{"id":13368,"date":"2026-09-16T08:05:36","date_gmt":"2026-09-16T08:05:36","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=13368"},"modified":"2026-09-16T08:05:36","modified_gmt":"2026-09-16T08:05:36","slug":"microsoft-ab-100-practice-test-questions-and-exam-dumps-part7-q121-140","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/microsoft-ab-100-practice-test-questions-and-exam-dumps-part7-q121-140\/","title":{"rendered":"Microsoft AB-100 Practice Test Questions and Exam Dumps Part7 Q121-140"},"content":{"rendered":"<h1><\/h1>\n<h2><b>View Full <\/b><a href=\"https:\/\/www.examlabs.com\/ab-100-exam-dumps\"><b>Microsoft AB-100 Exam Dumps<\/b><\/a><b> and Practice Test Dumps.<\/b><\/h2>\n<p>&nbsp;<\/p>\n<h3><b>Question 121<\/b><\/h3>\n<p><b>What is the main purpose of defining an agent&#8217;s goal?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To specify the outcome the agent is expected to achieve<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To increase storage capacity<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To remove security controls<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To disable tool usage<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">An agent goal defines the outcome that the AI solution is intended to achieve. A clear goal helps determine which tasks, tools, knowledge sources, and decision steps are necessary. It also provides a basis for testing whether the agent is performing as expected. For example, an agent goal might be to resolve routine customer requests or summarize approved business information. Well-defined goals help prevent unnecessary agent behavior and keep the solution aligned with its intended business purpose.<\/span><\/p>\n<h3><b>Question 122<\/b><\/h3>\n<p><b>Which approach helps an AI agent maintain information about the current task?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Increasing screen resolution<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Managing task state<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Removing context<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Disabling conversation history<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Task state allows an agent to maintain information about what is currently happening during a workflow. This can include completed steps, pending actions, selected records, or information needed for the next operation. State management is particularly useful for multi-step processes where the agent must continue from an earlier point. Proper state handling also helps with recovery when an operation fails. The design should determine what information needs to persist and how long it should be retained.<\/span><\/p>\n<h3><b>Question 123<\/b><\/h3>\n<p><b>A customer-service agent needs to transfer complex billing questions to a specialized billing agent. Which architecture supports this requirement?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Data deletion<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Static prompting<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Agent handoff<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Model compression<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Agent handoff allows one agent to transfer responsibility for a task to another specialized agent. In this scenario, the customer-service agent can identify that the request requires billing expertise and provide the relevant context to the billing agent. The receiving agent can then continue the interaction without forcing the customer to restart the process. Handoffs should define when they occur, what information is transferred, and which permissions the receiving agent has. This helps maintain continuity and clear responsibility across specialized agents.<\/span><\/p>\n<h3><b>Question 124<\/b><\/h3>\n<p><b>Which technique is useful when an agent needs to search documents by meaning rather than exact keywords?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">File compression<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Semantic search<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Data deletion<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Password rotation<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Semantic search retrieves information based on the meaning and intent of a query rather than requiring an exact keyword match. It commonly uses embeddings to represent queries and documents in a way that allows semantically related content to be identified. This can improve retrieval when users phrase questions differently from the wording used in source documents. Semantic search is often used as part of RAG architectures. Retrieval quality should still be evaluated to ensure that the returned information is relevant and sufficiently complete.<\/span><\/p>\n<h3><b>Question 125<\/b><\/h3>\n<p><b>What is a key purpose of prompt versioning?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To track changes to prompts over time<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To increase API latency<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To eliminate model evaluation<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To disable rollback<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Prompt versioning allows teams to track changes made to system instructions, templates, or other prompts used by an AI application. This makes it easier to determine which prompt version produced a particular result and compare performance between revisions. Versioning also supports controlled testing and rollback when a change causes unexpected behavior. Prompts can significantly affect model outputs, so treating them as managed application assets helps improve consistency, troubleshooting, and lifecycle management across development, testing, and production environments.<\/span><\/p>\n<h3><b>Question 126<\/b><\/h3>\n<p><b>An organization wants to prevent an AI agent from accessing confidential files that are unrelated to its task. What should be applied?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Larger context windows<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Broad administrator permissions<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Access controls and data boundaries<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">More frequent prompting<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Access controls and data boundaries help ensure that an AI agent can access only the information required for its assigned tasks. Confidential files unrelated to the agent&#8217;s purpose should not automatically become available simply because the agent can technically connect to a storage system. Permissions should follow least-privilege principles and respect existing organizational access policies. Proper identity, authorization, data classification, and auditing should be combined to reduce the risk of unauthorized data exposure through agent interactions.<\/span><\/p>\n<h3><b>Question 127<\/b><\/h3>\n<p><b>What does an AI model&#8217;s context window determine?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The number of users in a database<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The amount of information the model can process within a request<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The number of network cables required<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">The physical size of the server<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A model&#8217;s context window represents the amount of input and contextual information that can be considered within a request, subject to the model&#8217;s supported limits. This can include user messages, system instructions, retrieved documents, conversation history, and other information supplied to the model. Context limits are important when designing RAG and conversational applications because excessive information can increase cost or exceed model constraints. Architecture teams should therefore manage context carefully and prioritize relevant information.