Microsoft Designing and Implementing Multi-Agent AI Solutions AI-500 Exam Questions

Answer : D

The tool only needs to read and write blob data in the `stgaudit` storage account. Storage Blob Data Contributor is the built-in data-plane role that grants the required blob read/write capabilities without granting unnecessary ownership or broad resource-management authority. Storage Account Contributor and the generic Contributor role operate at the management plane and are wider than necessary for this data-access requirement. Storage Blob Data Owner also exceeds the stated need by including additional control over blob data permissions/ownership. Microsoft's Azure Storage RBAC guidance separates data-plane blob roles from management roles and recommends choosing the narrowest role that supports the required operation. Because the agent must both read and write blob content, D is the least-privilege role among the options. The same configuration should be paired with auditable identity, trace, and evaluation data so reviewers can prove which principal acted, which policy was applied, and why a request was allowed or blocked. That is particularly important for production multi-agent systems with external tools.

Official Microsoft reference: Azure Storage - assign Azure roles for blob data access

Answer : A

The partner component is an independently hosted agent running a different framework and managing long-running tasks. Agent-to-Agent (A2A) is designed for exactly this inter-agent boundary. It exposes a standards-based endpoint, supports capability discovery through agent cards, and provides task/context identifiers for long-running interactions without requiring the calling solution to know the partner's internal implementation. MCP primarily exposes tools and resources to an agent rather than representing a remote autonomous agent with its own task lifecycle. Platform-native subagent orchestration and in-process agent-as-tool composition would also couple the solution to a specific runtime or process boundary. Because the requirement is interoperable agent communication plus capability discovery and task tracking, A2A is the correct integration approach. This choice also keeps the design composable as more agents are introduced. Clear interfaces, trust boundaries, and state ownership let a team change one domain without forcing unrelated agents to adopt the same permissions, context, or execution model.

Official Microsoft reference: Microsoft Agent Framework - Agent-to-Agent provider

Answer : C

The requirements ask for behavior that applies to every future conversation, improves routing for representative compound inputs, and standardizes final output with minimal application-code change. Few-shot instruction examples satisfy all three by demonstrating both the desired routing decision and the expected schema-compliant response for representative cases. Repository-wide constraints list rules but do not demonstrate how ambiguous compound requests should be handled. Per-request prompt cues are not durable across future conversations and would require application logic to inject them repeatedly. System role instructions define domains and objectives but provide less behavioral specificity than examples. Microsoft AI-500 prompt-engineering objectives explicitly include examples and dynamic prompt techniques for shaping complex agent behavior. Therefore C is the strongest design. The implementation should also preserve clear inputs and outputs around this step so that later agents receive only the information they require. This improves debuggability and keeps token, permission, and state growth under control as the workflow becomes more complex.

Official Microsoft reference: AI-500 Study Guide - advanced prompt engineering

Answer : A

The instructions changed in the playground, but a full evaluation needs a stable, versioned agent definition. Saving the changes as a new version creates an immutable snapshot that can be evaluated against a synthetic dataset while remaining inside the project for the development team. Publishing is a later lifecycle action that makes a version available to broader consumers or production endpoints and is not required for a private development evaluation. Previewing exercises the current playground configuration interactively but does not establish the versioned target needed for repeatable evaluation. Creating an evaluation before saving the new version risks evaluating the previous configuration instead of the intended update. Microsoft Foundry's development lifecycle separates edit, save/version, evaluate, and publish stages, so A is the correct first action. A robust evaluation program separates process metrics from final-response metrics. The selected answer measures the layer where the stated failure actually occurs, which is essential for deciding whether to change retrieval, orchestration, prompt behavior, or the final generator.

Official Microsoft reference: Microsoft Foundry agents - development lifecycle

Answer : D

Fraud-check, Policy-eligibility, and Document-summary are independent specialist activities, so running them concurrently reduces wall-clock time without changing their outputs. The Decision agent is different because the case study states that it depends on the results of those three agents. It therefore must execute only after the independent work completes. Microsoft Agent Framework's concurrent orchestration pattern is designed for independent participants whose results can be fanned in later, while dependency-driven work should remain ordered. Running all four agents concurrently would violate the Decision agent's data dependency. Running all four sequentially would preserve correctness but add unnecessary latency. Disabling memory would also change functionality unrelated to the performance bottleneck. The optimal graph is therefore a parallel fan-out of the three independent specialists followed by a fan-in and Decision step, which preserves behavior while minimizing end-to-end claim-approval duration. In production, add telemetry and regression tests around this behavior so changes to prompts, models, tools, or orchestration do not silently alter the intended contract. The selected approach is the one that best matches the platform's native execution semantics.

Official Microsoft reference: Microsoft Agent Framework - Concurrent orchestration

Answer : B

Azure API Management can expose an existing managed REST API directly as a remote MCP server, turning selected REST operations into MCP tools without requiring a separate MCP backend. The API Management gateway continues to apply its policy engine, so Microsoft Entra JWT validation, quotas/rate limits, and Azure Monitor/Application Insights diagnostics can be enforced at the MCP endpoint. Azure API Center catalogs APIs but does not itself create the MCP runtime endpoint. Azure Functions or Logic Apps could host MCP-compatible code, but both would introduce the separate backend that the question explicitly says to avoid. Because the API already resides in an APIM Premium instance, using APIM's native MCP exposure capability is the minimal and policy-rich design. Therefore B is correct. In production, add telemetry and regression tests around this behavior so changes to prompts, models, tools, or orchestration do not silently alter the intended contract. The selected approach is the one that best matches the platform's native execution semantics.

Official Microsoft reference: Azure API Management - Expose REST API as an MCP server

Answer : D

The business rule requires human review for refunds above the stated threshold before payment can continue. A workflow therefore needs a user or operator interaction point that pauses progress and obtains an explicit response. In the workflow options provided, Ask a question is the node that introduces that human interaction. Invoke agent simply delegates work to another agent; it does not itself guarantee human approval. Deliver a message sends information without collecting a decision, and Go to changes control flow without obtaining authorization. Microsoft Agent Framework and Foundry workflow guidance treat human-in-the-loop approval as a first-class orchestration requirement for consequential actions. The decisive requirement is not just to notify a reviewer, but to stop automated progression until the reviewer supplies a decision. Therefore the workflow must include an interactive question/approval step before the refund-processing action can proceed for amounts over the threshold. The implementation should also preserve clear inputs and outputs around this step so that later agents receive only the information they require. This improves debuggability and keeps token, permission, and state growth under control as the workflow becomes more complex.

Official Microsoft reference: Microsoft Agent Framework - Human-in-the-loop workflows