AB-731 AI Transformation Leader Questions and Answers

Preventing generative AI from accessing confidential or classified information is primarily a data access and classification control problem. The most effective broad solution is data governance (B)—the framework of policies and controls that ensures sensitive content is identified, classified, protected, and access is restricted using least privilege. Data governance includes information classification/sensitivity labels, access control reviews, secure sharing practices, data loss prevention (DLP), and auditing—controls that directly limit what data is available to the AI through permission trimming and policy enforcement.

An information barrier (A) policy is more specific: it’s intended to prevent communication and collaboration between defined user groups (often for regulatory/ethical walls). It does not comprehensively address document classification or restrict AI access to sensitive files across the tenant. A data retention policy (C) governs how long content is kept and when it’s deleted; it’s not a primary access-prevention mechanism. Communication monitoring (D) is a detection/oversight control; it can help identify risky activity, but it does not itself prevent access to confidential content by the AI.

Therefore, to prevent AI from surfacing confidential/classified data during summarization and analysis, you should recommend data governance as the primary control layer.

In Microsoft Copilot Studio, knowledge sources allow an agent to generate responses from configured content such as websites, files, SharePoint content, Dataverse, or other approved knowledge repositories. This reduces the need to manually create a separate scripted topic for every possible user question. Instead, the agent can use generative answers grounded in the configured knowledge source and respond dynamically based on the user’s request. Changing only the response format is too narrow and does not describe knowledge sources. Summarizing Teams meetings is more aligned with Microsoft 365 Copilot scenarios. Creating one scripted topic for every question is exactly what knowledge sources help avoid.

The correct selections are Yes, Yes, Yes. Lack of trust is a common AI adoption barrier because users and leaders may worry about security, privacy, hallucinations, inaccurate outputs, and unclear accountability. If people do not trust the system, they will avoid using it or over-escalate decisions outside the intended workflow. AI adoption also fails when organizations overlook high-quality data. Poor, outdated, incomplete, or poorly governed data weakens grounding, reduces output quality, and damages user confidence. Finally, adoption is strongest when business and compliance stakeholders are involved early. Business stakeholders ensure the solution solves real problems and delivers measurable value, while compliance, legal, risk, and privacy teams ensure the solution aligns with policy and regulatory obligations.

The requirement is an interactive generative AI experience that can converse with customers and ask clarifying questions (for example: “What climate are you hiking in?”, “How many people will share the tent?”, “What’s your budget?”, “Do you prioritize weight or comfort?”). The best solution component for that conversational, question-and-answer interaction is a chatbot (A), powered by a generative AI model.

A chatbot provides the dialog framework: maintaining conversational context across turns, prompting the user for missing requirements, and responding in natural language. This makes it suitable for customer support, guided shopping assistance, troubleshooting, and pre-sales Q & A—especially when customers don’t know exactly what they need and benefit from a guided conversation.

The other options don’t match the core requirement. Predictive AI (B) forecasts outcomes (like demand or churn) and isn’t inherently conversational. Computer vision (C) analyzes images (like recognizing products from photos) and doesn’t address asking questions in dialogue. A recommendation engine (D) can be useful in ecommerce, but it typically suggests items based on behavior or attributes; it doesn’t by itself provide a conversational flow that asks users questions and adapts responses in natural language. In practice, you can combine a chatbot with a recommendation engine behind the scenes—but the “include in the solution” component that directly satisfies interactive questioning is the chatbot.

For a proof of concept, the key requirements are low commitment, quick start, and the ability to scale up or down as you learn what real usage looks like. Azure OpenAI Standard On-Demand pricing is designed for exactly that: you pay per token consumed (input and output) on a pay-as-you-go basis, which makes it ideal when demand is uncertain or variable—typical in early pilots and PoCs.

By contrast, Provisioned (PTUs) is best when you have well-defined, predictable throughput and latency requirements—usually a more mature, production workload. PTUs involve reserving model processing capacity to achieve consistent performance and more predictable costs, which is usually premature for a PoC where actual traffic patterns are not yet known.

