All NVIDIA exams
Free NCP-AAI practice test: 30 questions with answers
30 original questions for NVIDIA-Certified Professional: Agentic AI, drawn from every topic area. Answer each one to see whether you got it right and why. No sign-up.
- Free questions
- 30
- Full bank
- 100 questions
- Real exam
- 120 min
- Passing score
- Pass/fail
All 30 NCP-AAI questions with answers
The same questions as the test above, grouped by exam topic. Open any question to see the answer and explanation.
Agent Architecture and Design (5 questions)
Question 1
An LLM agent must decide which tool to call, observe the result, and then decide the next step until a task is complete. Which pattern describes this loop?
- AStatic retrieval with a single response over a frozen corpus
- BReAct, interleaving reasoning steps with tool actions and observations
- CBatch normalization with a fixed schedule, applied per layer
- DPure next-token completion with no tool actions in the loop
Show answer and explanationHide answer
Correct answer: BReAct alternates reasoning with actions and observations, which is the standard loop for tool-using agents. Batch normalization is a training technique, pure completion has no action loop, and single retrieval does not iterate.
Question 2
A business process needs an agent to split a large request into subtasks, assign them to specialist workers, and combine the results. Which architecture fits best?
- AA planner or orchestrator agent delegating to specialized worker agents
- BA single model prompt with no decomposition, answered in one pass
- CA database trigger that runs once per day, reading nightly batch exports from CRM
- DA cache that stores the final answer, keyed by the raw query text, reset hourly
Show answer and explanationHide answer
Correct answer: AAn orchestrator that plans and delegates to specialized workers supports decomposition and aggregation. A single prompt, a daily trigger and a cache do not coordinate multi-step work.
Question 3
Which component of an agent system stores information from earlier interactions so the agent can use it in later steps?
- AThe GPU driver that maps CUDA kernels to device memory
- BThe network switch that forwards east-west traffic between inference nodes
- CThe image registry that stores container images for the inference service
- DMemory, either short-term conversation state or long-term storage
Show answer and explanationHide answer
Correct answer: DMemory holds conversation state and longer-term information for the agent to use. Drivers, switches and registries are infrastructure, not agent memory.
Question 4
An agent must call an external pricing API. The tool call must include structured arguments that match the API schema. Which mechanism enforces this structure?
- AA regular expression applied to the final answer, run after the reply is complete
- BAsking the user to type the arguments as JSON manually every time in a chat window
- CFree-text instructions with no schema, placed in the system prompt with examples
- DTool definitions with typed parameter schemas that the model fills in
Show answer and explanationHide answer
Correct answer: DTyped tool schemas guide the model to produce valid structured arguments, and the runtime can validate them. Free text, answer-only regular expressions and manual entry do not enforce the structure during the call.
Question 5
Which planning approach breaks a complex goal into an ordered list of steps before any tools are called?
- ARandom tool selection
- BCaching the last response
- CGreedy token sampling with no structure
- DPlan-and-execute
Show answer and explanationHide answer
Correct answer: DPlan-and-execute creates a plan of steps and then executes them, which improves control on complex tasks. Greedy sampling, random selection and caching do not plan.
Tool Use and Integration (5 questions)
Question 6
An agent must call an internal ticketing API that requires a token. Where should the credential be stored?
- AInside the prompt so the model can see it, where it is echoed in traces
- BIn the model's training data, ingested during pretraining and fine-tuning
- CIn a secrets manager, with the agent retrieving it at run time under a scoped identity
- DIn the public repository's README, committed with the agent source code
Show answer and explanationHide answer
Correct answer: CA secrets manager with scoped identities keeps credentials out of prompts, code and training data. Prompts, public READMEs and training data expose the token.
Question 7
An agent proposes to delete customer records through a tool. The company policy requires human approval for destructive actions. What is the correct design?
- AA human-in-the-loop approval step before the delete tool is executed
- BLetting the agent delete records immediately because it is confident
- CHiding the delete tool from the agent but leaving it available to the public
- DDeleting the approval policy to speed up processing
Show answer and explanationHide answer
Correct answer: AA human approval step before destructive actions enforces the policy. Immediate execution, public tools and removed policies all violate the requirement.
Question 8
A tool returns an error with a message that is not in the expected format. What should the agent do?
