CertPrepNow
SalesforceAI-201Updated 2026-06-13

AI-201 Study Guide

Everything you need to pass the Salesforce Certified Agentforce Specialist exam. Structured study plans, key services, common traps, and practice questions.

You Can Pass This Exam For Free

The AI-201 exam is passable with free resources alone if you study consistently for 4-8 weeks:

  • Salesforce Trailhead Agentforce Specialist Certification Prep module (free)
  • Salesforce Trailhead Agentblazer learning path (free)
  • Salesforce Developer Edition org for hands-on practice (free)
  • Salesforce Help documentation on Agentforce, Prompt Builder, and Data Cloud (free)
  • Salesforce Developers Blog for MCP and Trust Layer deep dives (free)
  • 500+ free practice questions on this site

Hands-on experience is critical for this exam. Trailhead modules and a free Developer Edition org cover the majority of exam content. The exam replaced the earlier AI Specialist certification in March 2025, so be sure you are studying Agentforce-specific material, not the older AI Specialist content.

Choose Your Study Path

Limited Salesforce or AI experience. You need to build foundational knowledge in both the Salesforce platform and AI agent concepts before tackling Agentforce-specific topics.

Week 1Learn Salesforce platform basics: objects, fields, permission sets, profiles, Flows, and Apex triggers. Complete the Salesforce Admin Beginner trail on Trailhead
Week 2Study AI fundamentals: LLMs, prompt engineering, RAG, grounding, hallucinations, and the Einstein Trust Layer. Complete the Agentblazer learning path
Week 3Deep dive into Domain 1 (35% of exam): Atlas reasoning engine, agent types (Service, Sales SDR, Sales Coach, Employee), topics, instructions, actions, and Agent User security
Week 4Continue Domain 1: standard vs custom topics and actions, action types (Apex, Flow, Prompt Template, MuleSoft API), channel connections (Slack, Messaging, web), and deterministic behavior with filters and variables
Week 5Study Prompt Engineering (20%): Prompt Builder, template types (Sales Email, Field Generation, Flex), grounding techniques (merge fields, Flow merge fields, RAG), prompt template activation, and best practices for reducing hallucinations
Week 6Study Data Cloud for Agentforce (20%): Data Library types, unstructured data processing (chunking, indexing), search types (keyword, vector, hybrid), retrievers (individual, ensemble), and Data 360 concepts
Week 7Study Development Lifecycle (20%): Agentforce Testing Center, sandbox vs production deployment, monitoring adoption with Agentforce Analytics, Utterance Analysis, and Digital Wallet usage metering
Week 8Study Multi-Agent Interoperability (5%): Model Context Protocol (MCP), AgentExchange, agent-to-agent collaboration, Agent API, and the Einstein Trust Layer security boundary
Week 9Hands-on practice in a Developer Edition org: build an agent, configure topics and actions, create prompt templates, set up Data Library grounding, and test with the Testing Center
Week 10Practice questions across all domains, review explanations carefully, focus on Domain 1 which is 35% of the exam. Take full mock exams and review weak areas

Exam Overview

Format

60 scored multiple-choice and multiple-select questions plus up to 5 unscored pilot questions (65 total items), 105 minutes. No performance-based questions. Unscored questions are not identified and do not affect your score.

Scoring

Percentage-based scoring. Passing: 73%. No penalty for wrong answers — always guess if unsure.

Domains & Weights

  • AI Agents35%
  • Prompt Engineering20%
  • Data Cloud for Agentforce20%
  • Development Lifecycle20%
  • Multi-Agent Interoperability5%

Registration

$200 USD. Available at Pearson VUE testing centers or online proctored from home. Exam fee is $200 USD. Retakes cost $100 USD.

Topic Priority Table

Not all topics are tested equally. Focus your study time on Tier 1 first, then Tier 2. Tier 3 topics rarely appear — just recognize what they do.

Tier 1: Must KnowYou must understand these concepts deeply, know definitions, and be able to apply them in scenarios. These appear across multiple questions.
Tier 2: Should KnowUnderstand what these are and their key characteristics. May appear in 2-5 questions each.
Tier 3: Recognize OnlyKnow what these are at a high level. Rarely more than 1-2 questions each.
Domain 135% of exam

AI Agents

The heaviest domain at 35% — expect roughly 21 questions on this topic. Covers how agents work, the Atlas reasoning engine, agent types, topics and actions configuration, security through the Agent User concept, channel connections, and deterministic behavior controls. This is the make-or-break domain.

