AI-103 skill area 1 of 5 ยท exam weight 25–30%

Plan and manage an Azure AI solution

Choosing Foundry services and models, setting up and deploying solutions, operating them securely, and applying responsible AI.

Plan and manage an Azure AI solution carries 25–30% of the AI-103 exam. The study guide splits it into four skill groups: choosing the appropriate Microsoft Foundry services for generative AI and agents, setting up AI solutions in Foundry, managing, monitoring and securing AI systems, and implementing responsible AI across generative AI and agentic systems.

Planning starts with choices. The guide expects you to pick an appropriate model for each task, whether that's a large language model, a small language model, a multimodal model or one of the Foundry Tools, and to choose the Foundry services that fit generative tasks, grounding, vector search, agent workflows or multimodal processing. It also covers choosing a method for retrieval and indexing, and the memory, tool and knowledge integration services an agent solution needs.

Setting up a solution means designing the Azure infrastructure for AI apps and agent-based solutions, choosing deployment options, configuring model and agent deployments, and integrating Foundry projects with CI/CD pipelines. Operating it covers quotas, scaling, rate limits and cost footprints; monitoring model performance, drift, safety events and grounding quality, as well as data ingestion quality, search index health and relevance; and security through managed identity, private networking, keyless credentials and role policies.

Responsible AI closes the area: safety filters, guardrails, risk detection and content moderation; evaluators, safety evaluations and explanation tooling; auditing through trace logging, provenance metadata and approval workflows; and governing agent behavior with oversight modes, constraints and tool-access controls.

Source: Microsoft's AI-103 study guide (skills measured as of April 16, 2026). Documentation: Microsoft Foundry documentation, Azure AI Content Safety documentation.

69 practice questions in this area, covering 16 of 16 study-guide skills.

1.1 Choose the appropriate Foundry services for generative AI and agents

The study guide lists these skills:

  • Choose an appropriate model for each task, including large language models (LLMs), small language models, multimodal models, and Foundry Tools
  • Choose the appropriate Foundry services for generative tasks, grounding, vector search, agent workflows, or multimodal processing
  • Choose an appropriate method for retrieval and indexing
  • Choose appropriate memory, tool, and knowledge integration services for agent solutions
  1. B2-004 A chat app gets a mix of simple and complex prompts.
  2. B4-001 Before choosing a model for a customer-facing chat app, an architect wants to compare…
  3. B6-001 A procurement policy allows only models that are billed through the company's Azure…
  4. B8-001 A support assistant must (1) answer questions about return policies that change every…
  5. B1-001 A product team wants its first customer-service agent running quickly in Microsoft…
  6. B4-002 A support agent in Foundry Agent Service must answer with current information, but only…
  7. B6-002 A team has written an agent with LangGraph and wants to run it on Foundry Agent Service.
  8. B2-002 A Foundry IQ knowledge base has an LLM connection for query planning.
  9. B4-003 You're building a Foundry IQ knowledge base.
  10. B6-003 You design an Azure AI Search index for long PDF manuals by using integrated…
  11. B8-002 A parts catalog index in Azure AI Search contains text fields and embeddings.
  12. B2-001 A travel agent built in Foundry Agent Service must (1) remember each traveler's seat and…
  13. B4-004 A finance agent uses Foundry Agent Service memory (preview).
  14. B6-004 An agent in Foundry Agent Service returns a 'tool not supported' error for code…
  15. B8-003 A travel agent built with Foundry Agent Service memory (preview) must use each traveler's…

1.2 Set up AI solutions in Foundry

The study guide lists these skills:

  • Design Azure infrastructure for AI apps and agent-based solutions
  • Choose appropriate deployment options
  • Configure model and agent deployments
  • Integrate Foundry projects with continuous integration and continuous deployment (CI/CD) pipelines
  1. B3-001 A bank builds agents in Foundry Agent Service and must keep all agent data in its own…
  2. B4-005 Your Foundry resource has two projects and connections to an Azure Storage account and an…
  3. B6-005 A company is designing a Foundry-based solution that must keep working if one Azure…
  4. B8-004 Three teams will build and evaluate their own agents.
  5. B1-002 A European insurer must keep model inferencing within the EU but wants pay-per-token…
  6. B1-003 A trading platform runs a mission-critical, high-volume workload and needs guaranteed…
  7. B4-006 A team has fine-tuned five candidate models and wants a low-cost way to run evaluations…
  8. B6-006 A team wants to deploy a Qwen model from the Hugging Face collection in the Foundry model…
  9. B3-002 A production app uses a Standard deployment of an Azure OpenAI model.
  10. B4-007 A gpt-4.1 Global Provisioned deployment serves two workloads.
  11. B6-007 A developer builds a hosted agent's container image on an ARM-based Apple Silicon Mac…
  12. B2-005 Each pull request that changes a Foundry agent must run an offline evaluation in GitHub…
  13. B4-008 An Azure Pipelines run must evaluate version 3 of a Foundry agent against version 2 by…
  14. B6-008 A pipeline deploys a hosted agent with the Azure Developer CLI (azd) on every merge.

