Question 100
In a Cisco AI Technical Practitioner study scenario, the team discovers: An HR RAG system copies personnel evaluations into a shared vector index and allows every employee to retrieve semantically similar confidential review passages. Which preventive practice should be standardized to avoid recurrence?
Explanation
Correct Answer
This safeguard addresses retrieval index exposes personal records beyond original acl: Include access-control regression tests and deletion propagation checks in every sensitive-document vector indexing workflow. The prevented failure mechanism is: Indexing sensitive text creates another protected representation of that information; source ACLs do not automatically propagate into vector retrieval permissions. A control for an unrelated service cannot establish the required protection.
Incorrect Answers
A model-generated output can still raise copyright, trademark or licensing issues, and generation alone is not proof that reuse rights are secured. “Include intellectual-property review and source-licensing checks in AI-assisted publishing workflows rather than assuming generated means free to use” would remedy that alternative situation, but it would not correct the present issue: indexing sensitive text creates another protected representation of that information; source ACLs do not automatically propagate into vector retrieval permissions.
“Reassess AI feature risk as user populations, available tools or model capabilities change beyond the originally approved scope” is the supported response when AI governance needs an identified use case, impact tier and risk controls before deployment; a successful integration test does not establish acceptable risk. Here the decisive response is “Include access-control regression tests and deletion propagation checks in every sensitive-document vector indexing workflow”, so that different intervention does not meet the stated requirement.
Synthetic media can mimic recognizable voices, so audio resemblance alone is not proof of origin or authority for a corporate instruction. “Train staff to verify urgent voice or video instructions through established secondary channels and log suspected impersonation attempts” applies to that other condition. The reported evidence is an HR RAG system copies personnel evaluations into a shared vector index and allows every employee to retrieve semantically similar confidential review passages; this alternative would address the wrong dependency.