Key details for this exam, checked against the published exam outline
Each question shows the correct answer and an explanation of why it is right
You need to ensure that every AI-generated response from the agent in Copilot Studio includes a disclaimer that complies with the company's security and governance policies.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
This multiple-choice question asks for two actions to ensure every AI-generated response includes a disclaimer complying with security and governance policies. The available options are not provided in the question text.
Common approaches to adding disclaimers in Copilot Studio include:
<ul><li><strong>System Prompt Configuration:</strong> Adding disclaimer text to the system prompt or agent instructions</li><li><strong>Topic Flow Design:</strong> Implementing a disclaimer message node in conversation flows</li><li><strong>Post-Response Processing:</strong> Using a cloud flow to append disclaimers to all responses</li><li><strong>Message Template:</strong> Creating a custom response template that includes disclaimer text</li><li><strong>Generative Answer Settings:</strong> Configuring built-in disclaimer options for generative content</li></ul>A company is building an agent in Copilot Studio.
The agent must meet the following requirements:
Responses must be grounded in approved internal content.
The agent must be able to retrieve information from configured data sources in a topic.
You need to configure the agent so that topic responses are grounded from custom data sources.
What should you configure?
Comprehensive and Detailed Explanation From Microsoft AB-620 Study Guide: A generative answers node inside the topic is the correct place to retrieve from configured knowledge sources for that specific conversational path. The node can use the user's message as input, search designated sources, and generate a grounded response from the retrieved content. Topic-level sources can override the broader agent-level set, which is useful when the topic must restrict itself to approved data. A custom prompt that merely instructs the model to use company information does not create or enforce a retrieval connection. Increasing the response limit affects length, not grounding. Analytics measures usage after the fact and cannot supply knowledge. Adding SharePoint only at agent level is unnecessarily narrow and would not satisfy the requirement for custom sources configured within the topic. The builder should enable Search only selected sources when strict scoping is required and turn off general knowledge if no ungrounded fallback is allowed. Testing should inspect both the answer and the resource details to confirm that the intended source supplied the evidence. Study Guide alignment: Plan and configure agent solutions > Configure topics > Configure generative answers node; Configure advanced agent responses with custom knowledge sources.
An agent uses a flow that calls an external service which can occasionally fail or time out.
When a failure occurs, the agent must meet the following requirements:
Must not terminate silently.
Must send a notification containing the error details.
You need to configure the agent flow so that failures are handled in a controlled and predictable way.
Solution: Configure run after conditions for failure paths.
Does the solution meet the goal?
Comprehensive and Detailed Explanation From Microsoft AB-620 Study Guide: Configure run after is the control that routes execution to an error-handling action when the external-service action fails, times out, is skipped, or reaches another selected status. By configuring the notification action to run after failure and timeout, the flow no longer terminates silently and can send a message containing sanitized error context. The handler can then set a deliberate flow status, record a correlation ID, and provide the operator with the failed action and remediation path. This design should be paired with an appropriate retry policy based on whether the external operation is safe to repeat. For non-idempotent writes, automatic retry may create duplicates and should generally be disabled or protected with an idempotency key. Error notifications must not include tokens, secrets, or unrestricted payloads. Testing should deliberately produce an authorization failure, timeout, and service error to prove that each status enters the handler and that the notification itself has a fallback if its connector is unavailable. Study Guide alignment: Plan and configure agent solutions > Create and monitor agent flows in Copilot Studio > Implement error handling in agent flows.
Here is the complete text extracted from the image:
A tenant administrator configures a Copilot connector that indexes content from an external knowledge system into Microsoft Graph.
A builder is building an agent that must:
Use the indexed enterprise knowledge during answer generation.
Avoid duplicating or manually uploading the same content.
Avoid invoking the system as a transactional tool.
You need to configure the agent so that responses are grounded in the authorized knowledge sources.
What should you do?
Comprehensive and Detailed Explanation From Microsoft AB-620 Study Guide: The tenant administrator has already configured a Copilot connector that indexes the external system into Microsoft Graph. The agent should consume that approved enterprise knowledge source from its Knowledge configuration. This lets generative answers retrieve authorized indexed content without recreating the connector, uploading duplicate documents, or treating the source as a callable transaction. Copilot connectors are designed for enterprise search and knowledge grounding; the user's access is evaluated so that responses surface only content the user is permitted to see. A custom connector is appropriate when the agent must call an API or perform an operation, which the scenario explicitly excludes. Adding the connector as a tool would likewise shift the design from retrieval to invocation. Manual file upload would create a second, potentially stale copy and break the administrator-managed indexing lifecycle. After adding the source, the builder should provide a clear name and description, test representative questions, confirm citations or source attribution, and verify that restricted users cannot retrieve unauthorized material. Study Guide alignment: Integrate and extend agents in Copilot Studio > Connect to enterprise knowledge sources > Connect to Copilot connectors.