Key Topics

Atlas Reasoning EngineAgent BuilderTopics/Instructions/ActionsAgent UserPermission SetsChannel ConnectionsService AgentSales SDRSales CoachEmployee Agent

Must-Know Concepts

  • Atlas reasoning engine: how it evaluates utterances, selects topics, plans action sequences, and delivers context-aware responses
  • Agent types: Service Agent (customer-facing), Sales SDR (lead qualification, meeting booking), Sales Coach (personalized coaching with role-playing), Employee Agent (internal role-based collaborator)
  • Topics define what jobs an agent can do. Instructions set decision-making boundaries. Actions are the specific tasks the agent performs
  • Standard vs custom topics and actions: standard come pre-built with agent types; custom are created for unique business requirements
  • Action types: invocable Apex, REST Apex, autolaunched Flows, prompt templates, and MuleSoft APIs — know when each is appropriate
  • Agent User security: a special user type that agents run as, with permission sets controlling data and action access. Differs by agent type
  • Channel connections: Slack, Messaging (SMS, WhatsApp), web chat, email — know which channels are available and how to configure them
  • Deterministic behavior: using filters and variables to constrain agent behavior for predictable responses in specific scenarios
  • Einstein Trust Layer integration: how agents operate within the trust boundary including data masking, toxicity detection, and audit logging

Common Exam Traps

Atlas reasoning engine SELECTS topics based on the user utterance — it does not execute actions directly. It plans the action sequence, then the actions execute
Agent User is NOT the same as the end user. The Agent User is the system user the agent runs as. The end user is the person interacting with the agent
Standard topics and actions vary by agent type. A standard topic for Service Agent is different from a standard topic for Sales SDR
Custom actions built on Apex require 75% test coverage, just like any Apex code in Salesforce. Do not forget this Salesforce platform requirement
Connecting an agent to a channel does not automatically grant permissions. Agent User permission sets must be configured separately for each channel context
Quick Check: AI Agents

Question 1 of 3

A company wants to automate lead qualification and meeting scheduling for their sales team. Which Agentforce agent type is the best fit?

Domain 220% of exam

Prompt Engineering

Covers Prompt Builder, prompt template types, grounding techniques, best practices for effective prompts, and template lifecycle management. You must know when to use Prompt Builder, how to select the right template type, and how to ground prompts in Salesforce data to reduce hallucinations.

Key Topics

Prompt BuilderSales Email TemplateField Generation TemplateFlex TemplateMerge FieldsFlow Merge FieldsRAG GroundingTemplate Activation

Must-Know Concepts

  • Prompt Builder: the Salesforce tool for creating and managing reusable prompt templates. Know when it is appropriate to use Prompt Builder vs other approaches
  • Template types: Sales Email (email draft generation), Field Generation (auto-fill record fields), Flex (general-purpose flexible templates) — know when each applies
  • Grounding techniques: merge fields (direct record data), Flow merge fields (processed/calculated data), RAG from Data Cloud (semantic search across knowledge bases)
  • Best practices: set output format and tone, include guardrails in prompts, ground prompts in relevant data, iterate and test prompts, reduce hallucinations through specific context
  • Template activation: the process of making a prompt template available for use. Know the activation workflow and requirements
  • User roles in Prompt Builder: who can create, edit, activate, and use prompt templates based on their Salesforce permissions
  • Prompt template lifecycle: ideation, building, testing, activation, deployment, and observation — know each stage

Common Exam Traps

Field Generation templates are tied to a SPECIFIC OBJECT AND FIELD. They are not general-purpose like Flex templates
Grounding a prompt with a merge field pulls data at RUNTIME, not at template creation time. The data is dynamic based on the record context
Prompt Builder templates can be used as ACTIONS in Agent Builder. A prompt template action is one of the action types an agent can execute
Sales Email templates generate email content specifically. Do not confuse them with Flex templates that can generate any type of text output
Activating a prompt template is a separate step from creating it. An inactive template exists but cannot be used by agents or users
Quick Check: Prompt Engineering

Question 1 of 3

A company wants to use AI to automatically generate a summary field on their Opportunity records based on the opportunity's stage, amount, and recent activities. Which Prompt Builder template type should they use?

Domain 320% of exam

Data Cloud for Agentforce

Covers how Data Cloud (Data 360) provides grounding data to Agentforce agents. You must understand Data Library types, unstructured data processing through chunking and indexing, search index types (keyword, vector, hybrid), retrievers, and how data quality impacts agent response accuracy.

