2 packs: 15% off with code BUY2. 3 or more: 20% off with code BUY3.

Free Microsoft AI-103 Practice Questions

47 free Microsoft AI-103 practice questions from the CertStash pack of 187, each with the correct answer and a full explanation. The rule is the same for every exam: ten free on the product page, 47 free here, all 187 in the pack, and each step includes the one before it.

Question 1

You are planning a Microsoft Foundry project named Project1 that will contain multiple agents. Each agent will access the same Azure AI Search resource.

You need to recommend a solution to centrally manage the Azure AI Search credentials within Project1. The solution must be implemented across all the agents.

What should you recommend?

  1. Enable role-based access control (RBAC) for the Azure AI Search resource.
  2. Disable key-based access control on the Azure AI Search resource.
  3. Add a connection to the Azure AI Search resource.
  4. Create a managed private endpoint that connects to the Azure AI Search resource.
Show answer and explanation

Correct answer: C. Add a connection to the Azure AI Search resource.

A connection in a Microsoft Foundry project stores the endpoint and authentication details for an external resource such as Azure AI Search in one place. Every agent in the project can reference the same connection, so the credentials are managed centrally and are not duplicated in each agent's code or configuration. When the credentials change, updating the single connection updates the behavior for all agents. This directly meets the requirement to centrally manage the Azure AI Search credentials across all the agents in Project1.

Why the other options are wrong

  • A. Enabling RBAC on the search resource controls who is authorized but does not create a central credential definition that the agents share.
  • B. Disabling key-based access removes one authentication method but does not give the agents a central place to obtain the search credentials.
  • D. A managed private endpoint secures the network path to the search resource and does not manage credentials.

Question 2

You have a Microsoft Foundry project that contains an agent. The agent uses Azure Speech in Foundry Tools.

You fine-tune a baseline speech to text model for the en-us locale and publish the model.

The agent calls the Speech to text REST API and returns an error message indicating that the project ID is invalid.

You need to set the project property to the correct ID.

To what should you set the project property?

  1. the project URL
  2. the custom speech project ID
  3. the project ID
  4. the custom speech endpoint URL
Show answer and explanation

Correct answer: B. the custom speech project ID

A fine-tuned speech to text model belongs to a custom speech project in Azure AI Speech. When the Speech to text REST API creates or references custom speech resources such as models, datasets and endpoints, the project property identifies the custom speech project that owns them. That value is the custom speech project ID, a GUID assigned when the custom speech project is created. It is different from the identifier of the Microsoft Foundry project, so supplying the Foundry value produces the invalid project error.

Why the other options are wrong

  • A. A project URL is an address, not the project identifier that the project property expects.
  • C. The Foundry project ID identifies the Foundry project, not the custom speech project that owns the fine-tuned model.
  • D. The custom endpoint URL is where recognition requests are sent and is not a project identifier.

Question 3

You have an Azure Speech in Foundry Tools resource that hosts a custom speech to text model deployed to a custom endpoint. An agent uses the endpoint to perform real-time speech recognition.

You are approaching the expiration date of the custom speech to text model.

What is the expected behavior when the model expires?

  1. Speech recognition requests will return a 4xx error until a new custom model is deployed.
  2. Speech recognition requests will continue to use the expired custom model until the model is removed manually.
  3. Speech recognition requests will fall back to the most recent base model for the same locale.
  4. The custom model will be deleted automatically when the model expires.
Show answer and explanation

Correct answer: C. Speech recognition requests will fall back to the most recent base model for the same locale.

Custom speech models have an expiration date for use in transcription. When a model that is deployed to a custom endpoint expires, Azure AI Speech keeps the endpoint working by falling back to the most recent base model for the same locale. Real-time recognition requests continue to succeed, but they no longer benefit from the custom adaptation, so accuracy for domain-specific vocabulary can drop. To keep the custom behavior, retrain the model on a newer base model and redeploy it before the expiration date.

Why the other options are wrong

  • A. Requests to a custom endpoint do not start failing with 4xx errors when the model expires because the endpoint falls back to a base model.
  • B. The expired custom model is not used for recognition after expiration, even if it is not removed.
  • D. Expiration does not delete the custom model automatically; it only stops the model from being used for transcription.

Question 4

You have a Microsoft Foundry project that contains a model deployment.

You have an application that calls the deployment by using the Azure OpenAI v1 API and DefaultAzureCredential.

The developers at your company receive HTTP 403 errors when they send inference requests, even after running az login.

You need to ensure that the developers can perform model inference. The solution must follow the principle of least privilege.

Which role-based access control (RBAC) role should you assign to the developers?

  1. Cognitive Services User
  2. Cognitive Services OpenAI User
  3. Contributor
  4. Cognitive Services Data Reader
Show answer and explanation

Correct answer: B. Cognitive Services OpenAI User

With DefaultAzureCredential, the developers sign in successfully through az login, so the 403 error means their identity lacks a data plane role on the resource. The Cognitive Services OpenAI User role grants the data actions needed to call deployments for inference, such as chat completions and responses, and it does not allow changing resources or deployments. It is therefore the least privileged built-in role that lets the developers perform model inference through the Azure OpenAI v1 API with Microsoft Entra authentication.

Why the other options are wrong

  • A. Cognitive Services User grants data access across all Cognitive Services APIs, which is broader than inference on Azure OpenAI deployments.
  • C. Contributor is a broad management role that exceeds least privilege for developers who only need to send inference requests.
  • D. Cognitive Services Data Reader allows reading data and does not grant permission to call model deployments for inference.

Question 5

You have a Microsoft Foundry project named Project1 that contains an agent. The agent uses an OpenAPI 3.0 specification to call an external weather service.

The weather service requires a key to be passed in an HTTP header. The key value is stored as a connection in Project1.

You need to ensure that the key value from the connection is included automatically whenever the OpenAPI tool is invoked.

What should you configure in the OpenAPI specification?

  1. a header parameter defined for each operation
  2. an Azure Key Vault connection
  3. an API key security scheme
  4. a Bearer token security scheme
Show answer and explanation

Correct answer: C. an API key security scheme

The OpenAPI tool in Foundry Agent Service supports connection-based authentication for APIs that use a key. In the OpenAPI 3.0 specification you define a security scheme of type apiKey under components with in set to header and the header name the service expects, and you apply that scheme to the operations. When the tool is invoked, the service reads the key value from the project connection and adds it to the request header automatically, so the key never appears in the specification or the agent instructions.

Why the other options are wrong

  • A. A header parameter makes the key an input of each operation instead of a value injected from the connection.
  • B. An Azure Key Vault connection is not an element of an OpenAPI specification and does not tell the tool how to send the key.
  • D. A Bearer token scheme sends a token in the Authorization header, which does not match a key passed in a custom header.

Question 6

You have a Microsoft Foundry project that serves a high-volume chat app.

Most requests are simple FAQs, but some require advanced reasoning.

You need to reduce costs and latency for common queries, without degrading the quality of the responses to complex questions.

What should you do?

  1. Route all the requests to a smaller model.
  2. Use a model cascade that routes the requests to different models.
  3. Increase the value of the max_tokens parameter for all the requests.
  4. Route all the requests to the most capable model.
Show answer and explanation

Correct answer: B. Use a model cascade that routes the requests to different models.

