mcAfee Secure Website
23

Databricks Certified Generative AI Engineer Associate Bundle

Exam Code: Certified Generative AI Engineer Associate

Exam Name Certified Generative AI Engineer Associate

Certification Provider: Databricks

Corresponding Certification: Databricks Certified Generative AI Engineer Associate

Certified Generative AI Engineer Associate Training Materials $19.99

Reliable & Actual Study Materials for Certified Generative AI Engineer Associate Exam Success

The Latest Certified Generative AI Engineer Associate Exam Questions as Experienced in the Actual Test!

  • 24
    Questions & Answers

    Certified Generative AI Engineer Associate Questions & Answers

    123 Questions & Answers

    Includes questions types found on actual exam such as drag and drop, simulation, type in, and fill in the blank.

  • exam =30
    Study Guide

    Certified Generative AI Engineer Associate Study Guide

    230 PDF Pages

    Study Guide developed by industry experts who have written exams in the past. They are technology-specific IT certification researchers with at least a decade of experience at Fortune 500 companies.

exam =32

Certified Generative AI Engineer Associate Practice Tests

Guarantee

Satisfaction Guaranteed

Pass4sure has a remarkable Databricks Candidate Success record. We're confident of our products and provide no hassle product exchange. That's how confident we are!

99.3% Pass Rate
Total Cost: $154.98
Bundle Price: $134.99

Purchase Individually

  • exam =34
    Questions & Answers

    Questions & Answers

    123 Questions

    $124.99
    exam =35
  • exam =36
    Study Guide

    Study Guide

    230 PDF Pages

    $29.99

Databricks Certified Generative AI Engineer Associate Practice Test 36

Question 350

What information should the engineer inspect before choosing a remedy? A team promotes a new prompt without rerunning citation accuracy or tool-permission regression cases.

  1. Inspect p95 latency, queue depth, rate limits, cost and per-version error traces.
  2. Inspect prompt names, version history, aliases, tests and active referenced URI.
  3. Inspect deployment manifests, tests, aliases, index versions and rollback dependency matrix.
  4. Inspect runtime invocation order, prompt input names, stage outputs and errors.

Explanation

Correct Answer

C:

Correct. Production promotions should test source index, prompt, model packaging and tool behavior independently before release. In the given situation — A team promotes a new prompt without rerunning citation accuracy or tool-permission regression cases. — the targeted diagnose action is: Inspect deployment manifests, tests, aliases, index versions and rollback dependency matrix. It inspects the stage or constraint most likely to explain the observed failure before changing the system.

Incorrect Answers

A:

Not the strongest diagnose choice for this specific question. Inspect p95 latency, queue depth, rate limits, cost and per-version error traces. This action primarily relates to Endpoint scale concurrency and operational rollout: Serving latency and reliability depend on provisioned capacity, request concurrency, quotas and controlled rollout. However, the described case — A team promotes a new prompt without rerunning citation accuracy or tool-permission regression cases. — is testing CI/CD pipelines for retrieval and agent components. It does not directly establish the diagnose outcome or constraint that the question requires; it may still be useful in a different stage or incident.

B:

Not the strongest diagnose choice for this specific question. Inspect prompt names, version history, aliases, tests and active referenced URI. This action primarily relates to MLflow Prompt Registry version aliases and promotion: Prompt Registry tracks immutable prompt versions with mutable aliases for staging and production, enabling change control and rollback. However, the described case — A team promotes a new prompt without rerunning citation accuracy or tool-permission regression cases. — is testing CI/CD pipelines for retrieval and agent components. It does not directly establish the diagnose outcome or constraint that the question requires; it may still be useful in a different stage or incident.

D:

Not the strongest diagnose choice for this specific question. Inspect runtime invocation order, prompt input names, stage outputs and errors. This action primarily relates to Simple prompt-retrieval-generation chain assembly: A minimal chain composes a retriever, prompt, LLM and output parser, preserving required variables and failure states. However, the described case — A team promotes a new prompt without rerunning citation accuracy or tool-permission regression cases. — is testing CI/CD pipelines for retrieval and agent components. It does not directly establish the diagnose outcome or constraint that the question requires; it may still be useful in a different stage or incident.

