Microsoft AB-620 - Designing and Building Integrated AI Agent Solutions in Copilot Studio

Requirement

Implementation method

Let the agent decide when to run a tool based on user input.

Enable generative orchestration.

Run a specific agent flow at a defined step in a topic.

Add a tool node.

Use a connector action to retrieve data during a conversation.

Add a tool node.

Comprehensive and Detailed Explanation From [Microsoft AB-620 Study Guide]

Generative orchestration is appropriate when the agent must independently determine whether a tool is relevant to the user’s request. Copilot Studio evaluates the user’s message, conversation context, and the tool’s name, description, inputs, and outputs before deciding whether to invoke it. Microsoft documentation confirms that generative orchestration allows an agent to choose tools based on their descriptions and the current user query.

When an operation must occur at a predetermined point in an authored topic, the operation should instead be inserted explicitly by using an Add a tool node. Selecting an agent flow from that node ensures that the flow executes at that exact position in the topic rather than being selected autonomously by the orchestrator.

The same node type is used when calling a connector action. From the topic canvas, the author selects Add a tool , chooses Connector , and then selects and configures the required connector operation. Adaptive Cards present interactive information, while Question nodes collect user input; neither directly invokes flows or connectors.

Relevant study-guide area: Plan and configure agent solutions → Configure topics → Add agent flows to a topic and Add tools to a topic . See Orchestrate agent behavior with generative AI , Add tools to custom agents , and Use connectors in Copilot Studio agents .

B. Configure prompt instructions that include disclaimer text. Centralized prompt instructions apply the required disclaimer and behavioral controls consistently to generative responses. This avoids maintaining duplicate text in individual topics and reduces the risk of inconsistent compliance language. Microsoft confirms that prompt modifications can control response content, format, personality, and what the agent should or should not answer. Microsoft Learn: Prompt modification

C. Use Markdown syntax within response content. The scenario explicitly requires Markdown for formatting and states that HTML is unsupported. Markdown can provide headings, bold text, lists, and other structured presentation while remaining compatible with the target channels.

Options A and E duplicate disclaimer content across topics, creating unnecessary maintenance and inconsistent responses when the disclaimer changes. Option D violates the stated platform requirement because HTML must not be used.

A. Configure prompt modifications at the system level. Centralized instructions enforce the required tone, disclaimers, response boundaries, and refusal behavior consistently across generative responses. Microsoft documents that prompt modification can define an agent’s personality, response format, permitted subjects, and behavior when an answer is unavailable. This avoids inconsistent manual changes across individual topics. Microsoft: Prompt modification

D. Configure Power Platform DLP policies. DLP policies govern which connectors, knowledge sources, HTTP endpoints, and channels the agent may use. They should be configured and validated before publication because a policy violation can prevent the agent from being published. DLP also protects against unauthorized data movement between business and non-business connectors. Microsoft: Data policies for agents

Why the others are incorrect: B creates duplicated, inconsistent disclaimers. C incorrectly treats moderation as a web-channel setting; moderation is configured for generative behavior rather than enforced only by embedding settings. E applies safeguards after publication and assumes filters must be configured separately for every channel, which would not provide the required centralized governance.

Comprehensive and Detailed Explanation From Microsoft AB-620 Study Guide: The tenant administrator has already configured a Copilot connector that indexes the external system into Microsoft Graph. The agent should consume that approved enterprise knowledge source from its Knowledge configuration. This lets generative answers retrieve authorized indexed content without recreating the connector, uploading duplicate documents, or treating the source as a callable transaction. Copilot connectors are designed for enterprise search and knowledge grounding; the user ' s access is evaluated so that responses surface only content the user is permitted to see. A custom connector is appropriate when the agent must call an API or perform an operation, which the scenario explicitly excludes. Adding the connector as a tool would likewise shift the design from retrieval to invocation. Manual file upload would create a second, potentially stale copy and break the administrator-managed indexing lifecycle. After adding the source, the builder should provide a clear name and description, test representative questions, confirm citations or source attribution, and verify that restricted users cannot retrieve unauthorized material. Study Guide alignment: Integrate and extend agents in Copilot Studio > Connect to enterprise knowledge sources > Connect to Copilot connectors.

===============

Current Dataverse balance → Connect to a Power Platform connector; Real-time Dynamics 365 shipping status → Connect to a Power Platform connector; Static PDF policy content → Upload the file to the agent ' s knowledge; Welcome message independent of enterprise data → Create a manual response in the topic.

