Microsoft GH-600: Developing in Agentic AI Systems

Last checked October 22, 2026 against the official Microsoft exam page.

1. Question 1Implement tool use and environment interaction

   An organization wants its agents to use only approved MCP servers. Which configuration enforces this?

   1. AA note in the README asking developers to use the approved servers
   2. BAllowing servers found on the public internet at runtime without review
   3. CRemoving tool access from the agent pending security review
   4. DAn MCP allow list that limits which servers and registries the agent can add
   Show answer and explanationHide answer

   Correct answer: D

   An allow list enforces the approved set in configuration rather than relying on developer discipline. A README note is advisory, open discovery is unsafe, and removing tools eliminates the capability the agent needs.

2. Question 2Perform evaluation, error analysis, and tuning

   Before an agent starts a task, the team wants to know how success will be judged afterward. What should be defined?

   1. ANothing, because success is obvious to reviewers reading the output
   2. BThe agent's display name, icon, and profile color shown in the console dashboard panel
   3. CExpected outcomes, operational constraints, and measurable signals for the task
   4. DA promise that the output will look good to reviewers and match the brand
   Show answer and explanationHide answer

   Correct answer: C

   Defining outcomes, constraints, and measurable signals in advance allows the result to be evaluated objectively. Names, icons, and vague impressions do not make success testable.

3. Question 3Orchestrate multi-agent coordination

   A coordinator assigns a planning agent, a coding agent, and a testing agent to one feature, with each handing its output to the next. Which orchestration pattern does this describe?

   1. AA sequential pipeline with explicit handoffs between specialized agents
   2. BRandom assignment of tasks with no handoff
   3. CEach agent working in isolation with its output never used
   4. DEvery agent editing the same file at the same time without coordination
   Show answer and explanationHide answer

   Correct answer: A

   A sequential pipeline with explicit handoffs is a common orchestration pattern for specialized agents. Random or isolated work and uncoordinated simultaneous edits do not produce a coherent feature.

4. Question 4Implement guardrails and accountability

   An agent that updates release notes should only be able to write to one documentation folder in one repository. Which principle applies?

   1. ALeast privilege, scoping permissions and execution context to the minimum needed
   2. BShared administrator credentials across every repository in the organization
   3. CMaximum privilege granted to the agent's service account so it rarely fails
   4. DUnlimited write access to the entire repository tree for speed
   Show answer and explanationHide answer

   Correct answer: A

   Least privilege limits the agent to the folder and repository it needs, which contains mistakes and misuse. Maximum privilege, shared admin credentials, and unlimited access all expand the blast radius.

5. Question 5Manage memory, state, and execution

   An agent stores notes from earlier tasks in long-term memory, and some notes are now wrong. Which practice prevents outdated notes from influencing new work?

   1. ADefine expiration, pruning, and reset rules for memory entries
   2. BKeep every note forever with no review
   3. CDelete the whole memory each time an error occurs regardless of scope
   4. DCopy all notes into every new task
   Show answer and explanationHide answer

   Correct answer: A

   Expiration and pruning rules remove stale entries systematically, and reset rules handle major changes. Keeping everything, copying all notes, and blanket deletion either preserve stale data or lose needed context.