Free Practice Questions for Microsoft AB-620 Exam

Ordered Dev/Test/Prod deployment → Sequential stage progression; Detect missing references or variables → Deployment input validation; Unified stage and security management → Centralized pipeline configuration.

Comprehensive and Detailed Explanation From Microsoft AB-620 Study Guide: A Power Platform pipeline models the release path as ordered stages, so sequential progression is the control that enforces Dev-to-Test-to-Prod movement instead of allowing an arbitrary target. Deployment input validation checks required connection references, environment variables, and related deployment inputs before promotion begins, reducing failed or partially configured releases. Centralized pipeline configuration in the host environment provides one place to manage linked environments, stages, deployment rules, and security. Environment-specific packages or builder-defined settings would weaken repeatability and governance, while direct target selection would bypass the prescribed order. Managed solutions should be used in downstream environments so production customizations do not create unmanaged drift. The pipeline configuration should assign appropriate deployment roles, protect the host environment, and incorporate approvals or quality gates where required. A successful package check does not replace functional validation: the team should still run the agent ' s test set after deployment and confirm that connections, knowledge access, flows, and environment-specific values operate under target-environment identities. Study Guide alignment: Test and manage agents > Implement application lifecycle management for agents in Copilot Studio > Implement and extend Microsoft Power Platform Pipelines.

===============

Call the API during the conversation → Configure a REST action and call it from the topic; Run with authentication → Build an authenticated connection for the API; Make the response available at runtime → Store the API response in a topic variable.

Comprehensive and Detailed Explanation From Microsoft AB-620 Study Guide: The REST action is the executable component that issues the request when the topic reaches that node. An authenticated connection supplies the credential or token handling required by the endpoint; embedding secrets directly in a topic would be insecure and difficult to manage across environments. The returned JSON must then be assigned to a topic variable so downstream nodes can inspect fields, make decisions, format a response, or pass the value to another tool. Treating the API as indexed knowledge would be inappropriate because the requirement is a live runtime call, not search over a periodically indexed corpus. The builder should define the HTTP operation, endpoint, inputs, response schema, and output variable precisely. Authentication should use the narrowest appropriate identity model—user-delegated when actions must be attributable to the user, or maker/service credentials only when the business design permits shared access. Error and timeout paths should be explicit so malformed JSON, authorization failures, and unavailable services do not produce silent or misleading responses. Study Guide alignment: Integrate and extend agents in Copilot Studio > Add tools to agents > Add REST APIs to an agent.

===============

Comprehensive and Detailed Explanation From Microsoft AB-620 Study Guide: Retrying the failing action without an error-handling branch does not meet either stated requirement. The flow can still exhaust its retries and terminate without notifying anyone, and repeated calls may be dangerous if the external operation is not idempotent. A controlled design configures run-after conditions so a notification or handling scope executes on failure and timeout, captures an appropriate error message or correlation identifier, and then terminates or continues intentionally. Retry policy is a separate resilience choice. It can help with transient failures when the operation is safe to repeat, but it is not a substitute for handling the final failure. The number, interval, and backoff should be bounded, and non-idempotent requests should use a deduplication mechanism or disable retries. Administrators need enough diagnostic context to locate the failed run without receiving secrets or sensitive payloads. Because the proposed solution only retries, the correct assessment is No. Study Guide alignment: Plan and configure agent solutions > Create and monitor agent flows in Copilot Studio > Implement error handling in agent flows.

===============

Block unsafe content → Configure the content-filtering/moderation level for AI-generated content; Diagnose why a response was filtered → Review Azure Application Insights telemetry; Identify the triggering user input → Review conversation transcripts.

Comprehensive and Detailed Explanation From Microsoft AB-620 Study Guide: Content moderation is the preventive control that evaluates generative input and output for harmful categories and blocks responses that violate the configured threshold. A stricter level reduces the likelihood that unsafe material is returned, although it may also increase false positives and reduce answer coverage. Application Insights provides operational telemetry for investigating filtered or failed behavior when appropriate logging is enabled, including events and message details subject to the organization ' s privacy settings. Conversation transcripts are the direct source for identifying which user utterance preceded the filter decision; connector run history would only be relevant if a connector failed and cannot reveal the original conversational input in this scenario. Logging must be configured carefully because prompts and responses can contain personal or sensitive information. Access to telemetry and transcripts should be restricted, retention should follow policy, and sensitive activity properties should not be enabled casually. The team should test both user prompts and model-generated responses, document expected safety behavior, and preserve a human review and escalation path for legitimate requests that are incorrectly blocked. Study Guide alignment: Plan and configure agent solutions > Plan an agent solution > Plan responsible AI strategy; Evaluate security and governance considerations.