A model cascade sends each request to the least expensive model that can handle it and escalates to a more capable model only when needed. Simple FAQ requests are answered by a smaller, faster model, which lowers cost and latency for the bulk of the traffic. Requests that need advanced reasoning are routed to a more capable model, so the quality of complex answers is preserved. This balances cost and quality across a mixed workload in a way that a single model for every request cannot.

Why the other options are wrong

  • A. Sending every request to a smaller model lowers the quality of answers to complex questions that need advanced reasoning.
  • C. Raising max_tokens allows longer outputs, which can increase cost and latency rather than reduce them.
  • D. Sending every request to the most capable model keeps costs and latency high for simple FAQs.

Question 7

You have a Microsoft Foundry project that contains a high-traffic agent.

After a recent update, operational costs increase significantly.

Monitoring confirms that the volume of user traffic to the agent remains unchanged.

You suspect that changes to the request or response characteristics are causing the increase. You need to identify whether the additional costs are driven by the model input size, the model output size, or expanded tool usage.

Which observability capability should you use?

  1. latency
  2. evaluation metrics
  3. run success rate
  4. token usage
Show answer and explanation

Correct answer: D. token usage

Model costs are driven by tokens, so token usage is the signal that explains a cost increase when traffic volume has not changed. Token usage data separates input tokens from output tokens, which shows whether prompts have grown or responses have become longer. Tool calls add their own model calls and extra content to the context, so expanded tool usage also appears as additional token consumption per run. Comparing token usage before and after the update identifies which of the three factors is responsible.

Why the other options are wrong

  • A. Latency measures how long requests take and does not break down input size, output size or tool usage.
  • B. Evaluation metrics measure response quality and safety, not the consumption that drives cost.
  • C. Run success rate shows how many runs complete successfully and does not explain token consumption.

Question 8

You have a Microsoft Foundry project named Project1 that contains the following:

• An OpenAPI tool that calls an external API

• A project connection named Connection1 that stores the API key of the external API

When an agent calls the OpenAPI tool, the API returns a 401 unauthorized error, and traces show that the API key header is NOT being sent.

You need to ensure that the OpenAPI tool automatically includes the API key from Connection1 on all requests.

What should you do?

  1. Enable identity passthrough so that the tool uses the Microsoft Entra token of the caller.
  2. Add the API key header manually to the OpenAPI specification.
  3. Configure the tool to use the default connection of Project1.
  4. Connect the tool to Connection1.
Show answer and explanation

Correct answer: D. Connect the tool to Connection1.

The traces show that the API key header is missing, which means the OpenAPI tool is not using the connection that holds the key. With connection-based authentication, the tool is configured with the project connection, and the service reads the stored key and adds it to the request according to the API key security scheme in the specification. Connecting the tool to Connection1 makes the key part of every call automatically, which resolves the 401 errors without exposing the key in the specification or the agent code.

Why the other options are wrong

  • A. Identity passthrough sends a Microsoft Entra token of the caller, not the API key that the external API requires.
  • B. Putting the key value in the specification hardcodes a secret and bypasses the key stored in Connection1.
  • C. A default project connection is not Connection1, so the tool would not receive the key stored for this API.

Question 9

You have a Microsoft Foundry project that contains a customer support agent. The agent calls an internal knowledge API tool before generating responses.

Users report the following issues:

Some requests take more than 15 seconds to complete.

Some responses are incorrect, even when the knowledge API returns the expected data.

You need to inspect individual agent runs to view the ordered sequence of large language model (LLM) calls, tool invocations, and timing information.

Which observability capability should you use?

  1. token usage
  2. monitoring
  3. safety metrics
  4. tracing
Show answer and explanation

Correct answer: D. tracing

Tracing records each agent run as a set of spans that show the ordered sequence of model calls, tool invocations and their inputs and outputs, together with the duration of every step. For slow requests, the span timings show whether the delay comes from the knowledge API or from the model calls. For incorrect answers, the trace shows what the tool returned and how the model used that data, which reveals where the run went wrong even when the API returned the expected results.

Why the other options are wrong

  • A. Token usage reports consumption totals and does not show the ordered steps or timing of an individual run.
  • B. Monitoring presents aggregated metrics over time rather than the step-by-step detail of a single run.
  • C. Safety metrics score responses for harmful content and do not show the sequence of calls or their timing.

Question 10

You have a chat app in a Microsoft Foundry project and an Azure AI Search vectorized index.

You need to connect to the index to meet the following requirements:

Complex questions must retrieve information from multiple chunks.

Multi-turn conversations must influence retrieval planning.

Retrievals must run in parallel to reduce latency.

Which retrieval approach should you use?

  1. iterative retrieval
  2. agentic Retrieval Augmented Generation (RAG)
  3. chain of thought
  4. classic Retrieval Augmented Generation (RAG)
Show answer and explanation

Correct answer: B. agentic Retrieval Augmented Generation (RAG)

Agentic retrieval in Azure AI Search uses a language model to plan the query. It reads the conversation history, breaks a complex question into focused subqueries, runs those subqueries in parallel against the index, semantically reranks the results of each subquery, and then merges the best results into a single response for the chat app. This meets all three requirements: complex questions draw on multiple chunks, earlier turns shape query planning, and parallel execution keeps latency low.

Why the other options are wrong

  • A. Iterative retrieval runs searches one after another, so it does not provide the parallel execution needed to reduce latency.
  • C. Chain of thought is a prompting technique for model reasoning and does not retrieve content from an index.
  • D. Classic RAG sends a single query per turn and does not plan subqueries from the conversation or run them in parallel.

What people say about the full AI-103 pack 5.0 from 3

No complaints, passed AI-103.
ROHAN NAIRAI-103
Great resource for AI-103.
Liu SharmaAI-103

Question 11

You have a Microsoft Foundry project that contains an agent. The agent generates summaries from retrieved policy documents.

You need to improve response completeness. The solution must be implemented in the logic of the application code before responses are returned.

What should you do?

  1. Add a retry evaluation before the responses are returned.
  2. Decrease the value of the max_tokens parameter.
  3. Switch to Retrieval Augmented Generation (RAG).
  4. Replace the model with a smaller deployment.
Show answer and explanation

Correct answer: A. Add a retry evaluation before the responses are returned.

A retry evaluation is application logic that runs after the agent generates a summary and before the summary is returned. The code checks the response for completeness, for example by confirming that required items are present or by using an evaluator score, and if the check fails it sends the request again with feedback so the agent can produce a fuller answer. This adds a quality gate in the application code itself, which is exactly where the requirement says the improvement must be implemented.

Why the other options are wrong

  • B. Decreasing max_tokens limits how much the model can write, which makes truncated and incomplete summaries more likely.
  • C. The agent already summarizes retrieved documents, so switching to RAG changes nothing and is not a check in the application code.
  • D. A smaller deployment generally reduces model capability and does not add any completeness check before responses are returned.

Question 12

You have a Microsoft Foundry project that contains an agent and uses a GitHub repository. The repository contains a YAML file named File1 that defines the evaluation settings of the agent.

You need to create a GitHub Actions workflow that runs the evaluation defined in File1 when a pull request (PR) is opened.

How should you configure the workflow?

  1. Set project-endpoint to the endpoint of the project.
  2. Set evaluation-config to the path of the YAML file.
  3. Set model-deployment-name to the deployed model.
  4. Set tenant-id to the Microsoft Entra tenant ID
Show answer and explanation

Correct answer: B. Set evaluation-config to the path of the YAML file.

