StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · CAF Well Architected and secure adoption

Practice question 54 of 498 · hard

An enterprise is preparing an AI rollout involving internal documents and third-party retrieved content. Which THREE checks should be included? Select THREE.

Select all that apply. Every correct option and no extras are required for credit in the app.

  1. A.Evaluate model provenance and the provider against organizational requirements
  2. B.Test prompt-injection defenses against user input and external content
  3. C.Validate that retrieval enforces approved data-access boundaries
  4. D.Use a successful deployment as the sole evidence of responsible AI
  5. E.Assume a pilot model requires no review after adding production write tools
Show the answer and explanation

✓ Correct answers

  • Evaluate model provenance and the provider against organizational requirements
  • Test prompt-injection defenses against user input and external content
  • Validate that retrieval enforces approved data-access boundaries

Validate that retrieval enforces approved data-access boundaries: Retrieval must respect authorized scope. Test prompt-injection defenses against user input and external content: Both can carry adversarial instructions. Evaluate model provenance and the provider against organizational requirements: Model approval should account for provider and intended use. Assume a pilot model requires no review after adding production write tools: New autonomy changes risk and needs reassessment. Use a successful deployment as the sole evidence of responsible AI: Resource creation does not validate safety, privacy, fairness, or accountability.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.