Free AB-100 Practice Questions With Full Rationale
10 scenario questions split 3 Plan / 3 Design / 4 Deploy — the same ratio as the real exam's domain weights — each with the reasoning behind the right answer and why every distractor fails.
TL;DR:These 10 AB-100 practice questions are scenario-based, not trivia recall, and weighted 3/3/4 across Plan, Design, and Deploy to match the real exam's 25-30% / 25-30% / 40-45% split. Every question includes the rationale for the correct answer and a specific reason each distractor is wrong.
How to Use These AB-100 Practice Questions
Answer each question before reading the rationale. AB-100 gives roughly 3 minutes per question on the real exam, so try holding yourself to that pace here too — the goal is catching where your reasoning breaks down under time pressure, not just whether you eventually land on the right letter.
For 30 more free questions in this format, start the free AB-100 quiz. If you want a domain-by-domain refresher first, the AB-100 study guide covers what each of these three domains actually tests.
Every question below is written to match Microsoft's official AB-100 exam blueprint and cross-checked against our audited 500-question AB-100 bank — not generic trivia.
Plan AI-Powered Business Solutions
Question 1
A retailer wants to add a returns-processing agent. An off-the-shelf industry connector exists but only covers 70% of their return policy rules. Custom development would take six months. What should the architect do before committing engineering time?
- A. Start custom development immediately since the connector doesn't fully match policy
- B. Adopt the connector as-is and accept the 30% gap in automation
- C. Run a build-vs-buy-vs-extend ROI analysis comparing total cost of ownership before choosing a path
- D. Reject both options and delay the project until a future connector update
Correct: C. This matches the domain objective directly: evaluate whether to build, buy, or extend using ROI criteria including total cost of ownership, before committing to either path.
- Why not A: Jumps to a six-month build without comparing it against extending the existing connector — skips the ROI step entirely.
- Why not B: Accepts a known 30% gap without evaluating whether extending the connector could close it more cheaply than a full build.
- Why not D: Delays the business need indefinitely instead of making a decision — avoids the analysis rather than doing it.
Question 2
An organization's customer-service agent frequently answers with outdated product pricing. The agent's grounding source refreshes once a month, while prices change weekly. Which grounding-data dimension is the direct root cause?
- A. Relevance — the source data isn't related to the question topic
- B. Timeliness — the refresh cadence doesn't match how often the data changes
- C. Availability — the data source is offline
- D. Cleanliness — the data contains formatting errors
Correct: B. The source is topically correct and online — the problem is purely that a monthly refresh cadence can't keep up with weekly price changes. Tightening the sync interval or moving to a near-real-time feed addresses this directly.
- Why not A: The pricing data is exactly the right topic — relevance is not the issue, staleness is.
- Why not C: Nothing in the scenario indicates downtime; the source is reachable, just refreshed too infrequently.
- Why not D: No formatting or malformed-record issue is described — this is a timing problem, not a data-quality-format problem.
Question 3
A finance team needs an agent to redact sensitive account numbers from support transcripts before they reach a shared analytics store. Latency must stay under 200ms per transcript, and the workload must run inside a private network with no external API calls. Which approach fits?
- A. Call a large frontier model hosted by a third-party API for redaction
- B. Use a general-purpose generative answer in Copilot Studio to summarize and redact in one step
- C. Deploy a small, fine-tuned language model within the private network for the redaction task
- D. Route every request through a shared, centrally hosted large model used by all teams
Correct: C. This is exactly the use case for a customized small language model: narrow task, strict latency, and a private-network deployment constraint that a small model can meet without external calls.
- Why not A: A third-party hosted API is an external call by definition — violates the no-external-calls constraint outright.
- Why not B: General-purpose generative summarization isn't built for a strict, low-latency, near-deterministic redaction task, and doesn't address network isolation.
- Why not D: A shared central model serving all teams adds queueing and contention that risks breaking the 200ms budget under load.
Design AI-Powered Business Solutions
Question 4
A support agent built in Copilot Studio handles hundreds of narrowly defined intents (e.g., 'reset password', 'check order status') where responses must be exact and auditable, but occasionally receives phrasing it doesn't recognize. Which combination fits both requirements?