The evaluation settings for the agent are already defined in File1, so the GitHub Actions workflow must be pointed at that definition. Setting evaluation-config to the repository path of the YAML file tells the evaluation step which configuration to run, and triggering the workflow on the pull_request event runs that evaluation whenever a pull request is opened. This setting is what links the workflow to the specific evaluation defined in File1.

Why the other options are wrong

  • A. The project endpoint identifies where to connect but does not tell the workflow which evaluation definition to run.
  • C. A model deployment name selects a model and does not reference the evaluation settings defined in File1.
  • D. The tenant ID supports authentication only and does not reference the evaluation definition.

Question 13

You have a Microsoft Foundry project that contains an agent.

You need to process mixed-format documents that contain scanned text, tables, and multicolumn layouts. The extracted content must preserve the document structure and be converted into the Markdown format for downstream reasoning.

What should you configure first?

  1. an Azure Language in Foundry Tools text analysis model deployment
  2. a generative chat completion request
  3. an Azure OpenAI Responses API call that uses a multimodal model
  4. an Azure Content Understanding in Foundry Tools analyzer
Show answer and explanation

Correct answer: D. an Azure Content Understanding in Foundry Tools analyzer

Azure Content Understanding in Foundry Tools analyzers perform OCR and layout analysis on documents and return the extracted content as Markdown that keeps the structure, including headings, paragraphs, tables and reading order across multicolumn pages. Configuring an analyzer is the first step because it converts the scanned, mixed-format files into structured Markdown that the agent can then reason over. Other model calls can only work with that content after it has been extracted.

Why the other options are wrong

  • A. Azure Language text analysis works on plain text that already exists and does not perform OCR or layout extraction.
  • B. A chat completion request generates text from a prompt and does not extract structured content from scanned documents.
  • C. A multimodal Responses API call can describe document images but is not a layout extraction service that reliably preserves tables and structure as Markdown.

Question 14

You have a Microsoft Foundry project that contains an agent.

The knowledge source for the agent is a set of scanned PDF troubleshooting guides stored in Azure Blob Storage. The guide pages contain two-column layouts and tables.

You use Azure Content Understanding in Foundry Tools to process the PDFs.

You plan to ingest the processed content into an index for Retrieval Augmented Generation (RAG) and store extracted fields for downstream automation.

Stakeholders must be able to verify where each extracted field value came from in the original PDF and route low-reliability extractions for manual review.

You need to ensure that the Content Understanding document analyzer output includes a per-field confidence score and source grounding to locations within the source document.

What should you do?

  1. Set enableSegment to true.
  2. Provide labeled samples.
  3. Enable estimateFieldSourceAndConfidence.
  4. Configure the analyzer to use generative extraction for all fields.
Show answer and explanation

Correct answer: C. Enable estimateFieldSourceAndConfidence.

In an Azure Content Understanding document analyzer, the estimateFieldSourceAndConfidence configuration setting makes the output include a confidence score for each extracted field together with source grounding, the location in the original document from which the value was taken. Stakeholders can use the grounding to verify each value against the PDF, and the application can route fields with low confidence to manual review.

Why the other options are wrong

  • A. enableSegment splits content into segments for classification and does not add per-field confidence or grounding.
  • B. Labeled samples can improve extraction quality but do not by themselves add confidence scores and grounding to the output.
  • D. Generative extraction determines how field values are produced and does not on its own return per-field confidence and source locations.

Question 15

You have a Microsoft Foundry project that contains an agent.

The agent uses Azure AI Search for Retrieval Augmented Generation (RAG).

You plan to ingest and index PDF product manuals.

You need to build a solution that supports semantic similarity matching. The solution must ensure that the agent retrieves relevant data when user questions use different wording than the product manuals.

Which indexing approach should you use?

  1. vector search
  2. semantic ranking
  3. suggesters
  4. analyzers
Show answer and explanation

Correct answer: A. vector search

Vector search stores embeddings, which are numeric representations of the meaning of text, for the content chunks in the index. At query time the user question is converted into an embedding, and Azure AI Search returns the chunks whose vectors are closest in meaning. Because matching is based on semantic similarity rather than shared terms, the agent retrieves relevant passages from the product manuals even when users phrase questions with different words than the manuals use.

Why the other options are wrong

  • B. Semantic ranking reorders results that a query has already retrieved and does not itself index content for similarity matching.
  • C. Suggesters provide autocomplete and suggestions based on prefixes of indexed terms, not meaning.
  • D. Analyzers tokenize and normalize text for keyword search, which still depends on matching terms.

Question 16

You are developing prompts for a Microsoft Foundry project that classifies incoming support tickets by category.

You need to improve accuracy by showing the model how correct classifications look, without retraining the model or storing knowledge permanently.

Which prompt engineering approach should you use?

  1. Retrieval Augmented Generation (RAG)
  2. zero-shot learning
  3. chain of thought
  4. few-shot learning
Show answer and explanation

Correct answer: D. few-shot learning

Few-shot learning places a small number of example inputs paired with their correct outputs directly in the prompt. The model infers the expected pattern and format from these examples and applies it to the new ticket, which typically improves classification accuracy. Because the examples exist only in the prompt for that request, the approach does not retrain the model and does not store any knowledge permanently.

Why the other options are wrong

  • A. Retrieval Augmented Generation supplies reference content from a data store rather than demonstrating examples of correct classifications.
  • B. Zero-shot learning gives the model instructions without any examples, so it does not show what correct classifications look like.
  • C. Chain of thought asks the model to reason step by step and does not provide labeled classification examples.

Question 17

You are building a speech processing solution in Microsoft Foundry for a customer support platform.

The platform will transcribe live phone calls, so that supervisors at your company can view call transcripts and detect issues while the calls are in progress. The call audio will arrive as a continuous stream from the telephony system.

You need to ensure that the call transcripts appear within only a few seconds of the audio stream.

What should you do?

  1. Use text to speech by using a custom neural voice.
  2. Use speech translation to generate the transcripts into multiple languages.
  3. Run a batch transcription job on recorded audio files.
  4. Use real-time speech to text to process streaming audio input.
Show answer and explanation

Correct answer: D. Use real-time speech to text to process streaming audio input.

Real-time speech to text in Azure AI Speech accepts a continuous audio stream and returns intermediate and final recognition results as the audio is processed. Connecting the telephony stream to real-time transcription lets supervisors see call transcripts within a few seconds of speech while calls are still in progress, which meets the latency requirement.

Why the other options are wrong

  • A. Text to speech with a custom neural voice converts text into audio, the opposite of transcription.
  • B. Speech translation translates spoken audio into other languages, which is not required and does not add transcription capability beyond real-time speech to text.
  • C. Batch transcription processes recorded audio files asynchronously after the calls, so transcripts are not available during the calls.

Question 18

You have an application that processes scanned PDF invoices. The invoices have varied layouts and include multipage tables.

You have a pipeline that uses optical character recognition (OCR) and extracts totals and invoice numbers. The results are often incorrect because the document structure is ignored.

You need to implement a solution that provides OCR, layout analysis, and template-generalizing field extraction. The solution must NOT require training a custom model. The solution must minimize administrative effort.

What should you include in the solution?

