Free Microsoft AB-731 Practice Exam with Questions & Answers | Set: 2

The correct answer is A. Microsoft Security Copilot. The requirement is clearly a security operations scenario: analysts must investigate incidents across endpoint, identity, cloud, and security operations data. Microsoft Security Copilot is designed for security teams and supports natural-language investigation, alert summarization, incident context, affected-resource identification, and recommended response actions. Microsoft 365 Copilot is focused on productivity tasks such as drafting, summarizing, and analyzing content in Microsoft 365 apps. Azure Document Intelligence extracts structured information from documents such as forms and invoices. Microsoft Copilot Studio is used to build and customize agents for business workflows. Because the scenario centers on security incident investigation and response guidance, Microsoft Security Copilot is the correct solution.

crafting clear instructions to guide generative AI solutions in generating context-appropriate content.

Prompt engineering is fundamentally about how you communicate intent to a generative AI model so it produces outputs that meet business expectations. The best completion is “crafting clear instructions to guide generative AI solutions in generating context-appropriate content” because it captures the practical, day-to-day discipline: shaping the input (prompt) with the right task framing, constraints, context, and output format.

In real deployments, prompt engineering includes specifying the role and objective (for example, “act as a customer support agent”), providing the necessary context (product details, policy excerpts, audience), adding explicit requirements (tone, length, must/must-not statements), and defining structured output (JSON fields, bullet sections, headings). It can also include adding examples (few-shot prompting), clarifying what to do when information is missing, and instructing the model to cite only provided sources or to ask follow-up questions. These techniques reduce ambiguity, improve consistency, and lower the risk of hallucinations or off-brand responses.

The other options are not accurate definitions. “Integrating AI-powered tools into business workflows” describes solution adoption/integration, not prompt engineering. “Identifying and fixing errors in AI-generated content” is review/editing or quality assurance. “Designing, developing, and training generative AI models” is model development/ML engineering. Prompt engineering operates without changing model weights; it’s about steering model behavior through well-constructed instructions and context.

Answer Area

Microsoft Copilot in Outlook can automatically send follow-up replies to emails. Answer: No

Microsoft Copilot in Outlook can identify and surface tasks mentioned in your emails. Answer: Yes

Microsoft Copilot in Outlook can summarize long email threads and highlight action items and deadlines. Answer: Yes

1) No — Copilot in Outlook can draft email responses and help you take actions, but sending messages is not positioned as an automatic “follow-up reply” behavior. Microsoft describes capabilities such as “Draft with Copilot” (generating email drafts from prompts) and Copilot chat actions that update the mailbox, which implies user-directed execution rather than autonomous follow-up sending.

2) Yes — Copilot supports contextual help over your inbox and can help you “catch up” and understand what’s due, which includes surfacing action-oriented items from recent communications. This aligns with using Copilot to pull together summaries of email messages and identify what requires attention.

3) Yes — Microsoft explicitly documents email-thread summarization in Outlook: Copilot scans a conversation and produces a summary of key points. Microsoft also describes Copilot’s summarization capability as extracting key points from threads, which is commonly used to surface what matters most (including actions to take) when the thread is long.

Answer Area

A generative AI model guarantees factually accurate responses if the model is trained on a large dataset. Answer: No

Content filtering and responsible AI safeguards help a generative AI model generate safe and inoffensive content. Answer: Yes

A generative AI model always produces fair and unbiased results when the training data has been properly prepared and reviewed for fairness. Answer: No

No — A larger training dataset can improve coverage and fluency, but it does not guarantee factual accuracy. Generative models can still hallucinate, mix concepts, or produce plausible-but-incorrect statements because they generate likely text rather than verifying truth. This is why solution designs commonly add grounding/retrieval, validation, and human review for high-stakes outputs.

Yes — Content filtering and Responsible AI controls are specifically used to reduce harmful, unsafe, or policy-violating outputs. In practice, safeguards include input/output filters, safety classifiers, and governance controls that help enforce safety policies and minimize offensive content. These controls don’t make outputs “perfect,” but they materially reduce risk and are a standard part of production AI deployments.

No — Even with careful data preparation and fairness reviews, models can still produce biased outcomes due to residual bias in data, label/measurement issues, deployment context, and shifting real-world distributions. “Always fair and unbiased” is an absolute claim that is not achievable in real systems; fairness is managed through continuous evaluation, monitoring, and mitigations—not assumed as guaranteed.

For a product showcase website, the highest-impact, most directly relevant generative AI benefit is content creation at scale—producing consistent, high-quality product copy quickly. Option D matches a core generative AI capability: turning structured inputs (specifications such as dimensions, materials, features, compatibility, and use cases) into natural-language descriptions that are readable, persuasive, and formatted for web publishing. This accelerates catalog onboarding, reduces manual writing effort, and helps maintain a consistent tone and structure across thousands of SKUs.