Question 351

A deployment approval is requested for this case: A product assistant must answer only for the model and country selected in the user form. Which acceptance test should reviewers require?

  1. Test mismatched user and account values and confirm zero unauthorized retrieval and correct contextual answers.
  2. Test sensitive-data leakage and harmful-output cases in both input and output stages.
  3. Run repeatable attack cases and verify restricted content and destructive operations remain inaccessible.
  4. A/B test chunk segmentation on frozen questions and verify evidence sufficiency and prompt-budget compliance.

Explanation

Correct Answer

A:

Correct. User intent and structured fields such as account_id should drive authorized SQL lookups or retrieval filters, not be ignored in free text. In the given situation — A product assistant must answer only for the model and country selected in the user form. — the targeted verify action is: Test mismatched user and account values and confirm zero unauthorized retrieval and correct contextual answers. It tests an observable outcome using realistic inputs rather than relying on a working demo alone.

Incorrect Answers

B:

Not the strongest verify choice for this specific question. Test sensitive-data leakage and harmful-output cases in both input and output stages. This action primarily relates to PII masking and output moderation as complementary guardrails: Input redaction and output checks serve distinct purposes; retain only necessary identifiers and validate actions separately. However, the described case — A product assistant must answer only for the model and country selected in the user form. — is testing Query-field driven prompt and retrieval filters. It does not directly establish the verify outcome or constraint that the question requires; it may still be useful in a different stage or incident.

C:

Not the strongest verify choice for this specific question. Run repeatable attack cases and verify restricted content and destructive operations remain inaccessible. This action primarily relates to Unsafe model output and jailbreak response diagnosis: User-provided instructions may attempt to bypass agent policies or cause data leakage; classification and tool boundaries need separate tests. However, the described case — A product assistant must answer only for the model and country selected in the user form. — is testing Query-field driven prompt and retrieval filters. It does not directly establish the verify outcome or constraint that the question requires; it may still be useful in a different stage or incident.

D:

Not the strongest verify choice for this specific question. A/B test chunk segmentation on frozen questions and verify evidence sufficiency and prompt-budget compliance. This action primarily relates to Chunk quality evaluation and boundary splitting: Retrieval failure can arise from overly small chunks that omit needed context or overly large chunks that dilute relevance. However, the described case — A product assistant must answer only for the model and country selected in the user form. — is testing Query-field driven prompt and retrieval filters. It does not directly establish the verify outcome or constraint that the question requires; it may still be useful in a different stage or incident.

Question 352

What information should the engineer inspect before choosing a remedy? A developer's support chain omits the retrieved context and the LLM hallucinates policy clauses.

  1. Inspect prompt names, version history, aliases, tests and active referenced URI.
  2. Inspect runtime invocation order, prompt input names, stage outputs and errors.
  3. Inspect predict entrypoint, model artifacts, dependency environment, inputs and output serialization.
  4. Inspect deployment manifests, tests, aliases, index versions and rollback dependency matrix.

Explanation

Correct Answer

B:

Correct. A minimal chain composes a retriever, prompt, LLM and output parser, preserving required variables and failure states. In the given situation — A developer's support chain omits the retrieved context and the LLM hallucinates policy clauses. — the targeted diagnose action is: Inspect runtime invocation order, prompt input names, stage outputs and errors. It inspects the stage or constraint most likely to explain the observed failure before changing the system.

Incorrect Answers

A:

Not the strongest diagnose choice for this specific question. Inspect prompt names, version history, aliases, tests and active referenced URI. This action primarily relates to MLflow Prompt Registry version aliases and promotion: Prompt Registry tracks immutable prompt versions with mutable aliases for staging and production, enabling change control and rollback. However, the described case — A developer's support chain omits the retrieved context and the LLM hallucinates policy clauses. — is testing Simple prompt-retrieval-generation chain assembly. It does not directly establish the diagnose outcome or constraint that the question requires; it may still be useful in a different stage or incident.