Batch API is optimized for asynchronous high-volume jobs with a target turnaround (for example, up to 24 hours) and discounted pricing. That’s great for offline processing, but it does not match an interactive “agent” PoC that typically needs near-real-time responses and iterative testing.

Microsoft 365 Copilot is a separate SaaS licensing model and is not the Azure OpenAI pricing model for building your own agent solution.

Microsoft Copilot Studio is built for creating and managing custom agents that handle employee self-service and business process automation. The two capabilities that align directly to this purpose are D and E.

D is correct because Copilot Studio lets you build agents that connect to enterprise data and systems and then perform actions on behalf of users. This is the foundation for automation and self-service: the agent can answer questions using connected knowledge sources and can also trigger workflows (for example, submitting a request, creating a ticket, checking status, or updating records) through connectors and actions. These integrations allow the agent to move beyond “chat” into real operational outcomes, which is exactly what business process automation requires.

E is correct because Copilot Studio provides the controls needed to customize how an agent behaves and responds. This includes defining conversational topics/flows, setting instructions and guardrails, shaping tone and response style, configuring fallback behavior, and controlling how generative answers are produced (for example, using approved knowledge sources). Customization ensures the agent behaves consistently with company policies and provides reliable employee experiences.

The other choices represent different Microsoft products: A is aligned to security operations tooling (Security Copilot), B relates to information protection/governance (Purview), and C is a Microsoft 365 Copilot capability inside Word/PowerPoint rather than a Copilot Studio feature.

Answer Area

Allowing AI models to make autonomous decisions supports the Microsoft responsible AI principle of accountability. Answer: No

Regularly testing AI models for fairness and inclusiveness helps ensure they align with Microsoft’s Responsible AI principles. Answer: Yes

Protecting user data and limiting access to personal information supports the Microsoft responsible AI principles of privacy and security. Answer: Yes

Microsoft’s Responsible AI principles emphasize that people and organizations must remain accountable for AI systems and their outcomes. Accountability is strengthened by governance, human oversight, clear ownership, auditability, and processes to review and address issues—not by letting models make unchecked autonomous decisions. Therefore, statement 1 is No: increasing autonomy can actually increase risk unless paired with human-in-the-loop controls and clear escalation paths, because accountability requires clear responsibility for decisions and impacts.

Statement 2 is Yes because fairness and inclusiveness are explicitly supported through ongoing evaluation. Regular testing helps detect disparate impact, performance gaps across user groups, and unintended bias introduced by data drift or changes in usage patterns. It’s not a one-time activity; it’s continuous assurance that the system behaves appropriately as conditions change.

Statement 3 is Yes because privacy and security are directly supported by protecting personal/sensitive data, enforcing least privilege access, and implementing controls such as data loss prevention, encryption, access logging, and strong identity governance. Limiting access to personal information reduces exposure and supports compliance obligations while aligning with privacy-by-design and secure-by-design expectations for AI-enabled solutions.

Microsoft 365 Copilot

Microsoft Copilot Studio

Microsoft 365 Copilot is the correct match for creating financial summaries and visual reports from Excel workbooks because it is designed to work inside Microsoft 365 productivity apps, including Excel, and helps users analyze, summarize, and create business content. Microsoft Copilot Studio is the correct match for building an autonomous agent by using a low-code approach because Copilot Studio is Microsoft’s tool for creating, customizing, and managing agents that connect to business data and automate interactions. GitHub Copilot is focused on developer coding productivity, and Copilot in Power Automate is focused on workflow automation rather than building a full low-code conversational or autonomous agent. Therefore, Excel-based business analysis maps to Microsoft 365 Copilot, while low-code agent creation maps to Microsoft Copilot Studio.

Azure AI Search provides an indexing and retrieval layer that makes large, distributed document collections searchable in a consistent way. The key benefit in an information discovery scenario is that it can index content from many sources and then retrieve relevant documents/passages using rich query capabilities, including natural language-style queries and semantic ranking. That directly aligns with B.

