Microsoft AB-100: Agentic AI Business Solutions Architect

Last checked October 22, 2026 against the official Microsoft exam page.

1. Question 1Design AI-powered business solutions

   An architect is designing a task agent that books field service appointments in a business application. Which characteristic defines a task agent?

   1. AIt is a static web page with no actions that displays product details and FAQ content to visitors
   2. BIt answers general knowledge questions from a broad public corpus, without access to tenant data, business systems or apps
   3. CIt runs indefinitely and chooses its own goals without bounds across business units, reprioritising work and widening scope
   4. DIt completes a defined set of actions to achieve a specific business task, with defined inputs and outcomes
   Show answer and explanationHide answer

   Correct answer: D

   A task agent completes a defined task using specific actions and outputs. Unbounded goal selection, general Q&A only and static pages describe other patterns.

2. Question 2Deploy AI-powered business solutions

   Which TWO practices help monitor a deployed agent's behaviour over time? (Choose two.)

   1. AAssuming the agent is stable once it is published
   2. BReviewing telemetry on successful resolutions, escalations, and errors
   3. CTracking response quality through user feedback and review samples
   4. DDisabling logs to reduce storage costs
   5. EIgnoring usage patterns because they are not important
   Show answer and explanationHide answer

   Correct answer: B, C

   Telemetry and feedback reveal how the agent performs and where it fails. Assuming stability, ignoring usage and disabling logs remove the means to detect problems.

3. Question 3Plan AI-powered business solutions

   A retailer wants agents to answer product availability questions. The inventory data is refreshed nightly, and some items are updated several times a day. What should the architect assess first when reviewing data for grounding?

   1. AThe colour of the company logo on the storefront header banner image
   2. BTimeliness of the inventory data relative to how fast answers must reflect stock
   3. CThe number of agents on the existing tier-one support team across regional service centres
   4. DThe font used for headings and body text in the product catalogue PDF
   Show answer and explanationHide answer

   Correct answer: B

   Grounding quality depends on accuracy, relevance, timeliness, cleanliness and availability, and here the nightly refresh conflicts with intraday changes. Logo, staffing and fonts do not affect grounding quality.

4. Question 4Design AI-powered business solutions

   An architect is designing an autonomous agent that monitors supplier delays and reorders stock within approved limits. Which design element is essential to keep the agent safe?

   1. AExplicit thresholds, approval steps above limits, and audit logging of each action
   2. BUnlimited spending authority with no logs for orders placed with each supplier and region
   3. CA single shared password for the agent that is rotated manually and reused across teams in production
   4. DDisabling notifications to people when orders are placed in the audit dashboard or review queue
   Show answer and explanationHide answer

   Correct answer: A

   Autonomous agents need explicit limits, escalation above thresholds and audit trails. Unlimited authority, shared passwords and hidden actions remove necessary control.

5. Question 5Deploy AI-powered business solutions

   Which TWO controls help protect an AI solution against prompt manipulation? (Choose two.)

   1. AInclude the system instructions in plain text on the public web page
   2. BTrust all external content as instructions
   3. CValidate and constrain user inputs and tool use within defined boundaries
   4. DAllow the agent to execute any instruction found in user-supplied documents
   5. ERestrict tool permissions to the minimum needed for each task
   Show answer and explanationHide answer

   Correct answer: C, D

   Input constraints and minimal tool permissions limit what a manipulated prompt can cause. Executing instructions from documents and trusting external content invite injection.