  1. Azure Language in Foundry Tools
  2. Azure Content Understanding in Foundry Tools
  3. an Azure Machine Learning model
Show answer and explanation

Correct answer: B. Azure Content Understanding in Foundry Tools

Azure Content Understanding in Foundry Tools combines OCR, layout analysis and generative field extraction in a single service. Its prebuilt invoice analyzer, or a custom analyzer defined only by a field schema, extracts values such as invoice numbers and totals across varied templates without training a custom model, and it understands tables that span multiple pages. Because the service is fully managed and needs no labeled training data, it also minimizes administrative effort.

Why the other options are wrong

  • A. Azure Language analyzes plain text and does not perform OCR or layout analysis on scanned invoices.
  • C. An Azure Machine Learning model must be built, trained and maintained, which violates the requirement to avoid custom training and increases administrative effort.

Question 19

You have a Microsoft Foundry project that contains an agent. The agent uses two tools to perform the following actions:

• Use Azure AI Search to retrieve answers from a private product documentation index.

• Use the web search tool to retrieve public information on the internet.

You need to ensure that for a specific run, the agent deterministically retrieves information only from the internet.

To what should you set tool_choice?

  1. {“type”: “bing_grounding”}
  2. {“type”: “azure_ai_search”}
  3. “auto”
  4. “required”
Show answer and explanation

Correct answer: A. {“type”: “bing_grounding”}

The tool_choice parameter controls how the agent selects tools for a run. Passing an object that names a specific tool type forces the agent to call that tool for the run, which makes the behavior deterministic. Setting tool_choice to the Grounding with Bing Search tool type forces the agent to use its Bing-based internet search tool for public internet information and prevents it from querying the private Azure AI Search index, which is the exact behavior required for this run.

Why the other options are wrong

  • B. Forcing the Azure AI Search tool retrieves only from the private documentation index, the opposite of the requirement.
  • C. With auto, the model decides which tool to use, so the choice of tool is not deterministic.
  • D. With required, the agent must call a tool but may still choose Azure AI Search instead of web search.

Question 20

You have a web app named App1 that processes user prompts by integrating with a Microsoft Foundry project named Project1. App1 performs the following actions:

• Sends prompts directly to a model by using the Azure OpenAI Responses API

• Invokes the Azure AI Content Safety tool by using a Foundry connection within the same request

You need to configure end-to-end visibility into each step of the request workflow.

What should you do?

  1. Enable logging by using the client SDK for Content Safety.
  2. Enable logging by using Foundry Local.
  3. Enable application tracing in Project1.
  4. Route requests through the Azure OpenAI endpoint.
Show answer and explanation

Correct answer: C. Enable application tracing in Project1.

Tracing in a Microsoft Foundry project captures each operation in a request as spans, including model calls made through the Responses API and the tool calls made over Foundry connections, and stores the telemetry in the Application Insights resource connected to the project. Enabling application tracing in Project1 therefore shows the whole request workflow from the prompt through the Content Safety step to the model response in a single trace, which provides the end-to-end visibility required.

Why the other options are wrong

  • A. Logging in the Content Safety client SDK records only the Content Safety calls and not the full request workflow.
  • B. Foundry Local runs models on a local device and does not trace a web app that uses a cloud Foundry project.
  • D. Routing requests through the Azure OpenAI endpoint changes the destination of calls but does not add any tracing.

Question 21

You have a web app named App1 that sends requests to a multimodal chat model deployment in a Microsoft Foundry project.

User messages can contain both text and images.

Currently, App1 includes image URLs as plain text inside the message content so the model cannot recognize them as images.

Traces show that the requests contain a single text message instead of a multimodal content array.

You need to send the message as a structured array that includes both the text portion and the image reference to ensure that the model can process the image correctly.

What should you do?

  1. Set the user message content array to include items that have type: text and type: image_url.
  2. Encode the image to base64 and include the encoded data inside the content string of the user message.
  3. Add the image URL to the request metadata section, so the model can resolve the processing issue automatically.
  4. Place the image URL inside the System Message and set type to image_url so the model loads the image at initialization.
Show answer and explanation

Correct answer: A. Set the user message content array to include items that have type: text and type: image_url.

Vision-enabled chat models receive images through a structured content array in the user message. Each element declares its type: an item with type text carries the prompt text, and an item with type image_url carries the image reference as a URL or a base64 data URL. When App1 builds the user message this way, the model recognizes the image as an image input instead of reading the URL as plain text.

Why the other options are wrong

  • B. Placing base64 data inside the text string still sends a single text message, so the model treats it as text.
  • C. Request metadata is not passed to the model as content, so the image would not be processed.
  • D. The image belongs in the user message content for that turn, and moving it to the system message does not create the required user content array.

Question 22

You are deploying a support agent that enables users to upload photos.

You need to automatically classify uploaded images for harmful content. The solution must block content based on severity levels.

What should you do?

  1. Apply keyword scanning to optical character recognition (OCR) output by using Azure Vision in Foundry Tools.
  2. Enable prompt shields.
  3. Use blocklists.
  4. Implement image moderation.
Show answer and explanation

Correct answer: D. Implement image moderation.

Image moderation in Azure AI Content Safety analyzes uploaded images and classifies them into the harm categories of hate, sexual, violence and self-harm, returning a severity level for each category. The application or the content filter configuration can then block any image whose severity meets or exceeds the chosen threshold. This provides automatic classification of visual content and severity-based blocking, which are both required for photos that users upload to the support agent.

Why the other options are wrong

  • A. Keyword scanning of OCR output only examines text in the image and cannot classify harmful visual content by severity.
  • B. Prompt shields detect jailbreak and prompt injection attempts and do not classify images for harmful content.
  • C. Blocklists match specific terms in text and do not assign severity levels to image content.

Question 23

You have a Microsoft Foundry project that contains an agent.

The agent ingests scanned PDF vendor invoices that contain tables and embedded QR codes.

The agent must preserve the PDF layout in the extracted output to ensure that downstream processing can reference sections and tables.

You plan to call Azure Content Understanding in Foundry Tools.

You need to extract content and layout elements and detect QR codes without requiring a language model deployment.

Which built-in analyzer should you use?

  1. prebuilt-documentFieldSchema
  2. prebuilt-read
  3. prebuilt-documentSearch
  4. prebuilt-layout
Show answer and explanation

Correct answer: D. prebuilt-layout

The prebuilt-layout analyzer is a content extraction analyzer in Azure Content Understanding. It extracts words, paragraphs, figures and tables, identifies document structure such as sections, and provides layout information beyond basic text extraction, building on the OCR content elements, including barcodes, that the read analyzer returns. Microsoft states that it does not require a language model or embedding model deployment. This lets downstream processing reference sections and tables in the scanned invoices while also capturing the QR codes.

Why the other options are wrong

  • A. prebuilt-documentFieldSchema analyzes documents to propose a field schema and does not return the document layout and content.
  • B. prebuilt-read provides basic OCR without layout analysis, so tables and sections are not preserved.
  • C. prebuilt-documentSearch is a RAG analyzer that adds generated summaries and figure descriptions, which rely on a language model deployment.

Question 24

You have a Microsoft Foundry project that generates short promotional product videos.

After several clips are approved, reviewers notice a small watermark in the top-right corner of some videos.

You need to remove the watermark without regenerating the videos.

What should you do?