This retrieval capability is foundational for RAG architectures: the system uses Azure AI Search to find the best matching content, then supplies those results to a generative model so the answer is grounded in organizational knowledge. That improves relevance and reduces hallucinations because the model is guided by retrieved evidence.

Option A is the opposite of what you want—Search is used precisely to reference existing data. C is more aligned to workflow automation platforms (Logic Apps/Power Automate) and document processing services. D describes fine-tuning, which is a different approach; Azure AI Search improves discovery and grounding through retrieval, not by changing model weights.

Answer Area

Prompt engineering changes how a generative AI model was trained. Answer: No

Prompt engineering focuses on designing clear, concise, and context-rich instructions. Answer: Yes

Effective prompt engineering involves maximizing the number of tokens used in each request. Answer: No

No — Prompt engineering does not modify model weights or retrain the model. It is an inference-time technique: you steer outputs by improving the instructions and context you send to the model. Changing how a model was trained would involve pretraining, fine-tuning, or other training methods—separate from prompt engineering.

Yes — The primary goal of prompt engineering is to reduce ambiguity and variability by providing clear instructions, the right context, and explicit output constraints. This often includes specifying role and task, providing necessary facts or grounding text, defining format (bullets, JSON, headings), and adding examples (few-shot) when helpful. Well-constructed prompts improve consistency, relevance, and usefulness of outputs.

No — Good prompt engineering does not mean “use as many tokens as possible.” In fact, using unnecessary tokens can increase cost and may degrade quality by adding noise. Effective prompts are typically as short as possible but as long as necessary: enough context to achieve accuracy and alignment, but not bloated. Token discipline matters because most pricing is token-based and long contexts can dilute attention over what’s most important.

Most generative AI language model pricing is based on token consumption, which measures the amount of text processed by the model. Tokens are sub-word units used internally by language models (for example, parts of words, whole words, or punctuation). When you send a prompt, the model consumes input tokens (your prompt + any system instructions + retrieved grounding context). When it generates a response, it consumes output tokens (the generated completion). Costs typically scale with the total input + output tokens processed, which is why long prompts, large grounding passages, and lengthy responses increase spend. This also explains why prompt optimization, response length limits, caching, and careful grounding are common cost-control techniques in enterprise solutions.

By contrast, “documents” is too coarse (a document can be 1 page or 500 pages). “Requests” is not the primary unit for most LLM pricing models because request sizes vary dramatically. “Words” is not used because the model’s actual compute unit is tokens, and tokenization differs across languages and text patterns. Therefore, the most accurate completion is tokens.

Microsoft Foundry is positioned as a unified, enterprise-grade platform that helps organizations build, deploy, scale, and govern AI apps and agents—especially generative AI solutions that need to work with business context and internal data. That directly aligns with A: Foundry provides a scalable platform for developing and deploying generative AI solutions. Microsoft describes Foundry as an interoperable platform that makes it easier to build, deploy, and scale AI apps and agents, while also providing centralized security and governance features for organizations.

B is incorrect because Foundry does not remove model choice/configuration; in fact, it supports selecting among models and using tools/frameworks to build solutions. You still choose appropriate model(s), configure endpoints, and design grounding and safety controls.

C and D are not the best characterization of Foundry’s primary benefit. While Foundry offers “friendly interfaces,” Microsoft primarily positions it for developers, model builders, and enterprise AI operations—not as a low-code platform for business users (that role is more commonly filled by Copilot Studio/Power Platform).

For a product showcase website, the highest-impact, most directly relevant generative AI benefit is content creation at scale—producing consistent, high-quality product copy quickly. Option D matches a core generative AI capability: turning structured inputs (specifications such as dimensions, materials, features, compatibility, and use cases) into natural-language descriptions that are readable, persuasive, and formatted for web publishing. This accelerates catalog onboarding, reduces manual writing effort, and helps maintain a consistent tone and structure across thousands of SKUs.

