓ Correct
  • B. Store custom connector definitions as solution components in source control and deploy them as part of a managed solution, so the connector schema is locked in each tenant's production environment✓ Correct
  • C. Use a single shared API key embedded in the connector definition for all 15 tenants to simplify credential management
  • D. Require tenant administrators to manually recreate connector configurations in each environment using the Power Platform admin center UI
  • E. Grant each tenant's global administrator the ability to modify the managed connector definition directly in their production environment to accommodate local customizations
Explanation

Storing connector definitions as managed solution components in source control ensures version control, auditability, and environment lock-down — tenants cannot accidentally modify a production-managed connector. Automated OpenAPI schema validation in the CI/CD pipeline catches breaking changes (e.g., renamed parameters, removed endpoints) before they affect any tenant. Manual recreation across 15 tenants is error-prone, inconsistent, and unscalable. Allowing tenant administrators to modify managed connector definitions defeats the purpose of managed solutions and breaks the central governance model. Embedding a shared API key in the connector definition is a severe security anti-pattern: a single compromised key affects all 15 tenants and the key is visible to anyone who exports the solution.

3.

Fabrikam is running a custom AI classification model deployed in Azure Machine Learning that routes Dynamics 365 Sales leads to the appropriate sales team. The MLOps team wants to implement validation criteria to detect model drift over time. Which TWO metrics should be included as primary validation criteria for this use case?

  • A. Model precision and recall on a held-out representative test set evaluated on a scheduled cadence✓ Correct
  • B. Data distribution shift (covariate shift) measured by comparing live inference input feature distributions against the training baseline✓ Correct
  • C. The average token count of prompts sent to any integrated GPT model endpoint
  • D. Total cost of the Azure Machine Learning workspace per month
  • E. The number of Azure Machine Learning compute cluster nodes used during the last training run
Explanation

Precision and recall on a held-out test set measure whether classification quality is degrading over time — the most direct indicator of model drift for a classification task. Monitoring covariate shift in input features detects when the real-world data characteristics have diverged from training data, which is the root cause of predictive drift before label-level evidence accumulates. Compute node count is an infrastructure cost metric with no bearing on predictive quality. Monthly workspace cost is a financial operations concern, not a model validation criterion. Average token count is relevant for LLM prompt optimization, not for a structured classification model.

4.

Litware Inc. is preparing end-to-end test scenarios for an AI solution that spans Dynamics 365 Sales (opportunity management), Dynamics 365 Customer Service (case creation), and a Copilot Studio agent that orchestrates handoffs between them. Which THREE elements should be included in the end-to-end test scenario design?

  • A. Confirmation that the Dynamics 365 Sales licensing SKU assigned to test users includes the AI Sales feature flag
  • B. Testing that the agent gracefully handles API throttling from Dataverse connectors by retrying within configured back-off parameters✓ Correct
  • C. Verification that agent-generated summaries presented to service agents accurately reflect the data retrieved from Dynamics 365 Sales records✓ Correct
  • D. Confirming the number of Power Automate flow runs consumed does not exceed the tenant's monthly entitlement
  • E. Validation that the agent correctly triggers the case creation flow in Dynamics 365 Customer Service when an opportunity reaches a disqualified stage in Dynamics 365 Sales✓ Correct
  • F. Validation that the agent's conversation transcripts are stored only in the geographic region specified by the organization's data residency policy
Explanation

The cross-app handoff trigger (option E) is the core integration behavior that end-to-end testing must validate. Accuracy of agent-generated summaries (option C) tests the AI's grounding quality — critical for trust in agentic outputs. Graceful handling of API throttling (option B) validates operational resilience across the integrated services. Licensing SKU validation (option A) is an IT provisioning concern, not a test scenario for solution behavior. Data residency verification (option F) is a compliance validation activity, not a functional end-to-end test scenario. Flow run entitlement monitoring (option D) is a capacity management concern outside the scope of functional end-to-end testing.

5.

Contoso Financial is building a validation framework for a custom Azure Machine Learning regression model that predicts credit-limit recommendations surfaced through a Dynamics 365 Sales Copilot panel. The model will be retrained monthly on new transaction data. The Responsible AI review board requires that validation criteria be formally defined before the model is promoted to production after each retraining cycle. Which TWO criteria should the architect include as mandatory gates in the model validation process? (Select TWO.)

  • A. The retrained model must achieve equal-or-better performance on a held-out fairness dataset segmented by protected demographic groups compared with the currently deployed model version.✓ Correct
  • B. The model's Docker container image must pass a vulnerability scan with zero critical CVEs before the model endpoint is updated in Azure Machine Learning.
  • C. A human-in-the-loop review must be completed for every individual prediction the model makes before the result is displayed in Dynamics 365 Sales.
  • D. The retrained model must meet or exceed baseline regression metrics (e.g., RMSE and MAE) on the designated test dataset before promotion.✓ Correct
  • E. The model training run must complete within a fixed compute-cost budget defined in the Azure Machine Learning compute cluster configuration.
  • F. All training data must be re-labelled by a human reviewer after each monthly ingestion to eliminate potential label drift before retraining begins.
Explanation

Fairness evaluation against protected demographic groups (A) is a mandatory Responsible AI gate that ensures the model does not produce biased credit recommendations — a regulatory requirement in financial services. Baseline regression metric thresholds (D) such as RMSE and MAE are standard quantitative quality gates that confirm the retrained model has not regressed in predictive accuracy before promotion. Together these address both performance and fairness. — Container vulnerability scanning (B) is an important DevSecOps practice but is an infrastructure gate, not a model validation criterion; it does not validate model quality or fairness. — Human-in-the-loop review for every prediction (C) is operationally infeasible at scale and is not a validation criterion for the model itself; human oversight is better applied at high-risk decision thresholds. — Compute cost budget compliance (E) is a cost-governance concern, not a model quality or responsible AI validation gate. — Requiring full human re-labelling of all data monthly (F) is disproportionate, not a standard validation criterion, and would make the monthly retraining cycle impractical.

Test yourself across every AB-100 domain

The free AB-100 practice test mixes about 20 questions weighted like the exam. The full 45-question bank adds instant grading, flashcards and a timed mock exam.

Study this domain

Deploy AI-powered business solutions study guide (AB-100) →

Other AB-100 domains

← All Microsoft Agentic AI Business Solutions Architect study resources