Practice question 41 of 498 · medium
An agent can make high-impact changes to customer subscriptions. Which two controls align with AI-4 and AI-5? Select two answers.
Select all that apply. Every correct option and no extras are required for credit in the app.
Show the answer and explanation
✓ Correct answers
- Constrain the agent identity and tool to specifically permitted subscription operations
- Enforce human approval before designated consequential changes are executed
Constrain the agent identity and tool to specifically permitted subscription operations: Least privilege limits what the agent can do independently of its generated instructions. Enforce human approval before designated consequential changes are executed: Approval must guard the action, not merely document it afterward. Allow all operations but add a disclaimer after each change: A disclaimer does not constrain or approve the action. Replace permissions with a safety system prompt alone: Meta-prompts are not an authorization boundary. Log human review only after irreversible changes finish: Post-action review cannot provide the required pre-action checkpoint.
Read and review here, or open the app to practise and save your results on this device.
Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.