Microsoft AB-620: Designing and Building Integrated AI Solutions in Copilot Studio

Last checked October 22, 2026 against the official Microsoft exam page.

1. Question 1Plan and configure agent solutions

   A company is building a Copilot Studio agent that must act on behalf of each signed-in employee when calling a line-of-business API. Which identity approach should be planned first?

   1. AAnonymous access to the API from the agent, using a public endpoint with no authentication header
   2. BA single shared service account with administrator rights used for every call from the agent
   3. CDelegated user authentication so that the API sees the individual user's permissions
   4. DCopying each user's password into the agent's instructions so the agent can replay the sign-in at runtime
   Show answer and explanationHide answer

   Correct answer: C

   Delegated authentication keeps the API's authorization tied to each user, which prevents privilege escalation through a shared account. A shared admin account, anonymous access, and stored passwords each break accountability and least privilege.

2. Question 2Test and manage agents

   A builder wants to evaluate an agent before release against realistic user questions with expected outcomes. Which artifact should be created first?

   1. AA test set of representative questions with expected answers or behaviors
   2. BA marketing slide deck about the agent's public features
   3. CA nightly copy of the live production database with logs
   4. DA personal list of the developer's favorite prompts from chats
   Show answer and explanationHide answer

   Correct answer: A

   A representative test set with expected outcomes is the basis for measurable evaluation. Slides, personal prompts, and production database copies do not define expected behavior.

3. Question 3Integrate and extend agents in Copilot Studio

   An agent must answer questions using content in ServiceNow, which is already indexed by Microsoft 365 connectors. Which connection type should be used?

   1. AAn unauthenticated headless web scraper
   2. BA Copilot connector for the indexed content source
   3. CA hard-coded list of answers in the topic
   4. DA custom PowerPoint file uploaded manually
   Show answer and explanationHide answer

   Correct answer: B

   Copilot connectors make indexed enterprise content searchable with permissions preserved, which fits the requirement. Manual slides, hard-coded answers, and scrapers do not provide governed enterprise retrieval.

4. Question 4Configure topics

   A topic must show a confirmation card with buttons for order details and a link to support, with a consistent layout across channels. Which feature should the builder use?

   1. AA second copy of the agent for each channel
   2. BAdaptive cards
   3. CAn HTML page embedded in the knowledge source
   4. DPlain text variables only
   Show answer and explanationHide answer

   Correct answer: B

   Adaptive cards define structured layouts and actions that render consistently across supported channels. Plain text, duplicate agents, and embedded HTML do not provide a portable, structured card format.

5. Question 5Create and monitor agent flows

   An agent flow must pause before issuing a refund above a threshold and wait for a manager to approve or reject the request. Which pattern should be built?

   1. AA scheduled cloud flow that runs once a month to reconcile refund totals with finance systems
   2. BA flow that approves refunds automatically after one minute without a manager's review step
   3. CA topic that asks the user to approve their own refund through a chat prompt
   4. DA human-in-the-loop agent flow that waits for the manager's response before continuing
   Show answer and explanationHide answer

   Correct answer: D

   A human-in-the-loop flow pauses for an explicit decision before the action runs. Automatic approval, self-approval, and monthly schedules do not provide the required human checkpoint.