Option A (translation) is also something generative AI can do, but it is a narrower, secondary capability compared to the primary website need: generating product copy from specs. Option B is predictive/analytical AI rather than generative content creation. Option C is plausible in ideation, but the scenario is about showcasing existing products, not inventing new ones. Therefore, D is the best answer because it aligns directly with the project’s core workflow (product specs → publishable descriptions) and delivers measurable business value through speed, consistency, and reduced content production costs.

The correct selections are Yes, No, Yes. Prompt engineering is the practice of designing clear and effective inputs that guide a generative AI model toward relevant, accurate, and useful output. Guidelines, constraints, role instructions, tone requirements, and output-format rules are all common prompt-engineering techniques, so statement A is true. Statement B is false because examples are normally considered examples or few-shot demonstrations, not the instruction itself. The instruction tells the model what task to perform, while examples demonstrate the preferred pattern or output style. Statement C is true because context supplies the background information, source material, business scenario, audience, or constraints the model should use when generating the answer. Strong prompts usually combine instruction, context, constraints, and examples.

The correct selections are Yes, Yes, Yes. Lack of trust is a common AI adoption barrier because users and leaders may worry about security, privacy, hallucinations, inaccurate outputs, and unclear accountability. If people do not trust the system, they will avoid using it or over-escalate decisions outside the intended workflow. AI adoption also fails when organizations overlook high-quality data. Poor, outdated, incomplete, or poorly governed data weakens grounding, reduces output quality, and damages user confidence. Finally, adoption is strongest when business and compliance stakeholders are involved early. Business stakeholders ensure the solution solves real problems and delivers measurable value, while compliance, legal, risk, and privacy teams ensure the solution aligns with policy and regulatory obligations.

When AI adoption spans multiple business units, the primary risk is fragmented delivery: inconsistent standards, duplicated spend, uneven risk controls, and misalignment with enterprise strategy. Establishing an AI council (D) is the best approach because it creates a cross-functional governance mechanism that aligns AI initiatives to business priorities while enforcing Responsible AI practices consistently.

An AI council typically includes senior stakeholders from business leadership, IT, security, legal, compliance, privacy, data, and HR. Its role is to define AI principles and guardrails, approve high-impact use cases, set policy for data usage and access, establish evaluation and monitoring requirements, and coordinate change management and training. This also enables portfolio management—deciding which projects to prioritize, reuse, or stop—so AI investments map to measurable business outcomes.

The other options are weaker: A encourages siloed deployments and inconsistent risk management. B centralizes too narrowly in IT; Responsible AI requires broader accountability than a single function. C can help delivery capacity but does not replace internal governance; vendors still need direction, controls, and oversight from the organization.

Most generative AI language model pricing is based on token consumption, which measures the amount of text processed by the model. Tokens are sub-word units used internally by language models (for example, parts of words, whole words, or punctuation). When you send a prompt, the model consumes input tokens (your prompt + any system instructions + retrieved grounding context). When it generates a response, it consumes output tokens (the generated completion). Costs typically scale with the total input + output tokens processed, which is why long prompts, large grounding passages, and lengthy responses increase spend. This also explains why prompt optimization, response length limits, caching, and careful grounding are common cost-control techniques in enterprise solutions.

By contrast, “documents” is too coarse (a document can be 1 page or 500 pages). “Requests” is not the primary unit for most LLM pricing models because request sizes vary dramatically. “Words” is not used because the model’s actual compute unit is tokens, and tokenization differs across languages and text patterns. Therefore, the most accurate completion is tokens.

By default, Microsoft 365 Copilot is grounded in your organization’s Microsoft 365 data through Microsoft Graph, and it respects the user’s existing permissions. For “find and summarize information across internal documents,” the most direct default document repositories in Microsoft 365 are SharePoint (team sites and shared libraries) and OneDrive (a user’s work files). That is why C (Microsoft SharePoint) and D (Microsoft OneDrive) are the correct selections. Microsoft explicitly describes Copilot as accessing organizational content via Microsoft Graph, including user documents and related work content.

The other options are not “by default” sources. A (on-premises file share) is not automatically part of Microsoft Graph unless you integrate/migrate content or use connectors to make it discoverable in Microsoft 365 experiences. B (custom CRM) similarly requires an integration approach (for example, Microsoft 365 Copilot connectors / Graph connectors) to index and expose that data for Copilot to use. E (Microsoft Sway) is not a primary default content source for Copilot’s document grounding and is not typically referenced as a core internal document repository compared to SharePoint/OneDrive.

So, for immediate, out-of-the-box internal document discovery and summarization within Microsoft 365, SharePoint + OneDrive are the default answer.