A company is deploying an AI agent for its employees to access internal IT support. The agent will use Azure AD for authentication. What should the company configure to ensure employees only access the agent and not other internal resources?

Create an Azure AD app registration for the agent and assign only the necessary permissions.

Use the employees' existing Azure AD tokens for all backend systems.

Allow any authenticated Azure AD user to access the agent without additional permissions.

Store a shared password for all employees to access the agent.

What is the primary purpose of using enterprise connectors when integrating an AI agent with existing systems?

To automatically translate the enterprise system's programming language into the AI agent's language.

To provide a pre-built, secure method for the AI agent to interact with the system's data and services.

To replace the enterprise system's user interface with the AI agent's interface.

To store all enterprise data within the AI agent's storage for faster processing.

What is the primary purpose of a governance framework for AI agents?

To eliminate the need for human oversight.

To maximize the speed of AI agent development.

To ensure compliance with regulations and internal policies.

To reduce the cost of AI agent deployment.

Which identity strategy is most appropriate for an AI agent that needs to access resources on behalf of a user?

Implement a service principal with delegated permissions.

Create a shared admin account for all users.

Use OAuth 2.0 delegated flow to obtain tokens on behalf of the user.

Use the user's credentials directly in the AI agent's code.

A government agency is deploying an AI agent to help citizens with public service information. The agent must be accessible to all citizens, including those without smartphones. The agency also requires that the agent clearly identifies itself as an AI. Which channel and responsible AI plan should you implement?

Deploy the agent on a web portal and also via SMS, and include an AI disclosure message at the start of interactions.

Deploy the agent only as a mobile app to provide a rich experience.

Use email as the only channel to avoid technical barriers.

Do not disclose that the agent is AI to avoid confusing users.

Microsoft Certified:AI Agent Builder Associate

Domain 1Objective 1

Plan an Agent Solution AB-620 Practice Questions (Page 7)

Part of the Plan and configure agent solutions domain, which accounts for 30–35% of the AB-620 exam. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–28 in this domain), expect 5–9 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

9concepts

30–35%of the exam

Questions 31–35

31application · medium
A company is deploying an AI agent for its employees to access internal IT support. The agent will use Azure AD for authentication. What should the company configure to ensure employees only access the agent and not other internal resources?
Select an answer first
32foundation · easy
What is the primary purpose of using enterprise connectors when integrating an AI agent with existing systems?
Select an answer first
33foundation · easy
What is the primary purpose of a governance framework for AI agents?
Select an answer first
34foundation · easy
Which identity strategy is most appropriate for an AI agent that needs to access resources on behalf of a user?
Select an answer first
35application · medium
A government agency is deploying an AI agent to help citizens with public service information. The agent must be accessible to all citizens, including those without smartphones. The agency also requires that the agent clearly identifies itself as an AI. Which channel and responsible AI plan should you implement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AB-620

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AB-620” is a trademark of its owner, used for identification only.