The Salesforce Certified Agentforce Specialist (AI-201) (Agentforce-Specialist)

The correct answer is C because Agent-to-Agent protocol is designed for interoperability between agents across different platforms, vendors, or systems. In this scenario, Agentforce must collaborate with a third-party warehouse logistics agent to request shipping reroutes. That is cross-agent collaboration, not just tool access or data retrieval. Model Context Protocol is more appropriate when an agent needs standardized access to tools, resources, or external context. Advanced Data Retrieval is not the relevant open standard for autonomous cross-platform agent collaboration. A2A provides the pattern for agents to discover, communicate, coordinate tasks, and delegate work securely across system boundaries. Salesforce’s Agentforce interoperability guidance explicitly separates MCP-style tool/context access from A2A-style agent collaboration.

UC’s sales reps need an AI action to draft personalized emails based on past successful communications, reducing manual review time. Let’s evaluate the standard Agent actions.

Option A: Agent Action: Summarize Record " Summarize Record " generates a summary of a record (e.g., Opportunity, Contact), useful for overviews but not for drafting emails or leveraging past communications. This doesn’t meet the requirement, making it incorrect.

Option B: Agent Action: Find Similar Opportunities " Find Similar Opportunities " identifies past deals to inform strategy, not to draft emails. It provides data, not text generation, making it incorrect.

Option C: Agent Action: Draft or Revise Sales EmailThe " Draft or Revise Sales Email " action in Agentforce for Sales (sometimes styled as " Draft Sales Email " ) uses the Atlas Reasoning Engine to generate personalized email content. It can analyze past successful communications (e.g., via Opportunity or Contact history) to tailor emails for renewals or deals, saving reps time. This directly addresses UC’s need, making it the correct answer.

Why Option C is Correct:

" Draft or Revise Sales Email " is a standard action designed for personalized email generation based on historical data, aligning with UC’s productivity goal per Salesforce documentation.

Context of the Requirement:Universal Containers wants to pull in real-time order status data from an external ERP system into an LLM prompt.

Data Grounding in LLM Prompts:Data grounding ensures the Large Language Model has access to the most current and relevant information. In Salesforce, one recommended approach is to use External Objects (via Salesforce Connect) when data resides outside of Salesforce.

Why External Object Record Merge Fields:

External Objects appear much like standard or custom objects but map to tables in external systems.

You can reference fields from these External Objects in merge fields, allowing real-time data retrieval from the external ERP system without storing that data natively in Salesforce.

This is a simpler “point-and-reference” approach compared to coding custom Apex or configuring external services for direct prompt embedding.

Why Not External Services Merge Fields or Apex Merge Fields:

External Services Merge Fields typically leverage flows or external service definitions. While feasible, it is more about orchestrating or invoking external services for automation (e.g., Flow). It’s not the standard approach for seamlessly referencing external record data in prompt merges.

Apex Merge Fields would imply custom Apex code controlling the prompt insertion. While possible, it’s less “clicks not code” friendly and is not the default method for referencing typical record data.

References and Study Resources:

Salesforce Help & Training → Salesforce Connect and External Objects

Salesforce Trailhead → “Integrate External Data with Salesforce Connect”

Salesforce Agentforce Specialist Study Resources (documentation regarding how to ground LLM prompts using External Objects)

When the " Enrich event logs with conversation data " setting is enabled in Agent, it allows An Agentforce or admin to view session data, including both the user input and copilot responses from interactions over the past 7 days. This data is crucial for monitoring how the copilot is being used, analyzing its performance, and improving future interactions based on past inputs.

This setting enriches the event logs with detailed conversational data for better insights into the interaction history, helping Agentforce Specialists track AI behavior and user engagement.

Option A, viewing the user click path, focuses on navigation but is not part of the conversation data enrichment functionality.

Option C, generating detailed reports over any time period, is incorrect because this specific feature is limited to data for the past 7 days.

Salesforce Agentforce Specialist References:

You can refer to this documentation for further insights: https://help.salesforce.com/s/articleView?id=sf.einstein_copilot_event_logging.htm

Universal Containers (UC) is using Apex classes within an Agent Action for their Agentforce Agent. Deploying Apex in Salesforce has specific requirements, especially when tied to Agentforce functionality. Let’s evaluate the options.

