Correct Answer:

Explanation:
Provision Test, Acceptance, and Production by using a Bicep file applied through the CI/CD pipeline in Azure Pipelines; block promotion when quality falls below the threshold by using Foundry Agent Evaluator as a pipeline release gate.
The release lifecycle must satisfy two independent requirements: repeatable infrastructure deployment across DTAP environments and an automated quality gate before promotion. Bicep is Azure ' s infrastructure-as- code language, and Microsoft documents deploying Bicep through Azure Pipelines so the same declarative resources can be promoted consistently across subscriptions. For the promotion decision, an automated Foundry evaluation is the appropriate control because response quality is an AI-system property that should be measured against a defined threshold before the next stage is released. A manual portal deployment would weaken repeatability, while a deployment-only gate would not measure model or agent behavior. The important design point is that infrastructure provisioning and AI quality validation are separate controls in the same pipeline: Bicep establishes environment parity, and the evaluation gate prevents a technically deployable but behaviorally degraded agent version from advancing. From a security and governance perspective, the control should be enforced at the narrowest platform boundary that can deterministically block or constrain the action. Relying only on prompt text is weaker because the model can still be induced to behave unexpectedly.
Official Microsoft reference: Deploy Bicep files with Azure Pipelines; AI-500 Study Guide

Correct Answer:

Explanation:
Integration mechanism: Agent-to-Agent (A2A) tool; Capability discovery contract: Agent cards; Credential and endpoint configuration: A Foundry project A2A connection.
The remote fraud service is an autonomous agent that exposes a standards-based HTTPS endpoint and publishes its skills and media types, which matches the Agent-to-Agent protocol rather than a conventional tool API. A2A uses an agent card as the capability-discovery contract, allowing the coordinator to discover supported skills, formats, and invocation details without coupling to the remote framework ' s implementation.
Microsoft Foundry project A2A connections store the remote endpoint and authentication configuration so credentials can be reused across coordinator-agent versions instead of being embedded separately in every version. Together, the A2A tool, agent card, and project connection satisfy interoperable invocation, capability discovery, and reusable authentication. This is the supported Microsoft architecture for calling an external A2A-compatible agent from a Foundry coordinator. The configuration should be kept in the project connection rather than prompt text so authentication remains centrally managed, auditable, and reusable as the coordinator evolves. This also avoids duplicating sensitive connection settings across agent versions.
Official Microsoft reference: Microsoft Foundry - enable Agent-to-Agent endpoint and authentication

Correct Answer: B  🗳️

Explanation: Only visible for Exams4Collection members. You can sign-up / login (it's free).

Correct Answer:

Explanation:
Corpus access: AgentServiceBaseTool wrapping FileSearchTool; Outage fallback: No listed option fully satisfies the requirement to run the cached-policy lookup in the same Azure Container Apps compute; Telemetry: AzureAIOpenTelemetryTracer added as callbacks.
Current Microsoft LangGraph integration guidance supports wrapping Foundry ' s FileSearchTool through AgentServiceBaseTool for the primary project-vector-store path and attaching AzureAIOpenTelemetryTracer through LangGraph callbacks for OpenTelemetry traces. The problematic part is the proposed outage fallback. Code Interpreter is a Foundry-hosted built-in tool, so it does not execute in the same Azure Container Apps compute environment as the LangGraph application. That means a CodeInterpreterTool- based fallback cannot satisfy the explicit same-compute requirement. A technically correct design would use a local LangGraph/LangChain callable or tool over cached policy content mounted or stored with the Container Apps workload. Because that local-tool option is absent from the answer set, there is no fully valid listed selection for the fallback row. The updated answer therefore preserves the two valid selections and explicitly identifies the missing valid option rather than endorsing an inconsistent one. The implementation should also preserve clear inputs and outputs around this step so that later agents receive only the information they require. This improves debuggability and keeps token, permission, and state growth under control as the workflow becomes more complex.
Official Microsoft reference: Microsoft Foundry - develop LangChain/LangGraph agents

Correct Answer:

Explanation:
Identity structure: Separate blueprints for the orchestrator agent and each worker group; Permission assignment: Assign role-specific downstream permissions to each agent identity.
The supplier and finance workers operate in different trust domains: one reaches external supplier APIs while the other has confidential ERP access. Microsoft Entra Agent ID guidance recommends separating blueprint
/identity trust boundaries when compromise of one agent must not expose unrelated credentials or permissions. Each logical agent identity should then receive only the downstream roles required for its own function. This creates clear audit attribution and limits lateral movement. Giving all workers the same role or routing every privileged operation through an overly powerful orchestrator would expand the blast radius.
Creating an identity for every runtime replica is unnecessary when replicas represent the same logical agent role. The correct structure therefore separates the orchestrator and worker trust domains and assigns role- specific permissions to each identity rather than sharing a common authorization envelope. The same configuration should be paired with auditable identity, trace, and evaluation data so reviewers can prove which principal acted, which policy was applied, and why a request was allowed or blocked. That is particularly important for production multi-agent systems with external tools.
Official Microsoft reference: Microsoft Entra Agent ID - plan agent identity architecture