- ACrashing the agent loop without a message, aborting the session before a retry
- BAssuming the tool succeeded, treating the raw output as a valid result and proceeding
- CCreating a new tool with the same name, registering a duplicate schema in the tool registry
- DParsing the error defensively, reporting the failure, and deciding whether to retry or ask for help
Show answer and explanationHide answer
Correct answer: DDefensive parsing and explicit handling keep the agent stable and informative. Crashing, assuming success and creating duplicate tools are incorrect.
Question 9
Which two statements about tool-using agents are accurate? (Choose two.)
- AEach tool should document its inputs and outputs
- BTools cannot fail once they are deployed
- CTool results should be validated before the agent relies on them
- DTool outputs can be trusted without checks when the tool is internal
- ETool calls should include the user's password in the arguments
Show answer and explanationHide answer
Correct answer: C, DValidating results and documenting inputs and outputs keep tool use reliable. Trusting outputs without checks, sending passwords in arguments and assuming tools cannot fail are unsafe assumptions.
Question 10
An agent calls a tool that returns large JSON payloads, and the model struggles with them. Which design improves reliability?
- AReturning only the fields the agent needs in a compact, documented format
- BRemoving tool outputs from the conversation history after each reasoning turn
- CReturning the entire database dump with every call, uncompressed
- DConverting JSON payloads into rendered images for the model
Show answer and explanationHide answer
Correct answer: ACompact, documented outputs with only the necessary fields are easier for the model to use reliably. Full dumps, images and removed outputs make reasoning harder or impossible.
Safety and Guardrails (5 questions)
Question 11
A user attempts to make an agent reveal its system instructions by asking it to ignore prior rules. Which defense is most effective?
- AGiving the agent admin rights, so it can override the policies set by the operator and bypass the refusal policy
- BSeparating system instructions from user input and using guardrails that refuse disclosure requests
- CPrinting the system instructions on the homepage, where visitors can read the text
- DAllowing the user to edit the system instructions, so the prompt can be rewritten
Show answer and explanationHide answer
Correct answer: BSeparation of instructions and guardrails that refuse disclosure protect the system prompt. Publishing instructions, granting admin rights and letting users edit instructions all weaken control.
Question 12
Which risk is specific to agents that browse the web and read untrusted content?
- AIndirect prompt injection, where instructions hidden in web content try to redirect the agent
- BMissing colors in the user interface, such as mismatched theme tokens and low-contrast status badges
- CSlow disk input and output, which stalls the checkpoint writer when logs are flushed
- DExcess GPU memory, reserved by the inference server for batch sizes unused by the agent
Show answer and explanationHide answer
Correct answer: AAgents that read untrusted content can be redirected by hidden instructions, which is indirect prompt injection. Disk speed, GPU memory and colors are not this risk.
Question 13
An agent with access to internal systems must follow the principle of least privilege. Which practice applies this best?
- AGiving the agent a shared administrator account, with a root-equivalent token
- BAllowing the agent to create new accounts whenever it needs them, using stored keys
- CGranting each tool only the permissions needed for its specific function
- DGiving each tool write access to each database, including production tables and logs
Show answer and explanationHide answer
Correct answer: CScoped permissions per tool limit the damage from misuse or error. Shared admin accounts, account creation and universal write access violate least privilege.
Question 14
Which two controls reduce the risk of an agent taking unsafe actions? (Choose two.)
- AAllow lists for the actions and tools the agent can use
- BLogging and monitoring of every action taken by the agent
- CGiving the agent unrestricted access so it can handle any case
- DUsing the highest temperature to make it creative in sensitive tasks
- EDisabling any review of high-impact actions
Show answer and explanationHide answer
Correct answer: A, BAllow lists constrain what the agent can do, and monitoring detects and investigates unsafe behavior. Unrestricted access, high temperature and disabled review increase risk.
Question 15
A company's agent must not provide medical diagnoses. Which combination of controls is most appropriate?
- ATopic restrictions in guardrails, a refusal behavior for diagnosis requests, and a human referral path
- BRemoving the safety checks and content filters from the agent so it can give fuller, less hedged answers across every domain
- CAsking the model to try its best with no limits on reasoning depth, tool use, or retries
- DAllowing diagnosis but adding a small disclaimer to each reply, along with likely conditions matching the reported symptoms
Show answer and explanationHide answer
Correct answer: ATopic restrictions, refusal behavior and human referral enforce the policy and direct users to appropriate help. Unlimited attempts, disclaimers only and removed checks do not meet the requirement.
