GH-600 Exam Dumps : Developing in Agentic AI Systems

The mcp-servers property connects a custom agent to the Model Context Protocol servers required for its planned work. MCP configuration makes defined external tools and services available to the agent in a controlled, declarative manner.

Adding a broad natural-language instruction such as “Use all available tools” does not configure a server connection, authenticate a tool, or define which external capabilities are available. It is also poor least-privilege design because it encourages unrestricted tool use without establishing a technical permission boundary.

Setting tools: [] removes all configured tools and would prevent the agent from using required capabilities. Deleting the tools line could cause the agent to inherit or expose a broader default tool set than intended. Repository-wide instructions can guide behavior, but they do not replace the agent-specific configuration needed to associate MCP servers with that agent.

A well-designed configuration identifies only the MCP servers necessary for the role, supplies secrets through approved environment mechanisms, and limits the resulting tools to the agent’s defined task.

Study-guide topics: MCP integration, agent tool configuration, and least-privilege environment access.

===============

The API key should be stored as a secret in the Copilot environment and referenced by name from the MCP configuration. This keeps the secret value out of repository files, agent prompts, pull requests, and ordinary workflow output while allowing the MCP server to receive the required credential at runtime.

A plaintext key in a configuration file is unacceptable because repository history, forks, logs, and code review systems can expose it. A Codespaces user secret is scoped to a user development environment and does not provide the intended runtime secret for the Copilot agent environment. A GitHub Actions secret is useful for workflow expressions, but the scenario requires the key to be available to the MCP server configuration itself.

The prefixed environment-secret approach creates a clear boundary: the configuration references an identifier, while the secret value is resolved only in the authorized execution environment. This supports rotation without changing tracked configuration content.

Study-guide topics: MCP authentication, secrets management, secure environment configuration, and credential isolation.

Target

Value

Top-level property

concurrency

Concurrency-group property

group

Cancellation property

cancel-in-progress

Result:

concurrency:

group: production

cancel-in-progress: true

The concurrency block defines a shared execution group. Assigning group: production places all production deployment runs into the same group, preventing simultaneous deployments to that target.

Setting cancel-in-progress: true changes the default behavior by cancelling an active deployment when a newer workflow run enters the group. This ensures that only the latest production deployment continues rather than allowing an outdated deployment to finish after a newer version has been requested.

The concurrency block is normally placed at the workflow level when the policy applies to the full deployment workflow. It can also be scoped to a job when only a specific deployment job needs coordination. The environment name identifies the production target, but environment configuration alone does not impose the required single-active-run and cancellation behavior.

A production concurrency group should be reserved for operations that genuinely target the same deployment resource. Reusing it for unrelated jobs would unintentionally serialize unrelated work.

Study-guide topics: deployment coordination, concurrency groups, cancellation policy, and safe production execution. Reference: GitHub Actions—Control concurrency .