  1. Modify the original prompt to exclude watermarks.
  2. Crop the video by using the size parameter.
  3. Increase the guidance scale.
  4. Apply a mask-based inpainting edit to the affected part of the video.
Show answer and explanation

Correct answer: D. Apply a mask-based inpainting edit to the affected part of the video.

A mask-based inpainting edit changes only the region of the video that the mask covers and leaves the rest of each frame unchanged. Masking the top-right corner where the watermark appears lets the model fill that area with content that matches the surrounding scene, which removes the watermark from the approved clips without generating new videos.

Why the other options are wrong

  • A. Changing the prompt affects only future generations and requires the videos to be regenerated.
  • B. The size parameter sets the output resolution at generation time and does not crop or edit existing videos.
  • C. Guidance scale influences how closely a new generation follows the prompt and does not change an existing video.

Question 25

You have a Microsoft Foundry project that contains an agent named Agent1.

Agent runs succeed, but Foundry Control Plane does NOT display values for error rates, runs, and token usage, and the Traces tab is empty.

You need to ensure that Foundry Control Plane displays the appropriate values for Agent1.

What should you do?

  1. Update Agent1 to a new version.
  2. Restart Agent1 from Foundry Control Plane.
  3. Assign a Log Analytics workspace to Agent1.
  4. Enable Application Insights for Agent1.
Show answer and explanation

Correct answer: D. Enable Application Insights for Agent1.

Foundry Control Plane builds its operational views, such as runs, error rates, token usage, and traces, from telemetry stored in Application Insights. When no Application Insights resource is connected, the agent still runs successfully, but no telemetry is collected, so the metrics are blank and the Traces tab is empty. Enabling Application Insights for Agent1 starts the flow of telemetry, and the values then appear in Foundry Control Plane.

Why the other options are wrong

  • A. Publishing a new agent version does not create a telemetry destination, so the metrics would remain empty.
  • B. Restarting the agent does not enable any telemetry collection.
  • C. Assigning a Log Analytics workspace on its own does not connect the Application Insights telemetry that Foundry Control Plane reads.

25 questions in. Want the rest? The first half of the pack, free by email · The full pack

Question 26

You are creating an image-editing workflow in a Microsoft Foundry project.

The workflow must meet the following requirements:

Ensure that background objects can be removed by applying a mask-based inpainting edit.

Preserve the original lighting and style of the edited images.

Use the built-in image editing controls, NOT a custom model.

You need to ensure that image edits apply exclusively inside the masked area.

How should you configure the workflow?

  1. Set generation mode to image_variation and provide the original image as a reference.
  2. Enable text_to_image mode and a prompt describing the desired background removal.
  3. Enable image_to_image mode and a high-strength value to regenerate the full image based on the prompt.
  4. Enable mask_inpainting and supply both the input image and a mask indicating which part of the image to modify.
Show answer and explanation

Correct answer: D. Enable mask_inpainting and supply both the input image and a mask indicating which part of the image to modify.

Mask-based inpainting edits only the region that the mask marks, leaving every other pixel of the input image unchanged. Supplying the original image together with a mask over the background objects lets the built-in editing capability remove them and fill the area so that it blends with the surrounding lighting and style. Because the unmasked area is not regenerated, edits apply exclusively inside the masked area and no custom model is needed.

Why the other options are wrong

  • A. Image variation produces new versions of the whole image and does not limit changes to a masked region.
  • B. Text to image creates a new image from a prompt and does not edit the existing image.
  • C. Image to image with high strength regenerates the entire image, which changes content outside the intended area.

Question 27

You have a Microsoft Foundry project that contains a customer support agent built on a deployed chat model.

The agent responses are validated by using an automated testing system that compares generated answers to stored expected outputs. Identical prompts must return consistent responses to prevent automated test failures.

You need to reduce response variability, without modifying the prompt or reducing factual accuracy.

What should you do for the model?

  1. Increase the max_tokens parameter.
  2. Remove stop sequences from the requests.
  3. Decrease the temperature parameter.
  4. Increase the temperature parameter.
Show answer and explanation

Correct answer: C. Decrease the temperature parameter.

Temperature controls the randomness of token sampling. Lower values make the model favor the most likely tokens, so identical prompts produce more consistent and predictable responses, which is what automated comparison tests need. Lowering temperature changes only how the model samples its output, so it reduces variability without editing the prompt and without removing any knowledge the model uses to answer accurately.

Why the other options are wrong

  • A. Increasing max_tokens only raises the length limit of a response and does not reduce variability between runs.
  • B. Removing stop sequences can make responses run longer and less predictable rather than more consistent.
  • D. Increasing temperature makes sampling more random, which increases variability between identical prompts.

Question 28

You have a Microsoft Foundry project that uses Azure AI Search to ground an agent in internal documentation.

After a recent content update, users report that the agent’s answers have become less accurate.

You need to identify whether the retrieved content is negatively influencing the model’s generated responses.

Which observability signal should you review?

  1. indexer status and failure history
  2. latency breakdown traces
  3. prediction drift metrics
  4. groundedness evaluation metrics
Show answer and explanation

Correct answer: D. groundedness evaluation metrics

Groundedness evaluation measures how well a generated response is supported by the retrieved context supplied to the model. When answers degrade after a content update, reviewing groundedness metrics shows whether the responses still align with the documents returned by Azure AI Search or whether the model is drifting away from, or being misled by, the retrieved content. Low groundedness scores point directly at the relationship between retrieval and generation, which is exactly the signal needed to decide whether the new content is harming answer quality.

Why the other options are wrong

  • A. Indexer status and failure history show whether ingestion ran, not how retrieved content affects the generated answers.
  • B. Latency breakdown traces show where time is spent in a request and say nothing about answer accuracy.
  • C. Prediction drift metrics apply to traditional machine learning models and do not compare responses against retrieved context.

Question 29

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.

After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.

You have a Microsoft Foundry project that contains an agent. The agent generates summaries from retrieved policy documents.

Users report that some responses omit required regulatory clauses, even when the clauses are present in the retrieved content.

You need to improve response completeness.

Solution: You increase the value of the temperature parameter.

Does this meet the goal?

  1. Yes
  2. No
Show answer and explanation

Correct answer: B. No

Temperature controls how random the model's token choices are. A higher value makes output more varied and creative, which makes it less predictable whether a particular clause appears in a given summary. It provides no instruction or check that forces the required regulatory clauses into the response, so omissions can become more frequent rather than less. Increasing temperature therefore does not meet the goal of improving response completeness.

Why the other options are wrong

  • A. A higher temperature adds randomness to generation and does not make the model reliably include the required clauses.

Question 30

You plan to configure an evaluation in Microsoft Foundry for a Retrieval Augmented Generation (RAG) chat app.

You need to provide scores for groundedness, relevance, and harmful content categories.

Which two evaluation categories can you use? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

  1. risk and safety metrics
  2. fluency evaluator
  3. similarity evaluators
  4. AI quality (NLP) metrics
  5. AI quality (AI assisted) metrics
Show answer and explanation

Correct answer: A, E. risk and safety metrics; AI quality (AI assisted) metrics

Microsoft Foundry groups built-in evaluation metrics into categories. AI quality (AI assisted) metrics use a judge model to score qualities that require understanding meaning, including groundedness and relevance, which are central to a RAG chat app. Risk and safety metrics score harmful content categories such as hate and unfairness, sexual, violent, and self-harm content, and report defect rates based on severity. Using these two categories together provides the groundedness, relevance, and harmful content scores that the evaluation requires.