An agent calls a flow to a database. The agent requires structured output values to be returned. The agent receives unexpected or empty values.
You need to configure the agent so that data is exchanged correctly between the agent and the flow. What should you do?
Comprehensive and Detailed Explanation From Microsoft AB-620 Study Guide: The first configuration check is the contract between the agent and the flow. Input and output parameter definitions must agree on name, data type, required status, and mapping. A flow can complete successfully yet return an empty value to the agent if the response field is not mapped to the declared output or if the agent expects a different type. Validating the parameter definitions therefore addresses the actual data-exchange requirement. Reviewing run history is useful for diagnosis, but it does not correct a mismatched contract by itself. Changing the trigger schema or adding Parse JSON might be necessary in a specific implementation, yet neither should be done before confirming what the caller sends and what the flow returns. Republishing cannot repair an incorrect mapping. The builder should test the flow directly with known values, inspect each action output, verify the final response action, and then test from the agent. Optional and null fields should be handled explicitly, and sensitive outputs should be minimized and protected in logs. Study Guide alignment: Plan and configure agent solutions > Create and monitor agent flows in Copilot Studio > Add input and output parameters.
A company is configuring an agent in Copilot Studio that uses a generative answers node inside multiple topics.
The company requires responses to meet the following requirements:
Must use an executive summary format.
Must apply only within a specific topic.
Must continue using configured knowledge sources.
Must comply with connector security controls.
You need to configure a custom prompt to meet the formatting requirements.
Solution: Configure custom instructions on the existing generative answers node at the topic level so that other topics are not affected.
Does the solution meet the goal?
Comprehensive and Detailed Explanation From Microsoft AB-620 Study Guide: Applying custom instructions on the existing generative answers node at the topic level meets the scope requirement because only that topic's response behavior is changed. The node remains responsible for searching the configured knowledge sources, so grounding is preserved while the custom instruction imposes an executive-summary structure. Other topics continue using their own node or agent-level behavior. This is different from replacing the generative answers node with an independent prompt tool, which can sever the retrieval path. The topic should keep Search only selected sources configured when source restriction is required, and general knowledge should be disabled if the answer must be based exclusively on enterprise data. Connector authentication and data-policy enforcement remain platform controls and are not weakened by a formatting instruction. The instruction should specify a stable format---such as decision, key facts, risks, and next actions---without asking the model to disclose internal reasoning. Tests should verify both consistent formatting and correct source use under users with different permissions. Study Guide alignment: Plan and configure agent solutions > Configure topics > Configure advanced agent responses with custom prompts; Configure generative answers node.
A solution architect is implementing a governance process for an agent developed in Copilot Studio. Before the agent is moved to production, the organization requires a standardized validation process to ensure that updates to the underlying knowledge base do not cause regressions in response accuracy.
The validation process must satisfy the following technical criteria:
Consistency: Execute a fixed library of test cases containing specific user prompts.
Grounding: Measure the quality of the generated output against a verified "golden" response.
Comparison: Provide a performance delta between the current version and previous test runs.
You need to choose an evaluation method that meets the requirements.
What should you use?
Comprehensive and Detailed Explanation From Microsoft AB-620 Study Guide: A predefined test set with expected outcomes is the only option that satisfies consistency, grounding comparison, and repeatable regression analysis. The fixed prompts ensure that each version receives the same inputs. Verified expected responses provide the baseline against which meaning, quality, keywords, or exact output can be scored. Rerunning the same set produces comparable results over time, allowing the team to calculate whether a knowledge-base change improved or degraded performance. The manual test pane is valuable for interactive debugging and inspecting the activity map, but it does not provide the same controlled batch or historical comparison. Channel usage metrics describe adoption and operational behavior, not response correctness. Transcript keyword searches can reveal patterns after deployment but do not establish a golden answer or a controlled experiment. The evaluation method should match the content: compare-meaning for legitimate paraphrases, exact match for fixed values, keyword match for required terms, or a custom rubric for domain-specific quality. Results should be retained or exported when a longer audit history is required. Study Guide alignment: Test and manage agents > Evaluate agent performance > Create a test set; Choose an evaluation method; Review test results.
Exam domains verified against: Official Microsoft AB-620 exam guide, last checked October 2026.
Design agents for internal or external audiences while planning integration with enterprise systems and identity strategy. Evaluate security and governance considerations alongside responsible AI strategy and plan reusable agent components and deployment channels.
Sample question from this domain above: Q6
Connect to enterprise knowledge sources including Azure AI Search and Copilot connectors. Configure MCP tools and computer use, then implement multi-agent collaboration using Foundry agents, Fabric data agents, and the A2A protocol.
Evaluate agent performance by creating test sets and choosing evaluation methods, then review results. Implement application lifecycle management including solution creation, environment variables, and Microsoft Power Platform Pipelines extension.
Common questions about the exam itself