1.3 Manage, monitor, and secure AI systems

The study guide lists these skills:

  • Manage quotas, scaling, rate limits, and cost footprints for model and agent workloads
  • Monitor model performance, drift, safety events, and grounding quality
  • Monitor data ingestion quality, search index health, and relevance performance
  • Configure security, including managed identity, private networking, keyless credentials, and role policies
  1. B1-004 Your subscription has 240,000 TPM of quota for a model in East US.
  2. B1-005 An app receives HTTP 429 responses from an Azure OpenAI deployment, but billed token…
  3. B3-005 Every night you must summarize about two million product reviews with a GPT model.
  4. B4-009 Three teams use shared model deployments through separate Foundry projects.
  5. B8-005 An app sends the same long system prompt with every Azure OpenAI request to cut cost…
  6. B8-006 A team plans a steady, long-running production workload on a provisioned (PTU) deployment…
  7. B1-014 Users report that a chat app built on an Azure OpenAI deployment feels slow to start…
  8. B3-006 You want evaluators to score a sample of a Foundry agent's production responses…
  9. B4-010 A security operations team wants real-time security alerts when users attempt jailbreaks…
  10. B6-009 An operations team watches a production agent on the Monitor tab (Agent Monitoring…
  11. B1-013 You need to query Azure AI Search operation logs (for example, slow queries and indexing…
  12. B3-004 An Azure AI Search indexer shows the status Success after its nightly run, but agents…
  13. B4-011 A RAG app's answers are getting worse, and you suspect the search step.
  14. B6-010 Overall query volume on an Azure AI Search service is low, but one complex query that…
  15. B1-006 A Python web app hosted on Azure App Service must call an Azure OpenAI deployment without…
  16. B1-007 A backend service principal must only call an existing agent in a Foundry project (for…
  17. B1-008 Security policy requires that a Foundry resource is unreachable from the public internet…
  18. B2-003 A prompt agent in Foundry Agent Service calls a Foundry IQ knowledge base through the MCP…
  19. B3-003 Security policy says every Foundry and Foundry Tools resource in a subscription…
  20. B8-007 Security policy for a Foundry environment requires (1) that API key-based connection…
  21. B8-008 You deploy Foundry Agent Service with the Standard Setup with private networking, using…

1.4 Implement responsible AI across generative AI and agentic systems

The study guide lists these skills:

  • Configure safety filters, guardrails, risk detection, and content moderation
  • Apply responsible AI instrumentation, including evaluators, safety evaluations, and explanation tooling
  • Implement auditing through trace logging, provenance metadata, and approval workflows
  • Govern agent behavior with oversight modes, constraints, and tool-access controls
  1. B1-009 You are customizing a content filter for a model deployment in Foundry.
  2. B1-010 An agent summarizes inbound customer emails.
  3. B2-006 An agent uses the Azure AI Search tool.
  4. B2-008 A chat app grounds a model on web pages and user-uploaded files through the Chat…
  5. B8-009 A custom blocklist with competitor names, using exact-match and regex terms, is applied…
  6. B8-010 An internal creative-writing tool streams answers from an Azure OpenAI deployment, and…
  7. B2-007 Before releasing a generative AI app, the safety team wants automated adversarial probing…
  8. B4-012 Before release, you run an evaluation with an agent target for a banking agent.
  9. B6-011 A team needs two custom evaluators (preview) in Foundry.
  10. B8-011 Before release, a safety team evaluates a procurement agent against a user-verified…
  11. B1-012 You want to view trace timelines and spans for an application built on a Foundry project.
  12. B3-008 Your app generates marketing images with a supported Foundry image model.
  13. B4-013 A Foundry admin turned on the 'Powered by Microsoft Purview' toggle for the subscription…
  14. B8-012 Compliance needs a record of administrative operations on a Foundry resource, such as…
  15. B8-013 An agent uses a third-party MCP server with require_approval set to always for its write…
  16. B1-011 An agent connects to a remote MCP server that exposes 25 tools, several of which write…
  17. B3-007 A company has dozens of model deployments across many resource groups in one subscription.
  18. B4-014 A model deployment's guardrail scans user input and output for Violence.
  19. B6-012 An agent reads data from a third-party MCP server and can issue refunds through a…
Practise all 5 skill areas in one quiz, with instant feedback after every answer. Start a quiz โ†’
Thanks for your feedback!