===============

Comprehensive and Detailed Explanation From Microsoft AB-620 Study Guide: Configure run after is the control that routes execution to an error-handling action when the external-service action fails, times out, is skipped, or reaches another selected status. By configuring the notification action to run after failure and timeout, the flow no longer terminates silently and can send a message containing sanitized error context. The handler can then set a deliberate flow status, record a correlation ID, and provide the operator with the failed action and remediation path. This design should be paired with an appropriate retry policy based on whether the external operation is safe to repeat. For non-idempotent writes, automatic retry may create duplicates and should generally be disabled or protected with an idempotency key. Error notifications must not include tokens, secrets, or unrestricted payloads. Testing should deliberately produce an authorization failure, timeout, and service error to prove that each status enters the handler and that the notification itself has a fallback if its connector is unavailable. Study Guide alignment: Plan and configure agent solutions > Create and monitor agent flows in Copilot Studio > Implement error handling in agent flows.

===============

A. Configure prompt modifications at the system level. Centralized instructions enforce the required tone, disclaimers, response boundaries, and refusal behavior consistently across generative responses. Microsoft documents that prompt modification can define an agent’s personality, response format, permitted subjects, and behavior when an answer is unavailable. This avoids inconsistent manual changes across individual topics. Microsoft: Prompt modification

D. Configure Power Platform DLP policies. DLP policies govern which connectors, knowledge sources, HTTP endpoints, and channels the agent may use. They should be configured and validated before publication because a policy violation can prevent the agent from being published. DLP also protects against unauthorized data movement between business and non-business connectors. Microsoft: Data policies for agents

Why the others are incorrect: B creates duplicated, inconsistent disclaimers. C incorrectly treats moderation as a web-channel setting; moderation is configured for generative behavior rather than enforced only by embedding settings. E applies safeguards after publication and assumes filters must be configured separately for every channel, which would not provide the required centralized governance.

A. Use a Microsoft Graph connector to index the partner’s travel advisory content. Microsoft 365 Copilot connectors—formerly called Microsoft Graph connectors—index non-Microsoft enterprise content into Microsoft Graph, making it available for semantic knowledge grounding and citations. Microsoft Learn: Copilot connectors

D. Add the internal policy documents as a knowledge source. The SharePoint PDFs and policy documents should be connected as agent knowledge so generative answers can retrieve and summarize the relevant content. This is scalable and avoids manually maintaining document-specific topics. Microsoft Learn: SharePoint knowledge sources

B violates the requirement to avoid manually authored Q & A topics. C could produce ungrounded responses from unapproved public sources and would not satisfy the airline’s accuracy, security, or compliance requirements.

B. Configure prompt instructions that include disclaimer text. Centralized prompt instructions apply the required disclaimer and behavioral controls consistently to generative responses. This avoids maintaining duplicate text in individual topics and reduces the risk of inconsistent compliance language. Microsoft confirms that prompt modifications can control response content, format, personality, and what the agent should or should not answer. Microsoft Learn: Prompt modification

C. Use Markdown syntax within response content. The scenario explicitly requires Markdown for formatting and states that HTML is unsupported. Markdown can provide headings, bold text, lists, and other structured presentation while remaining compatible with the target channels.

Options A and E duplicate disclaimer content across topics, creating unnecessary maintenance and inconsistent responses when the disclaimer changes. Option D violates the stated platform requirement because HTML must not be used.

Requirement

Implementation method

Let the agent decide when to run a tool based on user input.

Enable generative orchestration.

Run a specific agent flow at a defined step in a topic.

Add a tool node.

Use a connector action to retrieve data during a conversation.

Add a tool node.

Comprehensive and Detailed Explanation From [Microsoft AB-620 Study Guide]

Generative orchestration is appropriate when the agent must independently determine whether a tool is relevant to the user’s request. Copilot Studio evaluates the user’s message, conversation context, and the tool’s name, description, inputs, and outputs before deciding whether to invoke it. Microsoft documentation confirms that generative orchestration allows an agent to choose tools based on their descriptions and the current user query.

When an operation must occur at a predetermined point in an authored topic, the operation should instead be inserted explicitly by using an Add a tool node. Selecting an agent flow from that node ensures that the flow executes at that exact position in the topic rather than being selected autonomously by the orchestrator.

The same node type is used when calling a connector action. From the topic canvas, the author selects Add a tool , chooses Connector , and then selects and configures the required connector operation. Adaptive Cards present interactive information, while Question nodes collect user input; neither directly invokes flows or connectors.

Relevant study-guide area: Plan and configure agent solutions → Configure topics → Add agent flows to a topic and Add tools to a topic . See Orchestrate agent behavior with generative AI , Add tools to custom agents , and Use connectors in Copilot Studio agents .