C:

Not the strongest diagnose choice for this specific question. Inspect predict entrypoint, model artifacts, dependency environment, inputs and output serialization. This action primarily relates to MLflow pyfunc packaging for pre- and post-processing: A custom MLflow pyfunc model wraps request parsing, retriever/model invocation and output formatting inside a reproducible predict interface. However, the described case — A developer's support chain omits the retrieved context and the LLM hallucinates policy clauses. — is testing Simple prompt-retrieval-generation chain assembly. It does not directly establish the diagnose outcome or constraint that the question requires; it may still be useful in a different stage or incident.

D:

Not the strongest diagnose choice for this specific question. Inspect deployment manifests, tests, aliases, index versions and rollback dependency matrix. This action primarily relates to CI/CD pipelines for retrieval and agent components: Production promotions should test source index, prompt, model packaging and tool behavior independently before release. However, the described case — A developer's support chain omits the retrieved context and the LLM hallucinates policy clauses. — is testing Simple prompt-retrieval-generation chain assembly. It does not directly establish the diagnose outcome or constraint that the question requires; it may still be useful in a different stage or incident.

Question 353

After the immediate fix, what safeguard should remain in the release policy? A customer-support RAG source includes cardholder names and full card numbers even though questions concern card dispute policy.

  1. Retest adversarial sources after adding new file types and tool connectors.
  2. Use human review for borderline filtering decisions so source cleaning does not silently erase important warnings.
  3. Keep masking rules under regression control and treat embeddings and logs as potentially sensitive too.
  4. Maintain an auditable source-rights register and recheck rights when a corpus is refreshed.

Explanation

Correct Answer

C:

Correct. Masking or tokenization can remove unnecessary PII from chunks before embedding and external model calls while retaining useful meaning. In the given situation — A customer-support RAG source includes cardholder names and full card numbers even though questions concern card dispute policy. — the targeted safeguard action is: Keep masking rules under regression control and treat embeddings and logs as potentially sensitive too. It preserves an enduring engineering or governance boundary after the current issue is fixed.

Incorrect Answers

A:

Not the strongest safeguard choice for this specific question. Retest adversarial sources after adding new file types and tool connectors. This action primarily relates to Input guardrails against prompt-injected source documents: A document that says 'ignore your rules' is untrusted data; a robust agent must enforce instruction and tool boundaries independently. However, the described case — A customer-support RAG source includes cardholder names and full card numbers even though questions concern card dispute policy. — is testing Sensitive-field masking before embedding. It does not directly establish the safeguard outcome or constraint that the question requires; it may still be useful in a different stage or incident.

B:

Not the strongest safeguard choice for this specific question. Use human review for borderline filtering decisions so source cleaning does not silently erase important warnings. This action primarily relates to Toxic, inaccurate and adversarial corpus cleaning: Unreliable source text can teach unsafe behavior through retrieval; quarantine and source review matter before embeddings. However, the described case — A customer-support RAG source includes cardholder names and full card numbers even though questions concern card dispute policy. — is testing Sensitive-field masking before embedding. It does not directly establish the safeguard outcome or constraint that the question requires; it may still be useful in a different stage or incident.

D:

Not the strongest safeguard choice for this specific question. Maintain an auditable source-rights register and recheck rights when a corpus is refreshed. This action primarily relates to Training and retrieval corpus license rights: Public accessibility does not automatically authorize copying, embedding or using content in commercial RAG services. However, the described case — A customer-support RAG source includes cardholder names and full card numbers even though questions concern card dispute policy. — is testing Sensitive-field masking before embedding. It does not directly establish the safeguard outcome or constraint that the question requires; it may still be useful in a different stage or incident.

Question 354

Which solution directly addresses this application requirement? A website crawler indexes the same cookie banner thousands of times and retrieval returns banners above actual policy.

