Correct Answer:

Explanation:
Unsupported final-response content: Groundedness; Context support for the query: Retrieval; Final- response support for the query: Relevance.
Groundedness detects whether the generated response contains claims that are not supported by the retrieved context, which directly matches the first requirement. Retrieval evaluates how relevant the provided context chunks are to the query when no document relevance ground truth is available. Relevance evaluates whether the final response directly and adequately answers the query. Microsoft Foundry separates these metrics so teams can diagnose whether a poor RAG result originated in retrieval or generation. Document Retrieval would require labeled retrieval ground truth, which the question explicitly says is absent. Response Completeness likewise depends on expected/ground-truth information. The supplied Groundedness, Retrieval, and Relevance mapping therefore matches the documented evaluator inputs and purposes. A robust evaluation program separates process metrics from final-response metrics. The selected answer measures the layer where the stated failure actually occurs, which is essential for deciding whether to change retrieval, orchestration, prompt behavior, or the final generator. For operational use, the measurement should be captured in a repeatable dataset, trace, or automated gate so that the same criterion can be compared across versions. That is more useful than a one-off manual observation and makes regressions visible before they become production incidents.
Official Microsoft reference: Microsoft Foundry - RAG evaluators

Correct Answer: B  🗳️

Explanation: Only visible for TestKingsIT members. You can sign-up / login (it's free).

Correct Answer:

Explanation:
Identity structure: Separate blueprints for the orchestrator agent and each worker group; Permission assignment: Assign role-specific downstream permissions to each agent identity.
The supplier and finance workers operate in different trust domains: one reaches external supplier APIs while the other has confidential ERP access. Microsoft Entra Agent ID guidance recommends separating blueprint
/identity trust boundaries when compromise of one agent must not expose unrelated credentials or permissions. Each logical agent identity should then receive only the downstream roles required for its own function. This creates clear audit attribution and limits lateral movement. Giving all workers the same role or routing every privileged operation through an overly powerful orchestrator would expand the blast radius.
Creating an identity for every runtime replica is unnecessary when replicas represent the same logical agent role. The correct structure therefore separates the orchestrator and worker trust domains and assigns role- specific permissions to each identity rather than sharing a common authorization envelope. The same configuration should be paired with auditable identity, trace, and evaluation data so reviewers can prove which principal acted, which policy was applied, and why a request was allowed or blocked. That is particularly important for production multi-agent systems with external tools.
Official Microsoft reference: Microsoft Entra Agent ID - plan agent identity architecture

Correct Answer: A  🗳️

Explanation: Only visible for TestKingsIT members. You can sign-up / login (it's free).