Key Topics

Data Cloud (Data 360)Data LibrarySearch IndexesRetrieversVector EmbeddingsChunkingIndexingKnowledge Base

Must-Know Concepts

  • Data Library: the storage layer managing knowledge sources for agent grounding. Sources include Salesforce Knowledge articles, uploaded files (text, HTML, PDFs), and Data Cloud objects
  • Chunking: breaking unstructured data into semantically appropriate chunks for processing. Chunk size and method affect retrieval quality
  • Indexing: creating vector embeddings (numerical representations) from chunked data. Field selection during indexing directly impacts retrieval quality
  • Search index types: keyword (exact lexical matching), vector (semantic similarity), hybrid (combines both). Know strengths and weaknesses of each. Hybrid and vector indexes can also be enriched with automatically extracted metadata, entities, and question chunks to improve RAG retrieval accuracy
  • Retrievers: components that search and return relevant data. Individual retrievers query one index; ensemble retrievers combine results from multiple indexes
  • Data 360 rebranding: Data Cloud was rebranded to Data 360 in late 2025. The exam may reference either name
  • Unstructured data support: text documents, PDFs, HTML files, multimedia, chat logs, and customer feedback can all be processed
  • Data quality impact: poor data quality, incorrect chunking, or misconfigured indexes directly reduce agent response accuracy and relevance

Common Exam Traps

Vector search understands MEANING but struggles with exact numbers and domain-specific terms. Keyword search handles exact terms well but does not understand context. Hybrid combines both strengths. Enriched indexes add extracted metadata and question chunks on top of vector or hybrid indexes — they are an enhancement, not a separate index type
Ensemble retrievers are NOT always better than individual retrievers. They add complexity and latency. Use them only when data spans multiple sources
Chunking is not automatic — field selection and chunk size must be configured. Poor chunking leads to irrelevant retrieval results
Data Library sources are different from Data Cloud data streams. Data Library is specifically for agent grounding, not general data ingestion
Data Cloud / Data 360 rebranding means the same technology. Do not treat them as different products on the exam
Quick Check: Data Cloud for Agentforce

Question 1 of 3

An organization wants their Agentforce agent to find relevant product documentation when customers ask technical questions. The documentation includes product names, model numbers, and conceptual explanations. Which search type should they configure?

Domain 420% of exam

Development Lifecycle

Covers the end-to-end lifecycle of Agentforce agents from ideation through production monitoring. You must understand sandbox development, the Testing Center for validation, deployment processes, and post-deployment monitoring with Agentforce Analytics and Utterance Analysis.

Key Topics

Agentforce Testing CenterSandbox EnvironmentsDeployment PipelineAgentforce AnalyticsUtterance AnalysisDigital WalletAgentforce Observability

Must-Know Concepts

  • Agent lifecycle stages: ideation, building, testing, deployment, and observation — know what happens at each stage and the tools used
  • Agentforce Testing Center: batch testing of agent configurations, automated test case execution, performance measurement, and validation before production deployment
  • Sandbox development: Data Cloud and Agentforce support sandbox environments for safe development and UAT. Einstein Trust Layer audit trail works in sandboxes
  • Deployment: moving agent configurations from sandbox to production. Understand the deployment process and what artifacts need to be migrated
  • Agentforce Analytics: post-deployment monitoring built on Data Cloud. Provides adoption metrics, accuracy insights, and usage patterns
  • Utterance Analysis: monitoring tool that analyzes agent conversations to identify areas for improvement, new topic opportunities, and response quality issues
  • Digital Wallet: consumption metering for Data Cloud and Agentforce usage. Provides visibility into AI resource consumption across development and production
  • Agentforce Observability: comprehensive monitoring including live health, adoption analytics, consumption tracking, and performance dashboards

Common Exam Traps

Testing Center tests agent CONFIGURATIONS, not just individual prompts. It validates the entire agent behavior including topic selection and action execution
Sandbox and production are SEPARATE environments. Agent configurations must be explicitly deployed — they do not sync automatically
Utterance Analysis is a POST-DEPLOYMENT tool. It analyzes real conversations, not test cases. Do not confuse it with the Testing Center
Digital Wallet tracks CONSUMPTION costs, not agent performance metrics. Performance metrics come from Agentforce Analytics
The lifecycle is iterative: observation feeds back into ideation and building. Utterance Analysis insights should drive agent configuration improvements
Quick Check: Development Lifecycle

Question 1 of 3

After deploying an Agentforce agent to production, the team wants to identify conversations where the agent failed to understand customer intent. Which tool should they use?

Domain 55% of exam

Multi-Agent Interoperability

The smallest domain at 5% — expect roughly 3 questions. Covers Model Context Protocol (MCP) for connecting agents to external tools and systems, agent-to-agent collaboration, AgentExchange marketplace, and the Agent API for programmatic access. Small weight but do not skip it — 3 easy points can make the difference.