<\/span><\/p>\n<h3><b>Question 128<\/b><\/h3>\n<p><b>Which approach can improve reliability when an AI service becomes temporarily unavailable?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Removing all monitoring<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Using a fallback service or workflow<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Increasing prompt complexity<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Disabling error handling<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A fallback service or workflow provides an alternative when the primary AI service is unavailable or unable to complete a request. Depending on the business scenario, the fallback might use another model, a simpler process, cached information, or human escalation. The fallback should have clearly defined conditions and should not bypass required security controls. Testing should verify that users receive an appropriate response during failures. This approach can improve resilience and reduce disruption when individual AI components experience temporary availability problems.<\/span><\/p>\n<h3><b>Question 129<\/b><\/h3>\n<p><b>Which practice helps reduce hallucinations when an agent answers questions about company policies?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Increasing unrelated context<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Removing knowledge sources<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Grounding responses in approved policy information<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Allowing unrestricted tool access<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Grounding an agent with approved policy information gives the model relevant evidence to use when generating responses. Instead of relying solely on general model knowledge, the agent can retrieve current organizational policies and use them as context. This can reduce unsupported or outdated responses, particularly for information that changes over time. Grounding should use authoritative sources and appropriate access controls. Retrieval quality, source freshness, and response accuracy should also be evaluated regularly to maintain dependable policy-related answers.<\/span><\/p>\n<h3><b>Question 130<\/b><\/h3>\n<p><b>Why might an organization use a small language model for a simple classification task?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It may provide lower cost and latency<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It always produces better reasoning<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It removes the need for evaluation<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It guarantees perfect accuracy<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A smaller language model may be appropriate for simple tasks such as classification, routing, or straightforward text processing. Smaller models can sometimes provide lower inference costs and faster responses than larger models. However, the choice should be based on measured business requirements rather than model size alone. The organization should evaluate accuracy, latency, cost, reliability, and other relevant factors. If the smaller model cannot meet the required quality level, a more capable model may be necessary for that workload.<\/span><\/p>\n<h3><b>Question 131<\/b><\/h3>\n<p><b>What is the purpose of defining an agent&#8217;s scope?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To specify what the agent should and should not handle<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To increase database size<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To remove human oversight<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To allow unrestricted actions<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">An agent&#8217;s scope defines the tasks, users, data, and actions that fall within its intended responsibilities. A clearly defined scope helps prevent an agent from attempting tasks outside its purpose or accessing unnecessary resources. For example, a customer-support agent may be allowed to answer product questions but not approve refunds above a specified threshold. Scope should be reflected in instructions, permissions, tools, and governance controls. Clearly defined boundaries make agent behavior easier to test, monitor, and manage.<\/span><\/p>\n<h3><b>Question 132<\/b><\/h3>\n<p><b>An agent must process information from a database and then generate a customer response. Which sequence is appropriate?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Generate the answer before retrieving data<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Retrieve the required data before generating the grounded response<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Delete the database record first<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Disable authorization before retrieval<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">When an agent needs current structured information, it should generally retrieve the required data before generating the final response. The retrieved information can then provide factual context for the model. For example, an order-support agent could retrieve the customer&#8217;s current order status and then generate a response based on that result. The database operation must still use proper authentication and authorization. This approach helps reduce responses based on outdated assumptions and keeps the answer connected to current business information.<\/span><\/p>\n<h3><b>Question 133<\/b><\/h3>\n<p><b>Which feature is important when an AI application handles personally identifiable information?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Data protection and appropriate access controls<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unlimited data retention<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Public data sharing<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unrestricted logging<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Personally identifiable information requires appropriate protection throughout the AI application&#8217;s lifecycle. Access should be limited to authorized users and services, and data should be handled according to applicable privacy and organizational requirements. Logging should also avoid unnecessarily exposing sensitive information. Other controls may include encryption, data classification, retention policies, and appropriate processing boundaries. AI architecture should identify where personal information enters, is stored, retrieved, processed, and returned so that privacy risks can be addressed at each stage.<\/span><\/p>\n<h3><b>Question 134<\/b><\/h3>\n<p><b>What can hybrid search combine in a retrieval system?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Authentication and encryption<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Keyword and semantic search<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Storage and networking<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Logging and billing<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Hybrid search can combine traditional keyword-based retrieval with semantic search techniques. Keyword search is useful when exact terms, names, identifiers, or phrases matter, while semantic search can identify content based on conceptual similarity. Combining both approaches can improve retrieval across different types of business information. The exact implementation depends on the search platform and application requirements. Retrieval results should still be evaluated using representative queries to confirm that the system consistently returns relevant information for the intended use cases.