Option A (translation) is also something generative AI can do, but it is a narrower, secondary capability compared to the primary website need: generating product copy from specs. Option B is predictive/analytical AI rather than generative content creation. Option C is plausible in ideation, but the scenario is about showcasing existing products, not inventing new ones. Therefore, D is the best answer because it aligns directly with the project’s core workflow (product specs → publishable descriptions) and delivers measurable business value through speed, consistency, and reduced content production costs.

For a user to access organizational data from a mobile device, the user needs a Microsoft 365 Copilot license. No

To reason over your organizational data by using Microsoft Graph, you need a Microsoft 365 Copilot license. Yes

To use the Analyst agent, you need a Microsoft 365 Copilot license. Yes

Top of Form

Bottom of Form

The key distinction here is between Copilot Chat capabilities available with a standard Microsoft 365 subscription and the full Microsoft 365 Copilot add-on that enables richer, in-context experiences grounded in organizational data.

Mobile access to organizational data does not inherently require a Microsoft 365 Copilot license. Microsoft’s Microsoft 365 Copilot app (and related mobile experiences) can provide Copilot Chat for work/school accounts with a Microsoft 365 license, so simply accessing organizational content on a mobile device is not the same as having the paid Copilot add-on. The statement claims a Copilot license is required just to access org data from mobile, which is too broad—there are mobile Microsoft 365 apps that access org data without the Copilot add-on.

Reasoning over organizational data via Microsoft Graph is a core value proposition of Microsoft 365 Copilot. Microsoft documents explain that Microsoft 365 Copilot connects LLMs to your organization’s content and context through Microsoft Graph and generates responses “anchored” in organizational data. That deeper integration is tied to the Microsoft 365 Copilot experience (an add-on license).

Analyst is a “reasoning agent” within Microsoft 365 Copilot and Microsoft states that users with a Microsoft 365 Copilot license can use Analyst (with defined usage limits). Therefore, the Analyst agent requires the Microsoft 365 Copilot license.

The correct answer is B. Pay-as-you-go. A proof of concept should start with minimum commitment, flexible usage, and the ability to scale as demand becomes clearer. Pay-as-you-go pricing is appropriate because it allows the organization to pay based on actual model consumption rather than reserving dedicated capacity upfront. This is ideal when usage is uncertain, experimental, or expected to change during testing. Provisioned Throughput Units are better for predictable, high-volume production workloads that need reserved capacity and consistent throughput. Batch API is designed for asynchronous large-scale processing, not an interactive agent PoC. Microsoft 365 Copilot is a separate productivity service and not the Azure OpenAI pricing model for a custom agent solution.

Generative AI is designed to create new outputs, such as text, images, code, summaries, emails, product descriptions, and conversational responses, based on patterns learned from training data and the user’s prompt. Predictive AI is different because it focuses on forecasting outcomes, classifying data, or estimating probabilities from historical patterns, such as predicting customer churn, sales demand, or equipment failure. Generative AI does not necessarily use a smaller dataset, and it does not automatically produce more accurate results than predictive AI. Accuracy depends on data quality, grounding, model design, and validation. The defining distinction is content creation: generative AI produces new material, while predictive AI predicts likely outcomes.

Answer Area

Microsoft 365 Copilot can amplify existing data governance challenges.

Answer: Yes

Implementing Microsoft 365 Copilot reduces data management costs.

Answer: No

Microsoft 365 Copilot can help IT teams manage data risks.

Answer: Yes

Yes — Copilot relies on the permissions, sharing links, and content exposure that already exist in Microsoft 365. If an organization has oversharing (for example, broadly accessible SharePoint sites, poorly scoped Teams, unmanaged external sharing, or excessive access rights), Copilot can surface that content more easily through natural-language querying. In other words, Copilot doesn’t create new permissions, but it can increase visibility of governance gaps and make the impact of weak information architecture more apparent.

