Microsoft Updated AB-620 Exam Questions and Answers by giulia

HTTP action → Endpoint and authentication; Data action → Table relationships and keys.

Comprehensive and Detailed Explanation From Microsoft AB-620 Study Guide: An HTTP action must know where to send the request and how the destination authenticates it. The endpoint, method, headers, and authentication or connection details therefore belong to the HTTP action ' s configuration. A data action operates against structured records, so table relationships and key fields determine which entity and row are read or changed and how related data is resolved. Input mapping is important for both action types but does not replace these defining settings. Timeout and retry policy control resilience after an action has been configured; they do not identify the endpoint or the record relationship. The flow designer should also validate schemas, map outputs into clearly typed variables, and provide failure paths for authorization, not-found, timeout, and malformed-response conditions. Keys should be stable identifiers rather than display names, and connection permissions should follow least privilege. Testing with both valid and invalid records confirms that the data action targets the intended row and that the HTTP action cannot silently call an incorrect or unauthenticated endpoint. Study Guide alignment: Plan and configure agent solutions > Create and monitor agent flows in Copilot Studio > Configure actions and connectors.

===============

PartsOps per-user authentication → OAuth 2.0; WarrantyRules shared team credential → API key; Tool-selection context → Configure a server description that explains the MCP server ' s role.

Comprehensive and Detailed Explanation From Microsoft AB-620 Study Guide: The authentication choices must follow the identity requirements of each server. PartsOps performs attributable actions, including parts-request creation, so OAuth 2.0 is the appropriate mechanism for individual users to authorize access without sharing their credentials with the agent. That preserves user context and supports accountability for each transaction. WarrantyRules is explicitly read-only and uses a key shared by the agent team; it should therefore be configured with API-key authentication using the required header or query parameter. Applying the same authentication method to both servers would contradict the stated server designs. Authentication alone does not tell the orchestrator when a server is relevant. A concise, discriminating server description should identify PartsOps as the source for availability checks and parts-request creation and WarrantyRules as the source for warranty validation. Copilot Studio uses the names and descriptions of agents, topics, tools, and knowledge sources during generative orchestration. Accurate metadata reduces accidental calls, prevents the wrong server from handling a request, and makes the multi-agent plan more predictable during testing. Study Guide alignment: Integrate and extend agents in Copilot Studio > Add tools to agents > Configure MCP tools.

===============

Trace each answer to its source → Instruct the agent to cite sources in knowledge settings; Retrieve from the centralized index → Configure Azure AI Search as the grounding data source; Use an enterprise-approved foundation model → Select a model from the Foundry model catalog.

Comprehensive and Detailed Explanation From Microsoft AB-620 Study Guide: Each requirement is controlled by a different configuration layer. Source traceability is a presentation and grounding requirement, so citations must be enabled or explicitly required for knowledge-based responses. That allows users to inspect the material used to support a policy answer; it is not achieved merely by choosing a model. Centralized retrieval is provided by connecting the existing Azure AI Search vector index as the knowledge source. This preserves the curated index, semantic or vector retrieval behavior, and enterprise management of the policy corpus instead of copying documents into the agent. Model governance is handled in the prompt configuration by selecting the approved model from the Microsoft Foundry model catalog. Publishing does not automatically replace an unapproved model, and Azure AI Search does not enforce the foundation-model selection. Together, the three settings form a complete RAG path: Azure AI Search retrieves authoritative passages, the governed model produces the response, and citation settings expose provenance. The configuration should then be tested with representative policy questions to confirm that the response is grounded and that the cited source actually supports the answer. Study Guide alignment: Integrate and extend agents in Copilot Studio > Integrate agents with Azure > Configure generative answers by using Azure AI Search with Foundry; Configure custom prompts to use the Foundry model catalog.

===============

Authenticated governed access → Select service-principal authentication; Required curated vector index → Enter the Azure AI Search index name; Correct Azure AI Search service instance → Provide the Azure AI Search endpoint URL.

Comprehensive and Detailed Explanation From Microsoft AB-620 Study Guide: An Azure AI Search connection needs three distinct pieces of configuration. The endpoint identifies the search-service instance that hosts Fabrikam ' s indexed documents. The index name then selects the specific vector index containing the curated policies and procedures. Authentication determines how Copilot Studio is authorized to query that service. Because the scenario requires governed application access rather than a maker ' s personal identity, the service-principal option is the appropriate selection from the choices provided. Enabling citations is useful after retrieval is configured, but it does not establish the service connection or select an index. Microsoft recommends creating Azure AI Search through the supported data-source connection experience rather than manually assembling an unsupported endpoint/key combination. Administrators should grant the service principal only the permissions needed for query operations, protect its credentials, and maintain separate configuration per environment. Testing should confirm that the intended index—not another index in the same service—is queried, that unauthorized content is excluded, and that policy responses cite material that actually supports the generated guidance. Study Guide alignment: Integrate and extend agents in Copilot Studio > Connect to enterprise knowledge sources > Connect to Azure AI Search.

===============