Evaluation and Observability (5 questions)
Question 16
Which metric best measures whether an agent completed a user's task successfully across a test set?
- ANumber of tokens generated per second, averaged across the decoding steps
- BTask success rate evaluated against defined success criteria
- CCount of tools available in the registry, including deprecated tools
- DNumber of log lines written, emitted at debug level by each module
Show answer and explanationHide answer
Correct answer: BTask success rate against defined criteria measures outcomes that matter to users. Token speed, tool counts and log volume measure activity or performance rather than success.
Question 17
An agent's behavior changed after a model update, and the team needs to find which step caused a failure. Which practice helps most?
- ATracing each run with the prompts, tool calls, and observations for later analysis
- BAsking users to guess what changed, reporting the regression in a free-text support ticket
- CKeeping no logs to reduce storage, since prompt payloads are bulky
- DDeleting old runs after each release, retaining the most recent run for each model version and tag
Show answer and explanationHide answer
Correct answer: ATracing each step lets teams compare runs and locate the failing decision. Missing logs, deleted runs and guesswork make root cause analysis impossible.
Question 18
Which evaluation approach is most appropriate for an agent that must choose between several tools correctly?
- AA test set of tasks with expected tool choices, scored for correctness and efficiency
- BMeasuring CPU temperature of the inference host during each run, sampled once per second to infer tool use
- CA single question with no expected answer, posed to the model without a rubric
- DJudging the final sentence's length, counted in characters across the test set
Show answer and explanationHide answer
Correct answer: AA test set with expected tool choices scores both correctness and efficiency. A single unscored question, length of text and CPU temperature do not evaluate tool selection.
Question 19
Which approach gives a team confidence that an agent update does not break existing behavior?
- ADeploying the update to live users at once and waiting for complaints in the support queue
- BSkipping the regression tests because the change is small and reviewed by a senior engineer
- CRunning a regression test suite of representative tasks before rollout and comparing results to the baseline
- DMeasuring the average response time and median latency on a single canary host in staging
Show answer and explanationHide answer
Correct answer: CA regression suite compared to a baseline shows whether existing behavior holds. Deploying blindly, skipping tests and measuring only latency do not establish that behavior is preserved.
Question 20
An agent sometimes calls a tool with the wrong argument types, which causes failures. Which evaluation check finds this earliest?
- AMeasuring the number of distinct users per day and the request volume
- BSchema validation of tool calls in the test suite before deployment
- CChecking the color of the logs and the font size of the dashboard widgets
- DReviewing the company's holiday calendar and the office seating plan for staff
Show answer and explanationHide answer
Correct answer: BValidating tool calls against schemas in tests catches argument errors before deployment. User counts, log colors and holiday calendars do not detect argument mismatches.
NVIDIA Agent Tooling (5 questions)
Question 21
Which NVIDIA toolkit helps build, profile, and evaluate agent workflows, including connections to tools and models?
- ANVIDIA Omniverse Nucleus
- BNVIDIA DeepStream SDK
- CNVIDIA NeMo Agent Toolkit
- DNVIDIA Clara Holoscan
Show answer and explanationHide answer
Correct answer: CThe NeMo Agent Toolkit supports building and evaluating agent workflows with tools and models. Omniverse is for simulation collaboration, DeepStream for video analytics and Holoscan for medical and sensor applications.
Question 22
A team wants to deploy an LLM with an OpenAI-compatible endpoint on NVIDIA GPUs for its agent. Which NVIDIA product is designed for this?
- ANVIDIA Clara Parabricks SDK
- BNVIDIA NIM microservices
- CNVIDIA Earth-2 Climate Model
- DNVIDIA Riva Speech Skills
Show answer and explanationHide answer
Correct answer: BNIM provides containerized, optimized inference endpoints with standard APIs for agents to call. Parabricks targets genomics, Earth-2 targets climate models and Riva focuses on speech.
Question 23
Which NVIDIA capability enforces programmable guardrails on what an agent or chatbot may discuss and do?
- ATensorRT engine builder
- BcuDF
- CNeMo Guardrails
- DNeMo Curator
Show answer and explanationHide answer
Correct answer: CNeMo Guardrails defines rails that constrain topics, actions and responses in conversational systems. Curator prepares data, the TensorRT builder compiles engines and cuDF processes dataframes.
