AI-103 Certification Practice Question #40

Question

You have a Microsoft Foundry project that contains an agent.
You use a GitHub Actions workflow for CI/CD.
You need to configure the workflow to automatically evaluate the agent when a pull request (PR) is created and prevent branches from merging if the evaluation results do NOT meet the defined thresholds.
How should you configure the workflow? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Accepted Answer

For a GitHub Actions workflow to run the Foundry AI-agent evaluation, it must authenticate to the Foundry project. MS Learn's GitHub Action evaluation guide recommends authenticating with Microsoft Entra ID via the **Azure Login action using OpenID Connect (OIDC)** — a secretless federated-credential flow — rather than a personal access token (PAT is for Azure DevOps, not this GitHub-to-Azure path) or a raw user-assigned managed identity. To prevent branches from merging when evaluation thresholds aren't met, the workflow step should **Fail**: a failing required status check is what GitHub branch protection uses to block a PR merge. "Send an alert" only notifies and "Lock the target branch" is a blanket admin action, neither of which gates this specific PR on the evaluation result. Confidence is high but not maximal because the file carries no Suggested Answer or community votes; both selections are inferred from MS Learn and standard CI/CD gating behavior.

More AI-103 practice questions