- A. Use only generative AI orchestration for every intent so novel phrasing is always handled
- B. Use topic-based conversational language understanding for defined intents, with a generative fallback topic for unrecognized input
- C. Use keyword-matching standard NLP only, with no fallback topic
- D. Route all unrecognized input straight to a human agent, with no fallback topic configured
Correct: B. Topics with conversational language understanding preserve exact, auditable responses for defined intents, while a generative fallback topic — the fallback design pattern Copilot Studio is built for — catches the phrasing gaps.
- Why not A: Generative-only orchestration sacrifices the exactness and auditability the defined intents specifically require.
- Why not C: No fallback means any phrasing outside the exact keyword set goes completely unhandled — the gap the scenario describes.
- Why not D: Skips Copilot Studio's own fallback-topic capability and over-relies on escalation for a problem the platform is designed to handle.
Question 5
An architect needs a Copilot Studio agent to pull live inventory levels from a third-party warehouse system that already exposes a standardized tool-calling interface used by several other AI platforms the company runs. Which approach avoids building a custom connector from scratch?
- A. Build a fully custom REST connector specific to this Copilot Studio agent
- B. Extend the agent using Model Context Protocol (MCP) to consume the warehouse system's existing tool interface
- C. Use Agent2Agent (A2A) to have the warehouse system message the Copilot Studio agent as a peer agent
- D. Manually re-enter inventory data into Dataverse on a schedule
Correct: B. MCP is the standard for exposing tools and data sources to an agent — reusing the warehouse system's existing MCP-compatible interface avoids custom connector work entirely.
- Why not A: Ignores the already-standardized interface and duplicates work that MCP extensibility would avoid.
- Why not C: A2A is for coordination between autonomous peer agents, not for consuming a tool/data interface — the wrong standard for this job even though it sounds plausible.
- Why not D: Manual re-entry defeats the point of a live integration and ignores the standardized interface that already exists.
Question 6
A finance team wants an agent to log into a legacy web portal with no API, download a monthly statement, and upload it to SharePoint — a fixed, repeatable sequence with no decision-making involved. Which capability fits, and is this a task agent or an autonomous agent?
- A. Computer Use in Copilot Studio, configured as a task agent
- B. Computer Use in Copilot Studio, configured as an autonomous agent
- C. A custom Foundry model trained specifically to browse the portal
- D. Wait for the vendor to build an API before considering an agent
Correct: A. Computer Use automates UI interaction on systems with no API, which fits the no-API portal. Because the sequence is fixed and repeatable with no independent decision-making, it belongs to a task agent, not an autonomous one.
- Why not B: Labeling a fixed, no-decision sequence as autonomous over-scopes the design — autonomous agents are for tasks requiring independent judgment.
- Why not C: A custom-trained model to browse a UI is significant overkill when Computer Use already exists for exactly this scenario.
- Why not D: Unnecessarily blocks a solvable problem on an external dependency instead of using an available Copilot Studio capability.
Deploy AI-Powered Business Solutions
Question 7
A team has been editing Copilot Studio agent topics directly in production because it's faster than testing separately first. What should the architect require going forward?
- A. Continue editing in production but take a manual backup before each change
- B. Establish separate dev, test, and production environments with a defined promotion path for agents, connectors, and actions
- C. Require verbal review from a second person before each change goes live
- D. Freeze all agent edits until the next quarterly release window
Correct: B. This is the ALM process objective directly: a defined environment structure and promotion path for Copilot Studio agents, connectors, and actions, not ad hoc production edits.
- Why not A: A backup reduces blast radius but doesn't create an actual test environment — production is still the first place changes run.
- Why not C: Verbal peer review is not a substitute for having a test environment at all.
- Why not D: Overly restrictive and doesn't fix the missing environment structure — it just stops iteration instead of enabling it safely.
Question 8
Telemetry shows an agent's average response time has doubled over the past month with no change to its design, while the volume of grounding-data lookups per conversation has tripled. What should the architect investigate first?