Question 24
A retrieval component is needed to give an agent access to company documents with reranking for relevance. Which NVIDIA component family fits?
- ANVIDIA Jetson Orin
- BNeMo Retriever
- CNVIDIA Morpheus
- DNVIDIA Isaac Sim
Show answer and explanationHide answer
Correct answer: BNeMo Retriever provides embedding, retrieval and reranking components for RAG-based agents. Morpheus is a security pipeline framework, Isaac Sim is for robotics simulation and Jetson is hardware.
Question 25
A team wants to measure the latency and token usage of each step in an agent workflow during development. Which NVIDIA toolkit capability is designed for this?
- AProfiling and evaluation features of the NeMo Agent Toolkit
- BImage classification and object detection pipelines in DeepStream SDK
- CPhysically based video rendering and simulation tools in Omniverse
- DShort-read genome sequence alignment and variant calling in Parabricks
Show answer and explanationHide answer
Correct answer: AThe NeMo Agent Toolkit includes profiling and evaluation for agent workflows, including step-level metrics. Omniverse, DeepStream and Parabricks address different domains.
Retrieval for Agents (5 questions)
Question 26
An agent answers questions using a knowledge base but sometimes cites documents that do not contain the answer. Which change most directly reduces this?
- AIncreasing the temperature so the agent varies its citations, sampling from a wider set of tokens
- BStoring the knowledge base as an image, where each page is rasterized to PNG, passed through a vision encoder, then indexed
- CRemoving citations from the responses, so reviewers cannot trace which passage supported each claim
- DAdding a grounding check that verifies each claim against retrieved passages before the response is returned
Show answer and explanationHide answer
Correct answer: DA grounding check verifies claims against retrieved evidence, which catches unsupported citations. Higher temperature increases randomness, removing citations hides the problem, and images cannot be searched as text.
Question 27
Which retrieval strategy lets an agent answer a question that needs facts from several documents linked by an intermediate entity?
- AA single search for the exact question text, issued once with no reformulation step
- BRandom sampling of documents, drawn uniformly from the index with replacement
- CRetrieval limited to the first document in the index, leaving the rest of the corpus
- DMulti-hop retrieval that uses the result of one query to form the next query
Show answer and explanationHide answer
Correct answer: DMulti-hop retrieval follows connections across documents, which answers questions that need more than one hop. Single exact searches, random samples and first-document-only retrieval miss the linked evidence.
Question 28
An agent's retrieved context grows so large that responses become slow and costly. Which technique helps most?
- ARemoving the instructions from the prompt, leaving the model without task framing
- BIncreasing the output length limit, so the model can write longer answers freely
- CSelecting and summarizing only the most relevant passages before adding them to the prompt
- DAdding the complete document index to each prompt request, padding the context
Show answer and explanationHide answer
Correct answer: CSelecting and summarizing relevant passages keeps context focused, which reduces cost and latency. Adding everything, removing instructions and increasing output limits all make the problem worse.
Question 29
Why is reranking useful after an initial vector search in an agent's knowledge retrieval?
- AA reranker prunes irrelevant documents permanently from the index during each retrieval pass
- BA reranker replaces the embedding model entirely, re-encoding the whole corpus at query time
- CA reranker generates new synthetic documents to supplement the agent's knowledge base before answering
- DA reranker reorders candidate passages by relevance to the query, improving the quality of the top results
Show answer and explanationHide answer
Correct answer: DRerankers score candidates more precisely against the query, which improves the top passages the agent uses. They do not delete documents, generate content or replace embeddings.
Question 30
An agent needs answers from structured data in a database as well as from documents. Which design is most appropriate?
- AGiving the agent a tool that runs safe, parameterized queries against the database alongside document retrieval
- BLetting the agent write raw SQL from user input without validation or parameter binding
- CConverting the entire database into one flat text file with rows concatenated for retrieval only
- DBlocking database access at the network layer for security reasons, so the agent answers from documents
Show answer and explanationHide answer
Correct answer: AA parameterized query tool keeps structured access safe and efficient alongside document retrieval. Raw unvalidated SQL is an injection risk, flattening databases loses structure, and blocking access prevents the required answers.
Want more NCP-AAI questions?
The full bank has 100 questions with answers and explanations, as a PDF, an online practice exam, or both.
Both formats together. The best value.
Instant access after payment, with 90 days of updates. Checkout is on our store, AIExamCerts.