Correct Answer:

Explanation:
Interactive ticket lookup: Delegated permissions from the signed-in employee; Approved article updates: A managed identity scoped to write production article records.
Ticket search must preserve the existing per-employee authorization model, so the downstream operation should execute in the signed-in employee ' s delegated identity context. That allows the ticket service to enforce the same user-level permissions it already uses. The knowledge-article update is an application- controlled write to one production repository, so a managed workload identity with only the required write permission is the least-privilege choice. Microsoft identity guidance distinguishes delegated/on-behalf-of access for user-context operations from managed or agent identities for service-to-service work. Both approaches also eliminate embedded secrets when configured with Microsoft Entra authentication. A broad Contributor assignment or shared API key would unnecessarily expand the blast radius and weaken audit attribution. Therefore the mixed model in the answer is intentional: delegated permissions for per-user reads, and a narrowly scoped managed identity for controlled production writes. From a security and governance perspective, the control should be enforced at the narrowest platform boundary that can deterministically block or constrain the action. Relying only on prompt text is weaker because the model can still be induced to behave unexpectedly.
Official Microsoft reference: Microsoft Foundry agent identity

Correct Answer:

Explanation:
Orchestration pattern: Agent-as-tools; Context passed to specialists: Scoped claim data only.
The primary claims agent must retain task ownership and synthesize the final response, which is the defining property of the agents-as-tools pattern. The primary agent decides when to invoke each specialist, receives the specialist ' s result, and remains responsible for the overall conversation. Handoff orchestration would instead transfer control to another agent and therefore weaken the ownership requirement. Microsoft Agent Framework also makes it possible for the outer agent to pass only the arguments needed by the inner agent rather than sharing the entire conversation history automatically. That supports least-privilege context: each specialist receives only the claim fields required for its assigned work. Passing the whole claim or a shared transcript would unnecessarily expose data outside the specialist ' s domain. The selected combination therefore satisfies both control ownership and data minimization. The architecture should still be validated with representative end-to-end tests, but the selected component establishes the correct structural boundary first. Microsoft ' s AI-500 blueprint consistently favors explicit scopes, interfaces, and persistence or identity boundaries over prompt-only conventions.
Official Microsoft reference: Microsoft Agent Framework - Agents as tools

Correct Answer:

Explanation:
Process structure: A workflow with agent executors; Pause mechanism: A human-in-the-loop (HITL) gate; Interruption recovery: Checkpoints.
The process has a fixed execution order and can run for several hours, so an explicit workflow with agent executors is preferable to free-form agent delegation. The requirement to pause at predefined points is a human-in-the-loop requirement: the workflow must be able to suspend and emit a request for approval or operator input. The requirement to resume after worker restarts is addressed by checkpoints. Microsoft Agent Framework checkpoints persist workflow progress, executor state, pending messages, shared state, and outstanding requests so execution can be restored from the last saved point. A retry policy alone re-executes operations but does not reconstruct the complete workflow state after a process interruption. The three selected mechanisms therefore cover structure, controlled pause, and durable recovery as separate but complementary workflow concerns. In production, add telemetry and regression tests around this behavior so changes to prompts, models, tools, or orchestration do not silently alter the intended contract. The selected approach is the one that best matches the platform ' s native execution semantics.
Official Microsoft reference: Microsoft Agent Framework - Checkpoints and Human-in-the-loop

Correct Answer: D  🗳️

Explanation: Only visible for PrepAwayTest members. You can sign-up / login (it's free).