Key Topics

Model Context Protocol (MCP)AgentExchangeAgent APIAgent-to-Agent CollaborationMCP ServersClient-Server Architecture

Must-Know Concepts

  • Model Context Protocol (MCP): an open standard originally from Anthropic for connecting AI agents to external tools, systems, and data through a standardized client-server architecture
  • MCP in Salesforce: Agentforce uses MCP to consume external API assets and expose Salesforce data to the broader agent ecosystem. Native MCP client capabilities were added to Agentforce in 2025 with enterprise-grade policy enforcement (security, rate-limiting, and access controls). MCP actions execute within the Einstein Trust Layer boundary
  • AgentExchange: curated marketplace of vetted MCP servers and pre-built agent components. Deploy external connections through Agent Builder with no code required
  • Agent-to-agent collaboration: MCP enables agents from different systems to communicate and collaborate on tasks that span multiple platforms
  • Agent API: programmatic interface for interacting with Agentforce agents from external applications and systems

Common Exam Traps

MCP is an OPEN STANDARD, not a Salesforce-proprietary protocol. It was originally developed by Anthropic and adopted by Salesforce
MCP actions execute WITHIN the Einstein Trust Layer boundary. PII is masked before anything reaches an LLM, even through MCP connections
AgentExchange provides VETTED servers, meaning they are curated for security and reliability. It is not an open marketplace where anyone can publish
Agent API is for EXTERNAL programmatic access. Internal agent-to-agent collaboration within Salesforce uses different mechanisms
Quick Check: Multi-Agent Interoperability

Question 1 of 3

A company wants to connect their Agentforce agent to an external project management tool so the agent can create tasks and update statuses. Which technology enables this integration?

Concepts You Must Not Confuse

These pairs appear on nearly every exam. Learn the difference and you'll avoid the most common traps.

Standard Topics/Actions vs Custom Topics/Actions

Use Standard Topics/Actions when…

Pre-built topics and actions that come with specific agent types (Service, Sales, Employee). Configured for common use cases and ready to use with minimal setup.

Use Custom Topics/Actions when…

User-created topics and actions tailored to specific business requirements. Built using Apex, Flow, Prompt Templates, or MuleSoft APIs for unique use cases not covered by standard options.

Exam trap

Standard topics/actions come pre-configured with agent types. Custom ones require manual creation. The exam tests whether you know which standard topics/actions are available for each agent type and when custom ones are needed.

Keyword Search vs Vector Search

Use Keyword Search when…

Exact lexical matching that finds results based on specific words and terms. Handles numbers, product codes, and domain-specific terminology well but does not understand semantic meaning.

Use Vector Search when…

Semantic similarity search using vector embeddings that understands contextual meaning. Excellent at finding conceptually related content but struggles with exact numbers and specialized terms.

Exam trap

Keyword search is precise but literal. Vector search understands meaning but is fuzzy on specifics. Hybrid search combines both approaches. The exam tests when each is the best choice for a given data retrieval scenario.

Merge Fields vs Flow Merge Fields

Use Merge Fields when…

Direct references to Salesforce record data (e.g., Account Name, Contact Email) inserted into prompt templates. Pulls raw field values directly from records.

Use Flow Merge Fields when…

References to data that has been processed or calculated inside a Flow before being inserted into a prompt template. Enables complex data transformations before grounding.

Exam trap

Merge fields pull data directly from records. Flow merge fields pull data that has been processed by a Flow first. Use merge fields for simple data, Flow merge fields when data needs transformation or aggregation before grounding.

Grounding with Merge Fields vs Grounding with RAG (Data Cloud)

Use Grounding with Merge Fields when…

Pulls specific record field values directly into the prompt context. Best for structured, record-level data where you know exactly which fields the AI needs.

Use Grounding with RAG (Data Cloud) when…

Retrieves relevant chunks of unstructured data from Data Cloud indexes using semantic search. Best for knowledge bases, documents, and large content libraries where the relevant information is not in a single record.

Exam trap

Merge fields are for structured, known data from specific records. RAG grounding is for searching across large unstructured content to find relevant context. The exam tests which grounding approach fits different scenarios.

Individual Retriever vs Ensemble Retriever

Use Individual Retriever when…

Queries a single search index to find relevant data chunks. Simpler to configure and faster to execute. Best when all relevant data is in one source.

Use Ensemble Retriever when…

Combines results from multiple search indexes for broader coverage. Merges and ranks results across sources. Best when relevant data is spread across multiple Data Library sources.

Exam trap

Individual retrievers are simpler and query one index. Ensemble retrievers are more comprehensive and query multiple indexes. The exam may present scenarios where an ensemble retriever is needed because data spans multiple knowledge sources.