No — It is not accurate to claim that implementing Copilot inherently reduces data management costs. Adoption often requires up-front investment in data hygiene, sensitivity labeling, retention, permission cleanup, DLP, and change management. Some organizations may realize productivity gains or reduced effort over time, but “reduces costs” is not a guaranteed outcome and depends heavily on the current state of governance, the scale of remediation needed, and how Copilot is rolled out.

Yes — Copilot can support IT risk management when deployed with the right controls: identity and access governance, sensitivity labels, DLP policies, retention, auditing, and compliance tooling. Because Copilot operates within the Microsoft 365 security/compliance boundary and honors existing access controls, IT can apply centralized policies to reduce leakage risk and improve overall control of how organizational data is accessed and used.

Answer Area

Extracting structured data from forms and invoices: Answer: Azure Document Intelligence in Foundry Tools

Summarizing written content from business reports: Answer: Azure Language in Foundry Tools

Generating descriptive text for uploaded images: Answer: Azure Vision in Foundry Tools

These three tasks align to three different Azure AI capability families: document processing, language understanding/generation, and computer vision.

Forms and invoices are semi-structured documents where the business need is to extract specific fields (IDs, names, totals, dates) reliably into structured output. Azure Document Intelligence is designed for intelligent document processing and includes prebuilt models (such as invoices) as well as custom extraction options, making it the correct choice for structured data extraction from documents.

Summarizing written business reports is an NLP task focused on compressing long text into key points, themes, and action items. Azure Language provides language processing capabilities (including summarization features within language service capabilities), so it is the best fit for summarization scenarios.

Generating descriptive text for images (image captioning/description) is a computer vision task. Azure Vision can analyze uploaded images and return descriptions/captions and other visual insights, which directly matches the requirement to produce descriptive text from images.

The requirement is to analyze text and identify “people, locations, and companies” mentioned in news articles. This is a classic Named Entity Recognition (NER) / entity extraction scenario, which falls under natural language processing. Azure Language in Foundry Tools is the correct choice because it provides text analytics capabilities that detect and categorize entities in unstructured text—commonly including Person, Location, and Organization. This enables downstream experiences such as topic tagging, search filters (e.g., “all articles mentioning Company X”), trend dashboards (top people/places mentioned this week), and improved content discovery.

The other options do not match the requirement. Content Safety focuses on moderating harmful or policy-violating content (for example, hate, violence, self-harm, sexual content) and is not the primary tool for extracting named entities. Azure Vision is for analyzing images and performing OCR; it would only be relevant if the articles were images or scans, but the task here is entity extraction from text articles. Azure Speech is for speech-to-text, text-to-speech, and audio analysis; it would be used if your input were audio recordings rather than written articles.

Therefore, to identify key entities (people, locations, companies) from daily news article text, the best recommendation is Azure Language in Foundry Tools.

The requirement has two key phrases: indexing information and knowledge mining by extracting insights from documents. The Microsoft service purpose-built for this is Azure AI Search (formerly Azure Cognitive Search), which provides a search index over your content and supports “AI enrichment” workflows to extract and structure insights from documents during indexing.

Azure AI Search can ingest content from common enterprise sources (files, blobs, databases), build searchable indexes, and enrich the indexed content using built-in skills or integrated AI capabilities—such as entity recognition, key phrase extraction, language detection, and OCR (depending on the pipeline). This is exactly what “knowledge mining” refers to: turning large volumes of unstructured documents into structured, searchable knowledge that applications and users can query.

The other choices are partial fits: Azure Vision focuses on image/video analysis, not general document indexing. Azure Document Intelligence is excellent for extracting fields/tables from forms and documents, but on its own it does not provide the full indexing/search and knowledge mining layer across a corpus. Microsoft Foundry is an overarching platform for building AI apps/agents; it can incorporate search, but the specific service that directly delivers indexing + knowledge mining is Azure AI Search.

uses structured data and provides insights by using text, charts, tables, and other visuals.

