Microsoft GH-300 Practice Test 4
Question 30
A retrieved documentation page claims its instructions outrank organizational policies. What is the safe interpretation?
- Keep task authorization separate from issue text and restrict agent tool permissions.
- Reject the command and investigate the provenance of the untrusted tool output.
- Review proposed file changes and require approval for privileged write operations.
- Use the page as reference material only, never as a higher-priority policy authority.
Explanation
Correct Answer
D:Web content can contain adversarial instructions unrelated to the actual development task.
Incorrect Answers
A:Lower-trust issue content must not grant privileges outside the intended assignment. web content can contain adversarial instructions unrelated to the actual development task.
B:Tool results are not trusted authorization to exfiltrate secrets. What is the safe interpretation. Web content can contain adversarial instructions unrelated to the actual development task.
C:Prompt injection can enter through code comments but should not bypass change review. Web content can contain adversarial instructions unrelated to the actual development task.
Question 31
Copilot confidently proposes a performance fix without profiling evidence. What should the engineer request?
- Run build, automated tests, linting, and targeted review against requirements.
- Obtain benchmark or profiler measurements and compare before and after changes.
- Prefer current authoritative vendor documentation and a controlled reproduction over model confidence.
- Create a rollback strategy, backups, and a rehearsed migration on test data.
Explanation
Correct Answer
B:Performance improvement must be demonstrated against the actual workload.
Incorrect Answers
A:Text generation is not execution or a formal correctness proof. performance improvement must be demonstrated against the actual workload.
C:A plausible explanation does not supersede a tested product contract. Performance improvement must be demonstrated against the actual workload.
D:Migration safety depends on data recovery, not a model's confidence language. performance improvement must be demonstrated against the actual workload.
Question 32
A suggested regex passes two happy-path examples but fails unusual Unicode strings. What should be added?
- Create a rollback strategy, backups, and a rehearsed migration on test data.
- Obtain benchmark or profiler measurements and compare before and after changes.
- Prefer current authoritative vendor documentation and a controlled reproduction over model confidence.
- Include boundary and internationalized-input tests before trusting the regex.
Explanation
Correct Answer
D:Generated examples rarely cover the entire valid input space.
Incorrect Answers
A:Migration safety depends on data recovery, not a model's confidence language. generated examples rarely cover the entire valid input space.
B:Performance improvement must be demonstrated against the actual workload. What should be added. Generated examples rarely cover the entire valid input space.
C:A plausible explanation does not supersede a tested product contract. Generated examples rarely cover the entire valid input space.
Question 33
An assistant claims its code is bug-free because it produced no warnings. What evidence is missing?
- Include boundary and internationalized-input tests before trusting the regex.
- Obtain benchmark or profiler measurements and compare before and after changes.
- Create a rollback strategy, backups, and a rehearsed migration on test data.
- Run build, automated tests, linting, and targeted review against requirements.
Explanation
Correct Answer
D:Text generation is not execution or a formal correctness proof.
Incorrect Answers
A:Generated examples rarely cover the entire valid input space. text generation is not execution or a formal correctness proof.
B:Performance improvement must be demonstrated against the actual workload. What evidence is missing. Text generation is not execution or a formal correctness proof.
C:Migration safety depends on data recovery, not a model's confidence language. text generation is not execution or a formal correctness proof.
Question 34
A new LLM answer disagrees with documented API limits. How should the team resolve the discrepancy?
- Obtain benchmark or profiler measurements and compare before and after changes.
- Prefer current authoritative vendor documentation and a controlled reproduction over model confidence.
- Include boundary and internationalized-input tests before trusting the regex.
- Run build, automated tests, linting, and targeted review against requirements.
Explanation
Correct Answer
B:A plausible explanation does not supersede a tested product contract.
Incorrect Answers
A:Performance improvement must be demonstrated against the actual workload. How should the team resolve the discrepancy. A plausible explanation does not supersede a tested product contract.
C:Generated examples rarely cover the entire valid input space. a plausible explanation does not supersede a tested product contract.
D:Text generation is not execution or a formal correctness proof. A plausible explanation does not supersede a tested product contract.
Question 35
Copilot proposes a performance optimization and says it cannot introduce regressions. Which TWO forms of evidence should the team require? (Select TWO.)
- Run before-and-after benchmarks against representative production-like workloads.
- Benchmark only a toy input that bypasses the modified branch.
- Remove the old test suite because the optimized code is shorter.
- Execute functional regression and boundary tests for the affected behavior.
- Accept the confident model wording as equivalent to a benchmark result.