Service Agent vs Employee Agent

Use Service Agent when…

External-facing agent that handles customer inquiries across channels (web chat, Messaging, email). Replaces traditional chatbots with AI that can reason about service issues without preprogrammed scenarios.

Use Employee Agent when…

Internal-facing agent that works alongside employees as a role-based collaborator. Accesses the same data and settings each employee uses, providing personalized assistance for internal workflows.

Exam trap

Service Agents are EXTERNAL-facing (customers). Employee Agents are INTERNAL-facing (staff). They have different security models: Service Agents must be restricted to customer-appropriate data, while Employee Agents can access internal data matching the employee's permissions.

Field Generation Template vs Flex Template

Use Field Generation Template when…

Prompt template that auto-fills specific record fields using AI. Tied to a specific object and field, producing structured output that is saved directly to a record.

Use Flex Template when…

General-purpose prompt template for flexible, custom use cases. Not tied to a specific field and can produce varied output formats for diverse business needs.

Exam trap

Field Generation is for auto-populating SPECIFIC FIELDS on records. Flex is for GENERAL-PURPOSE prompts that do not map to a single field. Sales Email is specifically for generating email content. Know which template type matches each use case.

Data Masking (Trust Layer) vs Toxicity Detection (Trust Layer)

Use Data Masking (Trust Layer) when…

Identifies and masks sensitive data (PII) in prompts before they are sent to the LLM. Uses pattern-based detection to find and replace sensitive content, preventing data leakage.

Use Toxicity Detection (Trust Layer) when…

Scans and scores both prompts and LLM outputs for harmful, inappropriate, or offensive content. Prevents the sharing of toxic content by flagging or blocking it.

Exam trap

Data masking protects SENSITIVE DATA from reaching the LLM. Toxicity detection prevents HARMFUL CONTENT from being generated or shared. Both are Trust Layer components but address completely different risks.

Top Mistakes to Avoid

Confusing the Agent User (system user the agent runs as) with the end user (person interacting with the agent) — they have different permission models
Mixing up standard topics/actions (pre-built per agent type) with custom topics/actions (user-created for unique requirements)
Thinking merge fields and Flow merge fields are interchangeable — merge fields pull raw record data while Flow merge fields pull processed/calculated data
Confusing keyword search (exact matching, good with numbers) with vector search (semantic meaning, struggles with exact terms) — know when to use hybrid
Not understanding the difference between individual retrievers (single index) and ensemble retrievers (multiple indexes) and when each is appropriate
Treating the Agentforce Testing Center (pre-deployment validation) and Utterance Analysis (post-deployment conversation analysis) as the same tool
Assuming Data Cloud and Data 360 are different products — Data Cloud was rebranded to Data 360 in late 2025; they are the same technology
Forgetting that Apex-based custom actions require 75% test coverage, the same platform requirement as any Salesforce Apex code
Confusing Field Generation templates (auto-fill specific record fields) with Flex templates (general-purpose, not tied to specific fields)
Thinking MCP is Salesforce-proprietary — it is an open standard originally from Anthropic, adopted by Salesforce for agent interoperability

Exam-Ready Checklist

Can explain all 5 exam domains and their relative weights (35%, 20%, 20%, 20%, 5%)
Know how the Atlas reasoning engine processes utterances: topic selection, action planning, and execution
Can distinguish between all agent types (Service, Sales SDR, Sales Coach, Employee) and select the right one for business scenarios
Understand the Agent User concept and how permission sets control agent data and action access
Can explain all three grounding techniques (merge fields, Flow merge fields, RAG) and when each is appropriate
Know all Prompt Builder template types (Sales Email, Field Generation, Flex) and their specific use cases
Can distinguish between keyword, vector, and hybrid search types with their strengths and weaknesses
Understand individual vs ensemble retrievers and when to use each based on data source distribution
Know the complete agent lifecycle: ideation, building, testing (Testing Center), deployment, and observation (Analytics, Utterance Analysis)
Can explain the Einstein Trust Layer components: data masking, toxicity detection, prompt defense, dynamic grounding, and audit trail
Understand MCP architecture and how Salesforce implements it for multi-agent interoperability through AgentExchange
Know the difference between sandbox development/testing and production deployment, and what artifacts must be migrated
Completed hands-on practice in a Developer Edition org: built an agent, created prompt templates, configured Data Library grounding
Scored 75%+ on at least two full mock exams (73% passing score on the real exam)

Recommended Resources

Free & Official Resources

Paid Courses & Practice Exams

These are recommended if you prefer a structured learning path. They can save time but are not required to pass.

Frequently Asked Questions