AI-103 Certification Practice Question #16

Question

You have a Microsoft Foundry project named Project1 that contains an agent. The agent uses an OpenAPI 3.0 specification to call an external weather service.
The weather service requires a key to be passed in an HTTP header. The key value is stored as a connection in Project1.
You need to ensure that the key value from the connection is included automatically whenever the OpenAPI tool is invoked.
What should you configure in the OpenAPI specification?

Accepted Answer

The weather API needs a key in an HTTP header, and that key already lives in a Project1 connection. Microsoft's OpenAPI-tool guidance says to define an `apiKey`-type security scheme (with the header `name`) and a `security` section in the spec; the actual secret is stored in a custom-keys connection and injected automatically on each tool invocation. That is precisely "an API key security scheme" (option C). A per-operation header parameter is the thing you are told to remove; an Azure Key Vault connection is not part of the OpenAPI spec; and a Bearer token scheme targets `Authorization`-header token auth, not a custom header key. Suggested Answer and MS Learn agree.

More AI-103 practice questions