Free Practice Questions for Microsoft AB-731 Exam

The correct answer is data security. The principle of least privilege means users, apps, and services receive only the minimum access required to perform their work. Microsoft 365 Copilot respects existing Microsoft 365 permissions and does not grant users new access to content they are not already authorized to view. That behavior is a security control because it helps prevent unauthorized access to company information. Data classification is about labeling or categorizing information by sensitivity. Data compliance focuses on meeting policy, legal, or regulatory requirements. Data loss prevention helps prevent sensitive information from being shared inappropriately. Least privilege is primarily an access-control practice, so the best category is data security.

Answer Area

Retrieval Augmented Generation (RAG) architectures require that a large language model (LLM) be retrained on proprietary data. Answer: No

Retrieval-Augmented Generation (RAG) grounds a language model to produce more factual and context-relevant responses. Answer: Yes

Retrieval Augmented Generation (RAG) retrieves information from external knowledge sources at runtime instead of relying solely on the knowledge of a generative AI model. Answer: Yes

1) No — RAG does not require retraining or fine-tuning the base LLM on proprietary data. The defining idea of RAG is to keep the model as-is and instead supply it with relevant context retrieved from trusted sources at inference time. Fine-tuning can be optional for style or specialized behavior, but it is not a requirement for RAG.

2) Yes — RAG is a grounding approach. By retrieving authoritative passages (policies, manuals, product specs, internal knowledge bases) and injecting them into the prompt context, the model’s answer is constrained by evidence that is relevant to the user’s question. This improves factuality and domain relevance and helps reduce hallucinations.

3) Yes — RAG explicitly depends on runtime retrieval from external knowledge sources, such as indexed documents, databases, or enterprise repositories. The retrieval layer finds the best matching content for the query, and the generation layer uses that retrieved content to craft the response. This is why RAG is valuable when information changes frequently: you update the source documents/index rather than retraining the LLM.

Overall, RAG is best understood as an architecture pattern that combines search/retrieval + generation , improving accuracy and freshness without the cost and risk of retraining the underlying model each time the knowledge base changes.

Microsoft Foundry is positioned as a unified platform experience for building, optimizing, and governing AI applications and agents. Microsoft explicitly emphasizes “fleetwide security and governance” and the ability to build and manage AI in a unified environment, which directly supports statement 1 being Yes : it is designed to help organizations build and operate generative AI solutions with centralized governance controls (for example, environment setup, data isolation, access control, and operational management).

For statement 2, Foundry supports scaling as demand increases . Microsoft documentation for Foundry-related model usage notes that as usage grows, Foundry can automatically increase quotas by moving users to higher tiers (and allows requesting additional quota). This is a concrete scalability mechanism tied to increased workload demand, so the statement is Yes .

For statement 3, Foundry is not limited to text-only generative AI. Microsoft provides “Azure Vision in Foundry Tools,” which delivers computer vision capabilities such as analyzing images, reading text (OCR), and other image-processing features. That means Foundry can be used for image recognition/computer vision workloads, so the statement is Yes .

The correct answer is A. transparency. Transparency means users and stakeholders should understand when AI is being used, what the AI system can do, what its limitations are, and how important outputs or decisions were produced. In this scenario, applicants can request an explanation for why a loan application was denied. That explanation capability makes the AI-assisted decision more understandable and reviewable, which directly supports transparency. Fairness is related to avoiding unjust bias or discriminatory outcomes. Privacy and security focus on protecting personal and organizational data. Inclusiveness focuses on ensuring AI systems work for people with different abilities, backgrounds, and experiences. Because the scenario is specifically about explaining a decision, the best answer is transparency.

Answer Area

Microsoft Copilot provides a single AI app that has identical features and experiences across all Microsoft products. Answer: No

Microsoft 365 Copilot delivers AI capabilities for business users that use Microsoft 365 apps. Answer: Yes

Microsoft Security Copilot helps companies understand risks and the organizational security posture. Answer: Yes

No — “Copilot” is an umbrella brand across Microsoft, but the experiences are not identical . Different Copilots target different workloads (productivity, security, development, business apps) and therefore expose different capabilities, connectors, permissions models, and admin controls. For example, Microsoft 365 Copilot is embedded in Word/Excel/PowerPoint/Outlook/Teams, while Security Copilot is built for SOC workflows and integrates with security tooling; they are intentionally not the same app with the same features.

