Pass the Microsoft Certified: Multi-Agent AI Solutions Expert AI-500 Questions and answers with ExamsMirror

Prompt caching is designed for requests that share a long, identical prefix but still require a new completion for the unique user input. Azure OpenAI prompt caching reuses computation for matching prompt prefixes, reducing the effective input cost and improving Time to First Token for supported models. The stable 1,800-token instruction and MCP tool-definition block is large enough to benefit from this mechanism, and the unique user message can remain at the end so each request still generates a fresh response. Response caching would reuse an old completion, which violates the requirement. Semantic caching matches similar meaning rather than exact prompt prefixes, and retrieval caching applies to knowledge retrieval rather than model prompt processing. Because prompt caching is handled automatically for supported deployments, it also minimizes application changes. Therefore D is correct. At implementation time, the same rule should be expressed through the framework or service configuration rather than left only as a natural-language convention. That makes the behavior repeatable across runs, easier to test, and less sensitive to model variability.

Official Microsoft reference: Azure OpenAI - Prompt caching

============================================================

InvoiceValidationAgent and PaymentApprovalAgent: One blueprint and one agent identity per agent role; VendorNegotiationAgent: An independent blueprint, one agent identity, and one agent user account.

Invoice validation and payment approval are distinct finance roles with different ERP permissions, so each should have its own logical agent identity for least-privilege access and audit attribution. They can remain within the same finance trust boundary while using separate identities. The vendor-negotiation agent operates across an external supplier boundary and should therefore use an independent blueprint/trust boundary. Its dedicated Exchange Online mailbox introduces an additional Microsoft 365 requirement: Microsoft Entra Agent ID supports associating an agent identity with an agent user account when the agent needs resources that require a user object, such as Exchange mailboxes or Teams. Sharing a single identity across all roles would blur audit ownership and expand compromise impact. The answer therefore matches Microsoft ' s current agent-identity separation model. The same configuration should be paired with auditable identity, trace, and evaluation data so reviewers can prove which principal acted, which policy was applied, and why a request was allowed or blocked. That is particularly important for production multi-agent systems with external tools.

Official Microsoft reference: Microsoft Entra Agent ID - plan agent identity architecture

============================================================

Separate managed identities for each agent and environment remove the need to store application secrets and create independent authorization boundaries. Assigning Azure roles at the resource level further limits each identity to only the Storage resource it requires. This sharply reduces lateral movement compared with a shared application principal or subscription-wide role. Microsoft Foundry and Azure identity guidance consistently recommend identity-based authentication, distinct identities when permissions differ, and the narrowest practical RBAC scope. In current Foundry deployments, the exact identity object may be represented through Microsoft Entra agent identity or a federated managed identity relationship, but the architectural principle in the option is correct. Therefore the solution meets both stated goals and the answer is A, Yes. From a security and governance perspective, the control should be enforced at the narrowest platform boundary that can deterministically block or constrain the action. Relying only on prompt text is weaker because the model can still be induced to behave unexpectedly.

Official Microsoft reference: Microsoft Foundry agent identity

============================================================

Intervention point: Tool response; Risk: Indirect attacks.

The hidden instructions originate in retrieved HTML returned by supported tools, not in the user ' s direct prompt. Microsoft classifies that pattern as an indirect prompt-injection attack. The Tool response intervention point is specifically designed to inspect the complete payload returned from a tool before the content is stored in agent memory or used for subsequent reasoning. Configuring the Indirect attack control there with a blocking action prevents tainted retrieved data from steering the triage agent. Azure AI Search and Azure Functions are among the supported tools for tool-response moderation, which is important because both appear in the scenario. A Tool call control would inspect arguments sent to a tool rather than hostile content coming back from it. User-input attack detection likewise targets the wrong origin. The correct configuration is therefore Tool response plus Indirect attacks, with the operational response set to stop processing and alert the security workflow when malicious content is detected.

Official Microsoft reference: Microsoft Foundry guardrails - intervention points

============================================================