Why the other options are wrong

  • B. The fluency evaluator measures only language quality and produces neither groundedness, relevance, nor harm scores.
  • C. Similarity evaluators compare responses with ground truth and do not measure groundedness or harmful content.
  • D. AI quality (NLP) metrics such as F1, BLEU, and ROUGE are mathematical overlap scores and do not assess groundedness or relevance.

Question 31

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.

After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.

You have a multimodal AI generative model that accepts image uploads and uses extracted image text to generate responses.

You discover that users can upload unsafe images and embed hidden instructions into images to manipulate the model.

You need to implement controls to mitigate the risk.

Solution: You configure image moderation to block unsafe content before processing the images.

Does this meet the goal?

  1. Yes
  2. No
Show answer and explanation

Correct answer: B. No

Image moderation in Azure AI Content Safety analyzes images for harmful visual categories such as hate, sexual, violence and self-harm content, and it can block those images before they are processed. That control addresses the unsafe images. It does not analyze extracted text for prompt injection, so instructions hidden in an otherwise harmless image still reach the model. Because the goal requires mitigating both unsafe images and hidden instructions, image moderation alone does not meet the goal.

Why the other options are wrong

  • A. Image moderation does not detect injected instructions in extracted image text, so the manipulation risk remains.

Question 32

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.

After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.

You have a Microsoft Foundry project that contains an agent. The agent generates summaries from retrieved policy documents.

Users report that some responses omit required regulatory clauses, even when the clauses are present in the retrieved content.

You need to improve response completeness.

Solution: You add a reflection pass that regenerates the response if the required clauses are missing.

Does this meet the goal?

  1. Yes
  2. No
Show answer and explanation

Correct answer: A. Yes

A reflection pass reviews each generated summary against the requirement, here the list of required regulatory clauses, and regenerates the response when any clause is missing. Because the clauses already exist in the retrieved content, a second generation that is told what was omitted can include them. The pass both detects the gap and corrects it before the response is delivered, so users receive summaries that contain the required clauses. The solution meets the goal of improving response completeness.

Why the other options are wrong

  • B. The reflection pass detects missing clauses and regenerates the response when they are missing, which directly improves completeness.

Question 33

You have an invoice-processing application named App1 that uses Azure Content Understanding in Foundry Tools.

You are building a new Content Understanding pipeline named Pipeline1 that must meet the following requirements:

• Compare an invoice to its related purchase order

• Validate the invoice against static vendor contract documents

• Return a single structured output that includes discrepancy findings

You need to configure Pipeline1 and expose the pipeline as a single analyzer endpoint.

What should you configure?

  1. a single-file task in standard mode that uses the vendor contract provided as an additional document during analysis.
  2. a single-file task in standard mode that uses confidence scores enabled for the extracted fields.
  3. a multiple-file task in pro mode that uses the vendor contract files as reference data
  4. a multi-file task in standard mode that uses the invoice and purchase order as input to the analyzer
Show answer and explanation

Correct answer: C. a multiple-file task in pro mode that uses the vendor contract files as reference data

Pro mode in Azure Content Understanding is built for multistep reasoning across several input documents and for validating content against reference data. A multiple-file task accepts the invoice and its purchase order together so they can be compared, and the vendor contracts are supplied as reference data that the analyzer uses for validation. The analyzer returns one structured result that includes the discrepancy findings and is exposed through a single analyzer endpoint.

Why the other options are wrong

  • A. A single-file task in standard mode analyzes one document and does not support reasoning against reference documents.
  • B. Confidence scores show extraction reliability but do not compare an invoice with a purchase order or with contracts.
  • D. Standard mode does not support cross-document reasoning or validation against reference data such as the vendor contracts.

Question 34

You have an Azure AI Search indexer that ingests PDF policy manuals.

Client applications must display page-level citations that have bounding polygons for both text and images.

You need to add a single built-in multimodal content extraction skill to the Azure AI Search skillset. The solution must meet the following requirements:

• Provide text and image location metadata.

• Extract tables that span multiple pages.

What should you add?

  1. Document Extraction
  2. Azure Content Understanding in Foundry Tools
  3. GenAI Prompt
  4. Document Layout
Show answer and explanation

Correct answer: B. Azure Content Understanding in Foundry Tools

The Azure Content Understanding skill in an Azure AI Search skillset performs layout-aware extraction of text and images from documents and returns location metadata, such as page numbers and bounding polygons, that client applications can use for citations. It also handles tables that span multiple pages, returning each as a single table. A single skill therefore meets both requirements, which avoids combining several skills.

Why the other options are wrong

  • A. Document Extraction pulls raw text and images from files, but it provides bounding polygons only for extracted images, not for text, and it does not return table structure.
  • C. The GenAI Prompt skill sends content to a chat model for enrichment and does not perform layout extraction with location metadata.
  • D. Document Layout does not meet the requirement to extract tables that span multiple pages as single tables.

Question 35

You have a Microsoft Foundry agent that grounds responses from an Azure Search index that contains the following:

• Searchable text fields for product names and product codes

• A vector field that stores embeddings for product descriptions

You need to ensure that users can query the index by using the following:

• Exact product names or codes

• Natural language descriptions of the products

What should you configure?

  1. vector search only
  2. hybrid search
  3. keyword search only
  4. semantic search only
Show answer and explanation

Correct answer: B. hybrid search

Hybrid search runs a full-text keyword query and a vector query in the same request and merges the results by using Reciprocal Rank Fusion. The keyword part matches exact product names and codes in the searchable text fields, which embeddings handle poorly, while the vector part matches natural language descriptions against the embedding field by meaning. Combining both covers each type of user query in one search.

Why the other options are wrong

  • A. Vector search alone can miss exact matches on product codes and names, which need term matching.
  • C. Keyword search alone cannot match natural language descriptions that use different wording than the indexed content.
  • D. Semantic ranking only reranks results from a query and does not provide both exact term and vector matching.

Question 36

You have a Microsoft Foundry project that ingests scanned PDF invoices stored in Azure Blob Storage. Each invoice contains printed line items and has a table-based layout.

Extracted results are stored as structured JSON and used as grounding data for an agent in a Retrieval Augmented Generation (RAG) solution.

You need to create a single analyzer that meets the following requirements:

• Extracts the invoice number, invoice date, vendor name, and total amount across varying templates

• Returns confidence scores so that results with confidence below 0.80 can be routed for supervisor review

What should you use?

  1. a Foundry agent that has groundedness guardrails enabled to extract invoice fields and confidence scores
  2. a custom Azure Content Understanding in Foundry Tools analyzer that defines the required fields as the extracted fields and the returned confidence scores for routing
  3. the Azure Content Understanding in Foundry Tools prebuilt-layout analyzer
  4. the Azure Content Understanding in Foundry Tools prebuilt-documentSearch analyzer and search.score from the Azure AI Search results for routing
Show answer and explanation

Correct answer: B. a custom Azure Content Understanding in Foundry Tools analyzer that defines the required fields as the extracted fields and the returned confidence scores for routing

A custom Azure Content Understanding analyzer lets you define a field schema containing invoice number, invoice date, vendor name and total amount. The analyzer builds on the prebuilt-document base analyzer and uses generative extraction to find these values across varying invoice templates, and with confidence estimation enabled it returns a confidence score for each field. The application can then send any result below 0.80 to supervisor review, and the structured JSON output serves as grounding data for the RAG agent, all from a single analyzer.