Comprehensive and Detailed Explanation From Microsoft AB-620 Study Guide: The retrieval pattern should match the volatility and purpose of each source. Customer balances and shipping status are operational values that can change during the day, so the agent should query the systems through Power Platform connectors at runtime rather than rely on a static copy. The connector connection also preserves the applicable authentication and source-system controls. A fixed PDF policy is unstructured reference material; uploading it as agent knowledge allows generative retrieval over its contents without building a transactional integration. The welcome message is deterministic presentation text and does not require any enterprise lookup, so a manual message in the topic is simpler and more reliable than a generative call. A generative answer without enterprise data would be inappropriate for balances or shipping status because it has no authoritative current value. This separation limits latency and security exposure, keeps dynamic information live, and uses knowledge grounding only where retrieval is actually needed. Each connector should be described precisely and tested under the intended user identity to ensure the returned records respect access permissions. Study Guide alignment: Integrate and extend agents in Copilot Studio > Connect to enterprise knowledge sources; Add tools to agents.

===============

Call the API during the conversation → Configure a REST action and call it from the topic; Run with authentication → Build an authenticated connection for the API; Make the response available at runtime → Store the API response in a topic variable.

Comprehensive and Detailed Explanation From Microsoft AB-620 Study Guide: The REST action is the executable component that issues the request when the topic reaches that node. An authenticated connection supplies the credential or token handling required by the endpoint; embedding secrets directly in a topic would be insecure and difficult to manage across environments. The returned JSON must then be assigned to a topic variable so downstream nodes can inspect fields, make decisions, format a response, or pass the value to another tool. Treating the API as indexed knowledge would be inappropriate because the requirement is a live runtime call, not search over a periodically indexed corpus. The builder should define the HTTP operation, endpoint, inputs, response schema, and output variable precisely. Authentication should use the narrowest appropriate identity model—user-delegated when actions must be attributable to the user, or maker/service credentials only when the business design permits shared access. Error and timeout paths should be explicit so malformed JSON, authorization failures, and unavailable services do not produce silent or misleading responses. Study Guide alignment: Integrate and extend agents in Copilot Studio > Add tools to agents > Add REST APIs to an agent.

===============

Approval stage → Wait for a response and branch according to the decision; Information-collection stage → Wait for a response and capture the submitted inputs.

Comprehensive and Detailed Explanation From Microsoft AB-620 Study Guide: An approval is a decision gate. The flow must pause until the reviewer responds, then branch to the appropriate approved, rejected, or other outcome path. Information collection also pauses, but its purpose is to capture supplied values and make them available to later actions in the same run. Sending a request or notification and continuing immediately would break both requirements because downstream processing could occur before the human response exists. The action should have a defined timeout and an escalation or cancellation path so a missing response does not leave the process suspended indefinitely. The flow should store the response, responder identity, timestamp, and any comments needed for audit. Sensitive information should not be requested through an inappropriate channel and should be protected in logs and variables. Testing must cover approval, rejection, corrected information, timeout, and unauthorized-responder cases. This produces a controlled human-in-the-loop design rather than a simple alert that has no effect on execution. Study Guide alignment: Plan and configure agent solutions > Create and monitor agent flows in Copilot Studio > Create a human-in-the-loop agent flow.

===============

Comprehensive and Detailed Explanation From Microsoft AB-620 Study Guide: The first configuration check is the contract between the agent and the flow. Input and output parameter definitions must agree on name, data type, required status, and mapping. A flow can complete successfully yet return an empty value to the agent if the response field is not mapped to the declared output or if the agent expects a different type. Validating the parameter definitions therefore addresses the actual data-exchange requirement. Reviewing run history is useful for diagnosis, but it does not correct a mismatched contract by itself. Changing the trigger schema or adding Parse JSON might be necessary in a specific implementation, yet neither should be done before confirming what the caller sends and what the flow returns. Republishing cannot repair an incorrect mapping. The builder should test the flow directly with known values, inspect each action output, verify the final response action, and then test from the agent. Optional and null fields should be handled explicitly, and sensitive outputs should be minimized and protected in logs. Study Guide alignment: Plan and configure agent solutions > Create and monitor agent flows in Copilot Studio > Add input and output parameters.

===============