- A. Whether the underlying language model version has changed
- B. Whether the grounding data source or retrieval configuration is causing excessive lookups per conversation
- C. Whether users are typing longer messages than before
- D. Whether the agent needs to be rebuilt from scratch
Correct: B. The telemetry directly ties the slowdown to a tripling of grounding-data lookups per conversation — that is the signal to chase first, before broader or more disruptive changes.
- Why not A: Possible, but not what the given telemetry actually points to — investigating it first ignores the specific signal provided.
- Why not C: Not supported by any data in the scenario — a distraction from the lookup-volume signal that was actually measured.
- Why not D: Disproportionate before root-causing a specific, already-identified telemetry signal.
Question 9
A multinational company's AI agent processes customer data that, under regional regulation, must not leave its country of origin. The company is evaluating a Foundry deployment region for the agent's model. What must the architecture satisfy before deployment?
- A. The model must be the latest available version regardless of hosting region
- B. The model and its grounding data must be deployed and processed within the customer's country of origin
- C. The company should anonymize the data so residency rules no longer apply
- D. Residency only matters for structured data, not for AI grounding data
Correct: B. This directly satisfies the data residency and movement compliance requirement — processing must stay within the required jurisdiction, which is an architecture decision, not an afterthought.
- Why not A: Model version currency has nothing to do with where data is processed — doesn't address residency at all.
- Why not C: Anonymization is not a reliable substitute for residency compliance under most frameworks this objective refers to — a risky assumption to design around.
- Why not D: Contradicts the objective directly — data residency and movement compliance explicitly covers AI grounding data, not just structured records.
Question 10
During testing, someone gets a customer-facing agent to reveal internal pricing rules by embedding hidden instructions inside a support ticket description. Beyond fixing this specific prompt, which architectural controls should the team add?
- A. Rate-limit the number of messages per user session
- B. Add prompt-injection detection for untrusted input, plus an audit trail logging changes to the agent's instructions and data over time
- C. Increase the model's context window so it understands the ticket better
- D. Remove the agent's access to pricing data entirely so there's nothing to leak
Correct: B. This matches the vulnerability-mitigation and audit-trail objectives directly: detect and mitigate prompt manipulation from untrusted input, and maintain an audit trail of changes to instructions and data.
- Why not A: Rate-limiting addresses volume or abuse, not the prompt-injection vulnerability itself.
- Why not C: A larger context window has no relationship to detecting or blocking manipulated instructions.
- Why not D: Removing functionality entirely is a disproportionate fix that breaks legitimate use instead of architecting a real mitigation.
Distractor Patterns to Watch For on AB-100
Across these 10 questions, the wrong answers cluster into a handful of repeatable traps. Recognizing the pattern is often faster than re-deriving the domain objective from scratch mid-exam:
| Pattern | What it looks like |
|---|---|
| Build first, evaluate never | Jumping to a build or an extreme action without running the ROI / build-buy-extend comparison the Plan domain expects. |
| Right technology, wrong agent type | Picking a correct underlying capability but mislabeling it — task vs. autonomous agent, or MCP vs. A2A for the wrong job. |
| Symptom chasing | Investigating a plausible-sounding cause the telemetry or scenario never actually pointed to, instead of the signal given. |
| Overcorrection | Fixing a real problem with a disproportionate response that breaks legitimate functionality rather than architecting a targeted control. |
| Skipping the process step | Treating ALM, governance, or residency requirements as optional shortcuts when the objective explicitly calls for a defined process. |
MSCertQuiz sells practice-exam access for AB-100 and other Microsoft certifications; these 10 questions are a free sample from the same 500-question bank the team maintains and links to below.
Continue Your AB-100 Prep
Domain weights, the prerequisite requirement, and a week-by-week study plan.
Every domain as a quick-reference table for exam-day review.
A fuller, timed read on where you actually stand before booking the exam.
Full exam details, FAQ, and the complete 500-question practice bank.
Want the full timed mock exam?
Take the AB-100 exam readiness quiz for a realistic read on where you stand across all three domains.
Take the Readiness Quiz