  1. Split by clause and heading boundaries with a token-aware fallback to preserve the rule and exception together.
  2. Connect the authorized live shipment-tracking record keyed by order ID rather than guessing arrival from policy.
  3. Strip template boilerplate, repeated navigation and low-information text before embedding.
  4. Score retrieved documents separately from generation using graded relevance and ranked-hit metrics.

Explanation

Correct Answer

C:

Correct. Duplicated headers, disclaimers and navigation menus contaminate embeddings and cause irrelevant hits. In the given situation — A website crawler indexes the same cookie banner thousands of times and retrieval returns banners above actual policy. — the targeted implement action is: Strip template boilerplate, repeated navigation and low-information text before embedding. This directly meets the stated workflow constraint instead of addressing an adjacent capability.

Incorrect Answers

A:

Not the strongest implement choice for this specific question. Split by clause and heading boundaries with a token-aware fallback to preserve the rule and exception together. This action primarily relates to Semantic boundaries versus fixed-window chunks: Headings, paragraphs and tables can require structure-aware splitting rather than arbitrary token windows. However, the described case — A website crawler indexes the same cookie banner thousands of times and retrieval returns banners above actual policy. — is testing Boilerplate and navigation filtering in source corpora. It does not directly establish the implement outcome or constraint that the question requires; it may still be useful in a different stage or incident.

B:

Not the strongest implement choice for this specific question. Connect the authorized live shipment-tracking record keyed by order ID rather than guessing arrival from policy. This action primarily relates to Authoritative source coverage for factual answers: A RAG model cannot answer accurately if the required authoritative record is missing or stale in its index. However, the described case — A website crawler indexes the same cookie banner thousands of times and retrieval returns banners above actual policy. — is testing Boilerplate and navigation filtering in source corpora. It does not directly establish the implement outcome or constraint that the question requires; it may still be useful in a different stage or incident.

D:

Not the strongest implement choice for this specific question. Score retrieved documents separately from generation using graded relevance and ranked-hit metrics. This action primarily relates to Retrieval recall precision and ranking diagnostics: Measure hit recall, precision, MRR or nDCG on labeled query-to-relevant-chunk pairs before tuning retrieval. However, the described case — A website crawler indexes the same cookie banner thousands of times and retrieval returns banners above actual policy. — is testing Boilerplate and navigation filtering in source corpora. It does not directly establish the implement outcome or constraint that the question requires; it may still be useful in a different stage or incident.

Question 355

A Databricks engineer is correcting the following workflow: An energy tariff PDF is chunked by arbitrary text lines and rate values lose the currency and zone column. Which change best addresses the documented requirement?

  1. Preserve hierarchical section IDs and supply the parent definition only when relevant.
  2. Use document-aware sections plus parent-child metadata to connect symptom to resolution.
  3. Parse and chunk documents, write keyed chunk rows with provenance to a governed Delta table, then index them.
  4. Turn each relevant table row into a header-aware text/metadata record with original page citation.

Explanation

Correct Answer

D:

Correct. Tabular rows need headers, units and column semantics preserved when transformed into retrieval documents. In the given situation — An energy tariff PDF is chunked by arbitrary text lines and rate values lose the currency and zone column. — the targeted implement action is: Turn each relevant table row into a header-aware text/metadata record with original page citation. This directly meets the stated workflow constraint instead of addressing an adjacent capability.

Incorrect Answers

A:

Not the strongest implement choice for this specific question. Preserve hierarchical section IDs and supply the parent definition only when relevant. This action primarily relates to Parent-child retrieval and hierarchical structure: Parent-child retrieval indexes targeted sections but expands to their broader parent context for generation. However, the described case — An energy tariff PDF is chunked by arbitrary text lines and rate values lose the currency and zone column. — is testing Table-aware chunking and metadata-rich retrieval. It does not directly establish the implement outcome or constraint that the question requires; it may still be useful in a different stage or incident.