Why the other options are wrong

  • A. Groundedness guardrails check whether generated text is supported by sources and do not return structured field confidence scores.
  • C. prebuilt-layout extracts text, tables and structure but does not extract named invoice fields with confidence scores.
  • D. search.score measures search relevance, not extraction confidence, and prebuilt-documentSearch does not extract the specific invoice fields.

Question 37

You have a customer support agent that uses the Microsoft Foundry Agent Service.

Sometimes, customers return to a session days later to continue the same support case, and the agent must resume with the full historical context. The agent must provide the following:

• Multi-turn continuity within the session

• Cross-session continuity for the same case

• Access to the full interaction history, including user messages, agent messages, tool calls, and tool outputs

You need to ensure that the agent automatically reloads the complete history on each new turn.

What should you do?

  1. Create and reuse a conversation by storing the conversation’s ID and supplying the ID on subsequent requests.
  2. Persist only the final model response stored in the client application and prepend the response to future prompts.
  3. Enable memory summarization on the agent definition to persist the context automatically.
Show answer and explanation

Correct answer: A. Create and reuse a conversation by storing the conversation’s ID and supplying the ID on subsequent requests.

In Foundry Agent Service, a conversation is a durable, service-side object that stores every item exchanged in a session, including user messages, agent messages, tool calls and tool outputs. When the application saves the conversation ID and passes it on each new request, the service automatically loads the stored items as context for the next turn. Because the conversation persists on the service, a customer who returns days later can continue the same support case with its full history, which satisfies both multi-turn and cross-session continuity without the client rebuilding the context.

Why the other options are wrong

  • B. Keeping only the final response discards earlier user messages, tool calls and tool outputs, so the full history is not available.
  • C. Memory summarization keeps condensed facts rather than reloading the complete interaction history on each turn.

Question 38

You have a Microsoft Foundry project that contains a Retrieval Augmented Generation (RAG) chat solution used by customer support agents.

You are adding an automated pre-production evaluation step to a CI/CD pipeline named Pipeline1. The evaluation will run against a labeled test dataset that contains support questions and the expected grounding context.

You need to ensure that Pipeline1 fails if unsupported content or a retrieval mismatch exceeds a defined threshold:

• responses include claims not supported by the retrieved source content

• retrieved source content does not align with the labeled expected context

Which two built-in evaluators should you use in Pipeline1? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

  1. Retrieval
  2. Fluency
  3. Coherence
  4. Groundedness
  5. Response Completeness
Show answer and explanation

Correct answer: A, D. Retrieval; Groundedness

The pipeline must fail on two distinct problems. Groundedness measures whether the claims in a response are supported by the retrieved context, so it detects responses that include unsupported content. Retrieval measures the quality of the retrieved context itself, assessing how relevant and well aligned the retrieved passages are for the query, so a low score flags retrieved content that is not relevant to the query, which signals retrieval that does not align with the expected grounding context. Setting thresholds on both scores lets Pipeline1 fail the build when either the generation step or the retrieval step falls below the required quality.

Why the other options are wrong

  • B. Fluency scores grammar and readability and cannot detect unsupported claims or retrieval mismatches.
  • C. Coherence scores the logical flow of a response and does not compare it with the retrieved context.
  • E. Response Completeness checks whether a response covers the ground truth and does not evaluate the retrieved content.

Question 39

You have a Microsoft Foundry project that contains a prompt agent used by a customer support web app.

The agent is invoked from a Python service that does NOT run in the Foundry portal.

You need to implement end-to-end tracing to capture latency breakdowns and exceptions across agent runs.

Which two components can you use? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

  1. a Log Analytics workspace
  2. Application Insights
  3. OpenTelemetry
  4. the Azure Monitor Agent
  5. Microsoft Sentinel
Show answer and explanation

Correct answer: B, C. Application Insights; OpenTelemetry

Agent tracing in Microsoft Foundry is built on OpenTelemetry. A Python service that runs outside the portal can be instrumented with the OpenTelemetry SDK and the Azure Monitor exporter so that every agent run emits spans for model calls, tool calls and errors, which yields latency breakdowns and exception details. Application Insights is the backend that a Foundry project connects to for tracing: it stores the spans and displays end-to-end transaction views, durations and failures, so connecting the project to Application Insights also provides the required tracing view.

Why the other options are wrong

  • A. A Log Analytics workspace stores log data for Azure Monitor but does not itself instrument code or provide distributed traces of agent runs.
  • D. The Azure Monitor Agent collects guest operating system logs and performance counters from virtual machines, not application traces from agent runs.
  • E. Microsoft Sentinel is a security information and event management service used for threat detection, not for tracing application latency.

Question 40

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.

After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.

You have a Microsoft Foundry project that contains an agent. The agent generates summaries from retrieved policy documents.

Users report that some responses omit required regulatory clauses, even when the clauses are present in the retrieved content.

You need to improve response completeness.

Solution: You increase the value of the max_tokens parameter.

Does this meet the goal?

  1. Yes
  2. No
Show answer and explanation

Correct answer: B. No

The required clauses are present in the retrieved content but are left out of the summaries, so the model is choosing not to include them. The max_tokens parameter only sets the upper limit on output length. Raising it helps when responses are cut off, but nothing indicates truncation here, and a larger budget does not instruct or verify that the regulatory clauses appear. The solution therefore does not meet the goal of improving response completeness.

Why the other options are wrong

  • A. A higher output limit allows longer responses but does nothing to make the model include clauses that it is omitting by choice.

Question 41

You have a Microsoft Foundry project that contains an agent and an image generation model deployment.

The agent generates original images from user-supplied product photos.

You need to ensure that the generated images maintain the product identity and visual characteristics of the provided photo.

What should you do?

  1. Set the input_fidelity parameter to high.
  2. Apply a groundedness detection filter.
  3. Include a prompt and input image in the request.
  4. Decrease the value of the temperature parameter.
Show answer and explanation

Correct answer: A. Set the input_fidelity parameter to high.

GPT image models support an input_fidelity parameter on image edit requests. Setting input_fidelity to high makes the model preserve details from the input image more closely, such as faces, logos and distinctive product features. When the agent creates new images from a supplied product photo, the high setting keeps the product identity and visual characteristics consistent with the original.

Why the other options are wrong

  • B. Groundedness detection checks text responses against grounding documents and has no effect on image generation.
  • C. A prompt and input image form a standard edit request, and on their own they do not make the model preserve the product details closely.
  • D. Image generation requests do not use a temperature parameter to control how closely output matches an input image.

Question 42

You have a customer support agent built by using the Microsoft Foundry Agent Service. The agent calls an Azure OpenAI model deployment.

During load testing, calls intermittently fail and return an HTTP 429 rate limit exceeded error.

You need to handle throttling to reduce call failures and improve reliability under load. The solution must remain within the service and model limits.

What should you do?

  1. Create a new thread and retry the calls immediately.
  2. Reduce the number of registered tools.
  3. Implement a retry policy that uses exponential backoff and jitter.
  4. Split uploaded content into smaller files.
Show answer and explanation

Correct answer: C. Implement a retry policy that uses exponential backoff and jitter.

