Question 240
A custom agent must call an internal order-lookup service while keeping API credentials server-side. What evidence should the team examine FIRST before making a decision?
Explanation
Correct Answer
Check runtime needs, authenticated invocation, quotas, network and secret permissions, response contracts and logging. These observations test the stated cause before the team changes a system or policy. Serverless compute can implement tool business logic; it is not a foundation model and does not bypass service-level IAM. The most suitable approach is: Use Cloud Run or Cloud Functions to host appropriately controlled server-side tool endpoints rather than putting secrets or privileged logic in model prompts. Scenario: A custom agent must call an internal order-lookup service while keeping API credentials server-side.
Incorrect Answers
Inspect human agent workflow, approved knowledge sources, interaction recording policy, recommendation quality and escalations. These observations are relevant to Agent Assist support for human contact-center agents, but do not isolate the main question. The decisive evidence is: Check runtime needs, authenticated invocation, quotas, network and secret permissions, response contracts and logging. Scenario: A custom agent must call an internal order-lookup service while keeping API credentials server-side.
Inspect data contracts, cleaning provenance, validation evidence, deployment approvals, model versions and post-launch monitoring. These observations are relevant to ML lifecycle from ingestion to management, but do not isolate the main question. The decisive evidence is: Check runtime needs, authenticated invocation, quotas, network and secret permissions, response contracts and logging. Scenario: A custom agent must call an internal order-lookup service while keeping API credentials server-side.
Inspect supported data stores, connector permissions, indexing health, citations and answer relevance. These observations are relevant to Agent Search prebuilt RAG for enterprise knowledge, but do not isolate the main question. The decisive evidence is: Check runtime needs, authenticated invocation, quotas, network and secret permissions, response contracts and logging. Scenario: A custom agent must call an internal order-lookup service while keeping API credentials server-side.