Option A: The Apex classes must have at least 75% code coverage from unit tests, and all dependencies must be in the deployment package.Salesforce enforces a strict requirement that all Apex classes must achieve at least 75% code coverage from unit tests for deployment to production, regardless of their use case (e.g., Agentforce, triggers, or web services). Additionally, when Apex is invoked by an Agent Action (e.g., via a Flow or direct invocation), all dependencies (e.g., referenced classes, objects) must be included in the deployment package to ensure functionality. This is a standard deployment consideration in Salesforce and applies to Agentforce, making this the correct answer.

Option B: Apex classes invoked by an Agent Action may be deployed with less than 75% test coverage as long as the agent is not activated in production.Salesforce’s 75% code coverage requirement is mandatory for production deployment, regardless of whether the agent is activated. There’s no exemption based on activation status—coverage is enforced at the deployment stage. This option is incorrect and contradicts Salesforce’s Apex deployment rules.

Option C: The Apex classes may bypass the 75% code coverage requirement as long as they are only used by the agent.No such bypass exists in Salesforce. The 75% code coverage rule applies universally to all Apex in production, including classes used by Agentforce. Agent-specific usage doesn’t waive this requirement, making this incorrect.

Why Option A is Correct:

The 75% code coverage requirement and inclusion of dependencies are fundamental Salesforce deployment rules, applicable to Apex in Agent Actions. This ensures reliability and functionality in production, as per official documentation.

According to the AgentForce Security and Data Access Configuration Guide, the best practice for ensuring an agent (such as an SDR Agent) can access specific records while maintaining security is to use criteria-based sharing rules. The documentation states: “When an AI Agent needs access to a subset of records (for example, regional leads), create a sharing rule granting access to that agent’s user context based on defined criteria such as region or ownership.”

Option A (assigning the highest-level role) provides excessive access beyond the intended scope, violating the principle of least privilege. Option B (View All permission) gives global object access, which is not secure. Therefore, Option C ensures that the SDR Agent has controlled, region-specific access to lead records.

References (AgentForce Documents / Study Guide):

AgentForce Security and Access Guide: “Using Sharing Rules for AI Agent Access Control”

AgentForce Implementation Handbook: “Regional Access Configuration for SDR Agents”

Salesforce Data Security Study Guide

Comprehensive and Detailed Explanation From Exact Extract:

The best practices guide for AgentForce and RAG emphasises that when using unstructured data and search indexes for grounded responses, you must consider privacy, security and data sensitivity. It mentions that search indexes should be curated, fields selected, and vectorised only where appropriate. Masking sensitive data and limiting index to nonPII or aggregated forms is aligned to compliance and governance. Relying purely on prompt logic (option B) is unsafe; encrypting embeddings but still indexing raw PII (option C) still poses risk. Hence the correct and safe practice is option A.

According to the AgentForce Prompt Template Versioning Guide, when a prompt template version is marked as immutable, it means that no edits or modifications can be made to that version after it has been activated. This ensures that the logic, wording, and grounding parameters tied to that version remain locked and consistent for auditing, reproducibility, and compliance purposes.

If further changes are required, the system automatically creates a new draft version of the template. The old version remains immutable and preserved for traceability.

Option B is incorrect because multiple versions can exist, and older versions can remain active under specific testing or rollback scenarios. Option C is partially true but incomplete—the immutability refers to the frozen nature of an active version, not just version creation.

Thus, the correct explanation is Option A – Once a prompt template version is activated, it becomes immutable and cannot be changed.

The correct answer is B because sensitive account lookup must be gated deterministically. A custom variable can store verification status, and an available when filter can make the lookup action invisible until that status is true. This prevents the LLM from even seeing or selecting the protected action before verification succeeds. Option A misuses Prompt Defense; prompt defense helps protect against unsafe prompt behavior, but it does not replace action-level authorization. Option C is unreliable because natural language instructions are still interpreted by the model and do not enforce execution control. Salesforce release guidance states that filters can be created for topics and actions so the agent can use them only when conditions are met. Variables are also used in filters and action control.