Authenticated governed access → Select service-principal authentication; Required curated vector index → Enter the Azure AI Search index name; Correct Azure AI Search service instance → Provide the Azure AI Search endpoint URL.

Comprehensive and Detailed Explanation From Microsoft AB-620 Study Guide: An Azure AI Search connection needs three distinct pieces of configuration. The endpoint identifies the search-service instance that hosts Fabrikam ' s indexed documents. The index name then selects the specific vector index containing the curated policies and procedures. Authentication determines how Copilot Studio is authorized to query that service. Because the scenario requires governed application access rather than a maker ' s personal identity, the service-principal option is the appropriate selection from the choices provided. Enabling citations is useful after retrieval is configured, but it does not establish the service connection or select an index. Microsoft recommends creating Azure AI Search through the supported data-source connection experience rather than manually assembling an unsupported endpoint/key combination. Administrators should grant the service principal only the permissions needed for query operations, protect its credentials, and maintain separate configuration per environment. Testing should confirm that the intended index—not another index in the same service—is queried, that unauthorized content is excluded, and that policy responses cite material that actually supports the generated guidance. Study Guide alignment: Integrate and extend agents in Copilot Studio > Connect to enterprise knowledge sources > Connect to Azure AI Search.

===============