Yes — Microsoft 365 Copilot is specifically designed to deliver generative AI assistance for users working in Microsoft 365 applications . It enhances common business tasks such as drafting, summarizing, meeting recap, creating presentations, and working with documents and communications—directly inside the Microsoft 365 productivity suite.

Yes — Microsoft Security Copilot is focused on security operations and helps analysts understand threats, investigate incidents, and improve visibility into security posture. Its purpose is aligned with helping organizations interpret security signals and risk context more efficiently, which supports understanding organizational risk and posture.

Azure Machine Learning

Forecasting product demand from historical sales data is a predictive analytics / machine learning use case. It typically requires selecting an appropriate forecasting approach (for example, regression, tree-based methods, or time-series models), preparing and splitting historical data, training and validating the model, tuning hyperparameters, and then deploying the model for ongoing inference. The Microsoft service designed to support that end-to-end ML lifecycle is Azure Machine Learning , which is why it correctly completes the sentence.

Azure Machine Learning provides the tooling and infrastructure to: manage datasets, run training jobs on scalable compute, track experiments, compare model performance, register models, and operationalize them through managed endpoints and pipelines. This makes it well-suited for iterative forecasting work, where you may retrain on new data regularly, monitor drift, and update models as product lines, promotions, or seasonality patterns change.

The other options do not directly fit “train a model” for forecasting. Azure AI Search is an indexing/retrieval service used to search and ground generative AI responses, not for training predictive models. Azure OpenAI provides access to large language and multimodal models for generative tasks (drafting, summarizing, Q & A) and is not the primary platform for building classical forecasting models. Microsoft Foundry is a broader platform experience for building and governing AI apps and agents, but the specific service for training a forecasting model on historical sales data is Azure Machine Learning.

To align an AI customer support agent with Microsoft’s Responsible AI principles, two high-impact actions are fairness/inclusiveness validation and transparency to users . B is correct because testing for inclusive and culturally sensitive responses directly supports fairness and helps reduce harm. In practice, you evaluate responses across diverse user personas, languages/dialects, accessibility scenarios, and sensitive contexts. You look for biased assumptions, stereotyping, exclusionary language, and disparate quality of service. This also implies ongoing monitoring because model behavior can drift as prompts, knowledge sources, and user inputs evolve.

E is correct because a clear disclaimer supports transparency: customers should know they are interacting with an AI system, understand the type of assistance it can provide, and know what to do if the response is incorrect or they need a human. A disclosure is also a practical risk-control that reduces overreliance and sets expectations about limitations.

The other options are not best for Responsible AI alignment: A (retain all conversations) can conflict with privacy/data minimization; retention must be justified and governed, not automatic. C (operate independently) undermines accountability and human oversight. D (multiple purposes) increases scope and risk rather than improving responsible use.

The correct answers are A and E. A governance program should include a formal process to review AI initiatives for responsible AI alignment. This ensures that projects are assessed for fairness, privacy, security, reliability, transparency, accountability, and business risk before deployment and during operation. Defining accountability norms across business and technical teams is also essential because responsible AI cannot be owned only by engineers or data scientists. Business owners, legal, compliance, security, privacy, and technical teams must understand who approves AI use cases, who monitors outcomes, and who responds when issues occur. Letting departments use separate governance methods creates inconsistency. Focusing only on regulated or sensitive-data systems is too narrow.

To reduce Azure OpenAI costs with minimal quality loss, you target the biggest cost drivers: token usage and model price per token (or throughput unit). C (Optimize the prompts) is a best practice because shorter, clearer prompts reduce unnecessary input tokens and often reduce output length by tightening instructions and formatting. Prompt optimization can preserve or even improve quality by removing ambiguity, adding constraints, and using compact context (for example, only the most relevant grounding passages). Lower token consumption directly lowers cost while maintaining response usefulness.

D (Switch to an alternate model) is also effective because different models have different price/performance tradeoffs. Moving from a premium model to a more cost-efficient model (or a smaller variant) can significantly reduce spend. You can minimize quality impact by validating outputs on representative scenarios and using a tiered approach (cheap model by default, expensive model only for complex cases).

The other options are less aligned to the goal. A (Fine-tune) typically increases cost (training and ongoing evaluation) and is not the first-line cost reducer. B (Content moderation) is primarily a safety control; it can add overhead and doesn’t directly reduce token costs. E (Decrease hosting hours) applies to capacity-based hosting scenarios, but the question states a prebuilt Azure OpenAI model for content generation—cost reduction is best achieved by prompt/token optimization and selecting the right model.