The Analyst agent in Microsoft 365 Copilot is positioned as a “data analysis” reasoning agent that helps users work through structured information (for example, tables, spreadsheets, and other dataset-like inputs) and then produces analytical outputs. The best completion is the option stating it “uses structured data and provides insights by using text, charts, tables, and other visuals,” because that describes the hallmark outcome of analyst-style work: summarizing patterns, highlighting key drivers, and presenting results in formats that business users can act on. Analyst-style assistance typically includes exploring the data, identifying trends and anomalies, comparing segments, and explaining findings clearly—often accompanied by tables and visual representations that make the insights easier to consume.

The other dropdown options align to different use cases: “compiles background research for a new market or initiative” describes a research-oriented agent, “generate audio summaries” is a media summarization function, and “answer employee FAQs” describes a conversational knowledge assistant. Analyst is the one most directly associated with structured-data interpretation and producing a mix of narrative plus analytical artifacts (tables/charts) to communicate conclusions.

improves the accuracy and reliability of the predictions and outputs of AI.

High-quality grounding data improves a generative AI solution by anchoring responses to trusted, relevant, and up-to-date information, which increases the likelihood that outputs are accurate, consistent, and aligned with the organization’s expectations. This is why the best completion is “improves the accuracy and reliability of the predictions and outputs of AI.” When the model is given authoritative context (for example, approved policy text, product specifications, knowledge base articles, or controlled enterprise content), it has less need to “guess” based on general patterns in its training data. That reduces hallucinations and improves response relevance to the user’s question and the business domain.

It does not “ensure that all responses are factually accurate” because grounding reduces errors but cannot eliminate them completely—retrieval can return incomplete or irrelevant passages, user prompts can be ambiguous, and the model can still misinterpret context. It also does not inherently “increase performance of an AI model” in the sense of speed/throughput or model capability; grounding is an architecture and data strategy that improves output quality, not compute efficiency. Finally, grounding is not about “increasing storage required to host an AI model.” While you may store documents in an index or repository, the core benefit is improved response quality through better context, not larger model hosting requirements.

Generative AI’s defining characteristic is that it creates new content (text, images, code, summaries, drafts) in response to instructions—most commonly natural language prompts. Option C captures that general-purpose description in a stakeholder-friendly way: users provide prompts and the system generates responses or content. This framing is broad enough to cover common business value scenarios such as summarizing documents, drafting communications, creating marketing copy, generating reports, building assistants, and producing structured outputs from unstructured requests.

Option A is a single use case (translation), not the defining description. Option B describes predictive analytics/forecasting, which is a different AI category focused on outcomes and probabilities rather than content creation. Option D describes recommendation systems, typically driven by ranking/behavioral signals; while AI can enhance recommendations, that is not the core definition of generative AI. Therefore, the most accurate and relevant description for stakeholders is C.

create a Microsoft Word document.

Microsoft 365 Copilot is a productivity-focused AI capability embedded across Microsoft 365 apps such as Word, Excel, PowerPoint, Outlook, and Teams. A core, common use case is drafting and generating documents in Word from prompts and existing context. Therefore, “create a Microsoft Word document” is the best completion.

The other options are not appropriate for Microsoft 365 Copilot’s scope. “Monitor network traffic and alerts in real time” is a security/operations function more aligned to security monitoring tools and, in Microsoft’s product set, closer to Microsoft Security Copilot or dedicated SIEM/SOAR platforms (for example, Microsoft Sentinel). “Modify administrative permissions for SharePoint files” is an admin/governance action that is intentionally protected by role-based access control and is not something end-user Copilot features are meant to perform as a default capability. “Create a list in Microsoft SharePoint” is closer, because Copilot can assist in generating content and can work within Microsoft 365 collaboration contexts; however, the most universally accurate and directly supported capability among the options is creating/drafting a Word document, which is a primary Copilot scenario in Word.

In short, Microsoft 365 Copilot is designed to help users create, summarize, rewrite, and transform content within Microsoft 365 apps, and document creation in Word is a canonical example of that value.