<\/span><\/p>\n<h3><b>Question 135<\/b><\/h3>\n<p><b>Why should AI agents have clearly defined tool permissions?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To ensure tools can be used only for authorized purposes<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To make every tool publicly accessible<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To remove auditing requirements<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">To increase unnecessary actions<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Tool permissions determine which operations an agent is allowed to perform. Clearly defined permissions help ensure that an agent can use a tool only for approved purposes and within its intended scope. For example, an agent may be permitted to read customer order information but not delete orders. Restricting tool permissions reduces the potential impact of incorrect instructions, compromised inputs, or unexpected model behavior. Permissions should follow least privilege and should be reviewed whenever the agent&#8217;s responsibilities or integrations change.<\/span><\/p>\n<h3><b>Question 136<\/b><\/h3>\n<p><b>What is a major benefit of using automated evaluation in an AI lifecycle?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It removes the need for test data<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It allows consistent measurement after changes<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It guarantees that models never fail<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">It prevents all production monitoring<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Automated evaluation allows an AI solution to be tested consistently against defined datasets and metrics. When prompts, models, retrieval configurations, or tools change, automated tests can help determine whether performance improved, remained stable, or declined. This supports repeatable quality checks throughout the AI lifecycle. Automated evaluation does not guarantee perfect behavior and should be combined with other testing methods, including security, safety, and real-world monitoring. It is particularly useful as part of controlled deployment and release processes.<\/span><\/p>\n<h3><b>Question 137<\/b><\/h3>\n<p><b>An AI agent needs to perform a high-impact business action. Which design provides additional control?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Human approval before execution<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Unlimited autonomous access<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Removal of audit logs<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Automatic execution without validation<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 1<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Human approval can provide an additional control for high-impact or sensitive actions. Instead of allowing an agent to execute the operation automatically, the system can present the proposed action to an authorized person for review. This approach is useful when an incorrect action could have significant financial, legal, operational, or customer consequences. The approval process should clearly identify what the agent intends to do and provide enough information for an authorized reviewer to make an informed decision before execution.<\/span><\/p>\n<h3><b>Question 138<\/b><\/h3>\n<p><b>What should an AI architecture consider when many users may access an agent simultaneously?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Prompt wording only<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Scalability and capacity<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Screen brightness<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Document formatting<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 2<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Scalability and capacity planning are important when an AI application may receive many simultaneous requests. The architecture should consider model capacity, API quotas, concurrency, latency, storage, retrieval services, and other dependencies. Load testing can help identify bottlenecks before production deployment. The solution may also require throttling, queuing, caching, or workload distribution. Scalability planning should balance performance with cost and reliability so that increased demand does not cause unacceptable delays or service failures.<\/span><\/p>\n<h3><b>Question 139<\/b><\/h3>\n<p><b>Which approach helps protect an agent from prompt injection?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Trusting every retrieved instruction<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Treating external content as automatically authorized commands<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Separating trusted instructions from untrusted content<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Giving retrieved documents administrator permissions<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 3<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Prompt injection can occur when untrusted content attempts to influence an AI system&#8217;s instructions or behavior. A defensive architecture should clearly separate trusted system instructions from external or user-provided content and avoid treating retrieved text as automatically authorized commands. Additional controls can include input validation, tool authorization, prompt-shielding mechanisms, output checks, and limiting high-impact actions. Security testing should include adversarial inputs to identify weaknesses. The goal is to ensure that external content cannot freely override the agent&#8217;s intended instructions or security boundaries.<\/span><\/p>\n<h3><b>Question 140<\/b><\/h3>\n<p><b>Which activity is part of AI production readiness?<\/b><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Removing monitoring<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Skipping security review<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Deploying without testing<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Validating reliability, security, and operational controls<\/span><\/li>\n<\/ol>\n<p><b>Correct Answer: 4<\/b><\/p>\n<p><b>Explanation<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Production readiness requires more than confirming that an AI model can generate useful responses. Teams should validate reliability, security, access controls, monitoring, error handling, scalability, data protection, and operational procedures before production deployment. Testing should cover expected and unexpected inputs as well as important failure scenarios. Appropriate ownership and escalation processes should also be established. A production-ready AI solution should have controls that support safe operation, ongoing monitoring, and controlled changes after deployment.<\/span><\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>View Full Microsoft AB-100 Exam Dumps and Practice Test Dumps. &nbsp; Question 121 What is the main purpose of defining an agent&#8217;s goal? To specify the outcome the agent is expected to achieve To increase storage capacity To remove security controls To disable tool usage Correct Answer: 1 Explanation An agent goal defines the outcome [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/13368"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=13368"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/13368\/revisions"}],"predecessor-version":[{"id":13395,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/13368\/revisions\/13395"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=13368"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=13368"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=13368"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}