An HTTP 429 response means the deployment has exceeded its tokens-per-minute or requests-per-minute limit, and the response includes a retry-after hint. The recommended pattern is to retry with exponential backoff, waiting progressively longer between attempts, and to add random jitter so many clients do not retry at the same moment. This smooths the request rate so it stays within the assigned quota, which reduces failures under load without requesting more capacity or exceeding service limits.

Why the other options are wrong

  • A. Retrying immediately on a new thread sends more requests while the limit is already exceeded, so the calls continue to be throttled.
  • B. The number of registered tools does not change the rate limit that produces the 429 responses.
  • D. Splitting uploaded files does not reduce the request or token rate against the model deployment.

Question 43

You are creating an agent workflow in a Microsoft Foundry project to support natural voice interactions.

The agent must receive continuous audio input, convert the input into text for reasoning, and then return spoken responses to a user. The workflow must meet the following requirements:

Support turn-taking dynamics, where the agent begins to generate the speech output before the user finishes speaking.

Operate with low latency to maintain conversational experience.

You need to enable both speech to text and text to speech in a real-time agent interaction.

What should you do?

  1. Use batch transcription to convert the audio input and return text responses from the agent.
  2. Use real-time speech to text for incoming audio and text to speech for agent responses.
  3. Use an embeddings model to encode the audio, and then decode the audio into text and speech.
  4. Use speech translation to convert the audio into another language and return the translated text.
Show answer and explanation

Correct answer: B. Use real-time speech to text for incoming audio and text to speech for agent responses.

A natural voice agent needs two real-time conversions. Real-time speech to text transcribes the continuous audio input as it arrives, so the agent can begin reasoning before the user finishes, and text to speech converts the agent's replies into spoken audio, which can be streamed back as it is produced. Pairing these streaming capabilities keeps latency low and supports turn-taking in a conversational experience.

Why the other options are wrong

  • A. Batch transcription processes recorded audio asynchronously and returns only text, so it cannot provide low-latency spoken responses.
  • C. An embeddings model produces vectors for similarity comparison and cannot transcribe audio or synthesize speech.
  • D. Speech translation converts speech into another language, and returning only translated text does not provide spoken responses.

Question 44

You have a Microsoft Foundry project that contains a support-ticket triage agent built by using the Foundry Agent Service.

The agent uses tools to classify the ticket type and set the ticket priority.

Sometimes, the same support case continues across multiple sessions over several days.

You need to persist state by using a durable ID to ensure that the agent can automatically reuse the full interaction history. The solution must preserve previous user messages, tool calls and tool outputs across turns and sessions.

Which runtime component should you use?

  1. output item
  2. agent
  3. conversation
  4. response
Show answer and explanation

Correct answer: C. conversation

In Foundry Agent Service, a conversation is a durable object with its own ID that stores the items exchanged with the agent, including user messages, tool calls, and tool outputs. When a support case resumes days later, the application passes the same conversation ID with the new request, and the agent automatically has the full interaction history available without the client resending earlier turns. This makes the conversation the runtime component that persists state across turns and across separate sessions.

Why the other options are wrong

  • A. An output item is a single piece of content produced by one response and does not hold the history of a case.
  • B. The agent holds the definition, such as the model, instructions, and tools, rather than per-case interaction history.
  • D. A response represents one generation call, so it does not by itself preserve the full history across sessions.

Question 45

You have a Microsoft Foundry project that contains an agent.

The agent uses Azure Content Understanding in Foundry Tools to process vendor onboarding packets. The packets include digital PDFs that contain tables and hyperlinks.

The extracted content is indexed for search and provided to a downstream agent in the Markdown format.

You need to generate a Markdown output that has a layout and a semantic structure optimized for Retrieval Augmented Generation (RAG) workflows.

Which built-in analyzer should you use?

  1. prebuilt-documentFieldSchema
  2. prebuilt-documentSearch
  3. prebuilt-read
  4. prebuilt-layout
Show answer and explanation

Correct answer: B. prebuilt-documentSearch

Azure Content Understanding provides prebuilt analyzers for retrieval scenarios, and prebuilt-documentSearch is designed for RAG. It extracts the document content together with its layout, such as paragraphs, tables, and hyperlinks, and outputs Markdown whose structure is suited to chunking and indexing, along with generated content such as a document summary. That makes it the right choice for producing Markdown with a layout and semantic structure that a search index and downstream agent can use.

Why the other options are wrong

  • A. The prebuilt-documentFieldSchema analyzer analyzes documents to propose a field schema and does not produce RAG-optimized Markdown of the whole document.
  • C. prebuilt-read extracts text but not the layout and semantic structure, such as tables, that the output needs.
  • D. prebuilt-layout extracts structure but does not add the semantic enrichment optimized for RAG that prebuilt-documentSearch provides.

Question 46

You have an app named App1 that uses a Microsoft Foundry multimodal model deployment.

App1 runs optical character recognition (OCR) on uploaded images and appends the OCR output to the prompt as additional context.

Some uploaded images contain embedded text.

You need to prevent potentially malicious instructions from being processed by the model.

What should you use?

  1. image moderation
  2. prompt shields for documents
  3. protected material text
  4. prompt shields for user prompts
Show answer and explanation

Correct answer: B. prompt shields for documents

Text extracted by OCR from uploaded images is third-party content that App1 appends to the prompt, so any instructions hidden in it are an indirect, or document, attack. Prompt shields for documents analyze this grounding content separately from the user's own prompt and detect embedded instructions that try to change the model's behavior. Applying this shield to the OCR output prevents the malicious instructions from being processed by the model.

Why the other options are wrong

  • A. Image moderation classifies visual harm such as violence or sexual content and does not detect instructions hidden in text.
  • C. Protected material detection for text identifies known copyrighted content, such as song lyrics, in model output and does not stop injected instructions.
  • D. Prompt shields for user prompts target jailbreak attempts typed directly by the user, not instructions embedded in appended document content.

Question 47

Note: This section contains one or more sets of questions with the same scenario and problem. Each question presents a unique solution to the problem. You must determine whether the solution meets the stated goals. More than one solution in the set might solve the problem. It is also possible that none of the solutions in the set solve the problem.

After you answer a question in this section, you will NOT be able to return. As a result, these questions do not appear on the Review Screen.

You have a multimodal AI generative model that accepts image uploads and uses extracted image text to generate responses.

You discover that users can upload unsafe images and embed hidden instructions into images to manipulate the model.

You need to implement controls to mitigate the risk.

Solution: You configure a prompt shield for documents.

Does this meet the goal?

  1. Yes
  2. No
Show answer and explanation

Correct answer: B. No

A prompt shield for documents analyzes third-party content, such as text extracted from uploaded images, for embedded instructions that attempt to manipulate the model. That addresses the hidden instruction risk. It does not evaluate the visual content of the images, so unsafe images that contain no injected text still pass through. Because the goal requires mitigating both unsafe images and hidden instructions, a prompt shield for documents alone does not meet the goal.

Why the other options are wrong

  • A. A prompt shield for documents does not moderate unsafe visual content, so the unsafe image risk remains.

That was 47 of 187.

The full Microsoft AI-103 pack has all 187 questions, each with the answer, the explanation and why the other options are wrong, plus a questions-only copy for timed runs. US$39, paid once, with free monthly updates and a pass-or-your-money-back guarantee.

Get the full pack

Not ready yet? Get the first 93 free as one PDF by email. Get the Half Pack →