Plan an Agent Solution AB-620 Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   When planning identity for an AI agent solution, which component is essential for managing user identities and access?

   • AA database that stores user passwords in plain text.
   • BA network firewall that restricts inbound traffic.
   • CAn identity provider (IdP) that authenticates users and issues tokens.
   • DA load balancer that distributes user requests across servers.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company is deploying an AI agent that accesses a database of customer records. The agent will be used by customer service representatives. The company requires that the agent's access to customer data is restricted based on the representative's role. What security measure should you plan?

   • AUse a single API key for all representatives.
   • BGive all customer service representatives the same access to all customer data.
   • CUse Azure AD groups to control access to the agent and implement row-level security in the database.
   • DStore customer data in a public blob container for easy access.
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A company is deploying an AI agent for external customers to check order status. Customers will authenticate with their existing social accounts. The agent must access order data from the company's CRM. What should the company configure to ensure secure, least-privilege access?

   • AUse the customers' social identity tokens to directly query the CRM API.
   • BCreate a service principal for the agent and grant it read-only access to the CRM, while mapping authenticated customers to their records via a secure backend lookup.
   • CStore CRM credentials in the agent's configuration and use them for all customer requests.
   • DHave the agent impersonate each customer by using their social token to call the CRM.
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A bank is deploying an AI agent that provides financial advice to customers. The agent must comply with financial regulations that require explanations for decisions and the ability to audit the agent's behavior. The bank also wants to deploy updates frequently. What governance and deployment plan should you implement?

   • ADeploy updates directly to production without testing to keep pace with changes.
   • BImplement a model risk management framework with regular audits, and use a deployment pipeline with automated testing and rollback capabilities.
   • CUse a manual deployment process with no rollback plan.
   • DAvoid frequent updates to reduce regulatory risk.
   Reveal Solution Discussion Select an answer first
6. 30expert · hard

   A manufacturing company wants to deploy an AI agent that allows employees to check machine status from an ERP system and submit maintenance requests. The company has a hybrid environment with some systems on-premises and some in Azure. The agent must use existing corporate identities. What integration and identity strategy should you plan?

   • AUse Azure AD with hybrid identity to connect to both on-premises and cloud systems, and use managed identities for the agent to access Azure resources.
   • BCreate a new identity store in Azure AD and migrate all users to it.
   • CUse separate identities for on-premises and cloud systems.
   • DUse a service account with broad permissions to access all systems.
   Reveal Solution Discussion Select an answer first