Correct Answer: C  🗳️

Explanation: Only visible for Prep4SureReview members. You can sign-up / login (it's free).

Correct Answer:

Explanation:
Guardrails: Select User input, Output, Tool response, and Tool call and set Action to Block.
Storage access: A system-assigned managed identity that is assigned the Storage Blob Data Contributor role The guardrail must be applied to User input, Output, Tool response, and Tool call with the action set to Block
. Microsoft Foundry guardrails support four intervention points: user input, tool call, tool response, and output. This scenario includes user-provided screenshots, a ticketing tool that uploads images and returns blob URLs, and final agent responses. Applying blocking controls at all four points ensures harmful image-related content is inspected throughout the agent run and prevented from continuing or being returned to the user.
Microsoft's guardrails guidance also states that tool call and tool response controls are specifically required when harmful content can pass through agent tools.
For storage, configure the Azure AI Content Safety resource with a system-assigned managed identity and grant it Storage Blob Data Contributor on the storage account or container. The Content Safety image moderation quickstart states that images can be supplied by blob storage URL and that the Content Safety resource must be given storage access by enabling its system-assigned managed identity and assigning Storage Blob Data Contributor or Owner; Contributor is the least-privileged valid option shown. Reference topics: Foundry guardrails, agent intervention points, image moderation, managed identity, and Azure Storage RBAC.

Correct Answer: A  🗳️

Explanation: Only visible for Prep4SureReview members. You can sign-up / login (it's free).

Correct Answer:

Explanation:
Prompt shields action: Set action to block.
Additional mitigation: Enable Spotlighting.
The correct configuration is to set the Prompt Shields document attack action to block and enable Spotlighting
. Prompt Shields in Microsoft Foundry are designed to detect attempts to manipulate model behavior through adversarial input. Microsoft distinguishes document attacks from direct user prompt attacks: document attacks are malicious instructions embedded in third-party content such as documents, webpages, emails, or other externally supplied material. In this scenario, the embedded text inside uploaded screenshots is third-party content and can attempt to override the agent's instructions. Setting the action to block prevents detected document-attack content from being processed normally, which is required because the goal is prevention rather than passive logging or annotation.
Spotlighting is the additional mitigation because it marks or transforms document content so the model treats it as lower trust than system and user instructions. Microsoft's Foundry guidance describes Spotlighting as a Prompt Shields subfeature that helps protect against indirect or embedded document attacks by tagging input documents with special formatting to indicate lower trust. A custom blocklist is insufficient for unknown attacks, and OCR alone only extracts the malicious text; it does not mitigate prompt injection. Reference topics: Prompt Shields, document attacks, guardrails, Spotlighting, multimodal safety, and prompt injection defense.

Correct Answer:

Explanation:

The model must use object detection because the solution needs more than an overall classification. It must identify individual defects, provide their locations, and count individual product samples. Object-detection predictions contain bounding-box coordinates in addition to labels and confidence scores, allowing the application to determine where a defect occurred and whether exactly four product instances are present.
The appropriate domain is General (compact) . The packaging and products are organization-specific and do not map to a more specialized object-detection domain. More importantly, a compact domain supports model export for edge/local inference . This matters because the factory has intermittent internet connectivity; the exported model can execute locally rather than depending continuously on a hosted Azure prediction endpoint.
Microsoft documents compact domains as optimized for deployment outside the Custom Vision hosted service. Exportable formats can include ONNX, TensorFlow, TensorFlow Lite, and other target-specific formats depending on project type and domain.
An ordinary General-domain model is intended for Azure-hosted prediction and cannot satisfy the same offline export requirement. Image classification is also unsuitable because it cannot return defect locations or count independently detected products.
Study Guide alignment: identify objects/components/regions and deploy vision functionality appropriate for edge scenarios . Microsoft Learn