UC wants to restrict the " Answer Questions with Knowledge " action to a subset of Knowledge articles. Let’s evaluate the options for scoping agent access.

Option A: Define scope instructions to the agent specifying a list of allowed article titles or IDs.Agent instructions in Agent Builder guide behavior but cannot enforce granular data access restrictions like a specific list of article titles or IDs. This approach is impractical and bypasses Salesforce’s security model, making it incorrect.

Option B: Update the Data Library Retriever to filter on a custom field on the Knowledge article.While Data Library Retrievers in Data Cloud can filter data, this requires custom development (e.g., modifying indexing logic) and assumes articles are ingested with a custom field for filtering. This is less straightforward than native Knowledge features and not a standard option, making it incorrect.

Option C: Assign Data Categories to Knowledge articles, and define Data Category filters in the Agentforce Data Library.Salesforce Knowledge uses Data Categories to organize articles (e.g., by topic or type). In Agentforce, when configuring a Data Library with Knowledge, you can apply Data Category filters to limit which articles the agent accesses. For the " Answer Questions with Knowledge " action, this ensures the agent only retrieves articles within the specified categories, aligning with UC’s goal. This is a native, documented solution, making it the correct answer.

Why Option C is Correct:

Using Data Categories and filters in the Data Library is the recommended, scalable way to limit Knowledge article access for agent actions, as per Salesforce documentation.

Service Replies: This generative AI feature automates and assists in generating accurate, contextual, and efficient replies for customer service agents. It uses past interactions, case data, and the context of the conversation to provide draft responses, thereby enhancing productivity and reducing response times.

Case Summaries: Summarizes case information but does not assist directly in replying to customer chats.

Case Escalation: Refers to moving cases to higher-level support teams but does not address the need to improve chat response productivity.

Thus, Service Replies is the best feature for this requirement as it directly aligns with improving agent efficiency in replying to chats.

The correct answer is C because external API authentication should not depend on the current user’s UI session ID. Agent execution contexts can differ from interactive UI contexts, so session-based authentication is brittle and can fail silently or violate security expectations. A Named Credential centralizes the endpoint URL and authentication parameters, allowing Salesforce to manage secure callout authentication consistently. Option A does not solve the authentication architecture problem; profile access affects Apex execution permissions, not external API credential management. Option B is also wrong because an Employee Agent is not fixed by assigning a Service Agent permission set group, and permissions alone do not authenticate the external system. Salesforce Apex callout documentation states that a named credential specifies the callout endpoint and required authentication parameters in one definition.