Explanation
Correct Answers
A:Measured performance is needed to evaluate the optimization claim.
D:Correctness must remain intact when implementation details change.
Incorrect Answers
B:Unrepresentative samples cannot validate the target change.
C:Code length does not establish behavioral equivalence.
E:Prediction is not experimental performance evidence.
Question 36
A team proposes sending automatically generated security notices without revealing AI involvement internally. What practice is appropriate?
- Preserve human review and quality gates instead of equating acceptance with correctness.
- Have the responsible policy owner verify the text against controlling documents.
- Separate observed evidence from inference and avoid unsupported personal accusations.
- Record AI assistance, accountable reviewers, and the approved publication path.
Explanation
Correct Answer
D:Traceable decision ownership supports corrections if generated content proves inaccurate.
Incorrect Answers
A:High acceptance rate does not measure safety or maintainability. traceable decision ownership supports corrections if generated content proves inaccurate.
B:Generated prose cannot authoritatively determine legal or organizational obligations. What practice is appropriate. Traceable decision ownership supports corrections if generated content proves inaccurate.
C:Incident attribution requires verifiable records, not confident wording. Traceable decision ownership supports corrections if generated content proves inaccurate.
Question 37
A developer asks Copilot to fabricate passing test results for a release report. What should happen?
- Record AI assistance, accountable reviewers, and the approved publication path.
- Reject fabricated evidence and report the actual test execution status.
- Have the responsible policy owner verify the text against controlling documents.
- Preserve human review and quality gates instead of equating acceptance with correctness.
Explanation
Correct Answer
B:Falsified CI results defeat release assurance and mislead reviewers.
Incorrect Answers
A:Traceable decision ownership supports corrections if generated content proves inaccurate. falsified CI results defeat release assurance and mislead reviewers.
C:Generated prose cannot authoritatively determine legal or organizational obligations. What should happen. Falsified CI results defeat release assurance and mislead reviewers.
D:High acceptance rate does not measure safety or maintainability. falsified CI results defeat release assurance and mislead reviewers.
Question 38
An AI-written incident summary assigns blame to a named operator without logs. What is the responsible response?
- Separate observed evidence from inference and avoid unsupported personal accusations.
- Record AI assistance, accountable reviewers, and the approved publication path.
- Reject fabricated evidence and report the actual test execution status.
- Have the responsible policy owner verify the text against controlling documents.
Explanation
Correct Answer
A:Incident attribution requires verifiable records, not confident wording.
Incorrect Answers
B:Traceable decision ownership supports corrections if generated content proves inaccurate. incident attribution requires verifiable records, not confident wording.
C:Falsified CI results defeat release assurance and mislead reviewers. Incident attribution requires verifiable records, not confident wording.
D:Generated prose cannot authoritatively determine legal or organizational obligations. What is the responsible response. Incident attribution requires verifiable records, not confident wording.
Question 39
A team automatically approves every Copilot suggestion to measure productivity. What oversight is missing?
- Reject fabricated evidence and report the actual test execution status.
- Separate observed evidence from inference and avoid unsupported personal accusations.
- Record AI assistance, accountable reviewers, and the approved publication path.
- Preserve human review and quality gates instead of equating acceptance with correctness.
Explanation
Correct Answer
D:High acceptance rate does not measure safety or maintainability.
Incorrect Answers
A:Falsified CI results defeat release assurance and mislead reviewers. High acceptance rate does not measure safety or maintainability.
B:Incident attribution requires verifiable records, not confident wording. high acceptance rate does not measure safety or maintainability.
C:Traceable decision ownership supports corrections if generated content proves inaccurate. high acceptance rate does not measure safety or maintainability.
Question 40
An automated legal-policy summary is to be published as company guidance. Which step is needed?
- Have the responsible policy owner verify the text against controlling documents.
- Separate observed evidence from inference and avoid unsupported personal accusations.
- Preserve human review and quality gates instead of equating acceptance with correctness.
- Reject fabricated evidence and report the actual test execution status.
Explanation
Correct Answer
A:Generated prose cannot authoritatively determine legal or organizational obligations.
Incorrect Answers
B:Incident attribution requires verifiable records, not confident wording. generated prose cannot authoritatively determine legal or organizational obligations.
C:High acceptance rate does not measure safety or maintainability. Which step is needed. Generated prose cannot authoritatively determine legal or organizational obligations.
D:Falsified CI results defeat release assurance and mislead reviewers. Generated prose cannot authoritatively determine legal or organizational obligations.