B:

Not the strongest implement choice for this specific question. Use document-aware sections plus parent-child metadata to connect symptom to resolution. This action primarily relates to Semantic boundaries versus fixed-window chunks: Headings, paragraphs and tables can require structure-aware splitting rather than arbitrary token windows. However, the described case — An energy tariff PDF is chunked by arbitrary text lines and rate values lose the currency and zone column. — is testing Table-aware chunking and metadata-rich retrieval. It does not directly establish the implement outcome or constraint that the question requires; it may still be useful in a different stage or incident.

C:

Not the strongest implement choice for this specific question. Parse and chunk documents, write keyed chunk rows with provenance to a governed Delta table, then index them. This action primarily relates to Delta and Unity Catalog pipeline for chunk tables: A governed retrieval corpus stores chunk text, IDs, source lineage and metadata in managed Delta/Unity Catalog tables before indexing. However, the described case — An energy tariff PDF is chunked by arbitrary text lines and rate values lose the currency and zone column. — is testing Table-aware chunking and metadata-rich retrieval. It does not directly establish the implement outcome or constraint that the question requires; it may still be useful in a different stage or incident.

Question 356

Which continuing engineering control best reduces recurrence of this issue? A ledger explanation app needs repeatable short outputs, but developers increase temperature to make wording more creative.

  1. Keep prompt versions and rollback capability rather than overwriting the only known-good template.
  2. Keep component roles explicit so updates to a generation model do not silently alter retrieval vectors.
  3. Never compare metrics from non-equivalent data snapshots as if they were a paired model test.
  4. Document supported decoding options per endpoint and do not assume temperature guarantees factual correctness.

Explanation

Correct Answer

D:

Correct. Decoding settings can affect variability and cost but cannot replace validation, grounding or application logic. In the given situation — A ledger explanation app needs repeatable short outputs, but developers increase temperature to make wording more creative. — the targeted safeguard action is: Document supported decoding options per endpoint and do not assume temperature guarantees factual correctness. It preserves an enduring engineering or governance boundary after the current issue is fixed.

Incorrect Answers

A:

Not the strongest safeguard choice for this specific question. Keep prompt versions and rollback capability rather than overwriting the only known-good template. This action primarily relates to Prompt changes evaluated against baseline: A prompt improvement should be measured against a fixed baseline set, not accepted because a few outputs sound better. However, the described case — A ledger explanation app needs repeatable short outputs, but developers increase temperature to make wording more creative. — is testing Temperature and deterministic format tradeoffs. It does not directly establish the safeguard outcome or constraint that the question requires; it may still be useful in a different stage or incident.

B:

Not the strongest safeguard choice for this specific question. Keep component roles explicit so updates to a generation model do not silently alter retrieval vectors. This action primarily relates to Specialized model versus general LLM: Embedding, reranking, extraction and generative models solve different stages and should be evaluated for their actual role. However, the described case — A ledger explanation app needs repeatable short outputs, but developers increase temperature to make wording more creative. — is testing Temperature and deterministic format tradeoffs. It does not directly establish the safeguard outcome or constraint that the question requires; it may still be useful in a different stage or incident.

C:

Not the strongest safeguard choice for this specific question. Never compare metrics from non-equivalent data snapshots as if they were a paired model test. This action primarily relates to Experiment tracking and version reproducibility: MLflow experiments should retain prompt, model, dataset, parameters and evaluation outputs to support a defensible comparison. However, the described case — A ledger explanation app needs repeatable short outputs, but developers increase temperature to make wording more creative. — is testing Temperature and deterministic format tradeoffs. It does not directly establish the safeguard outcome or constraint that the question requires; it may still be useful in a different stage or incident.

Question 357

The Generative AI team observes: A LangChain pipeline returns an SDK message object while its API gateway expects a plain answer string. Which implementation decision is MOST appropriate?

  1. Resolve the authorized production alias at runtime using a controlled refresh strategy.
  2. Version the serving input schema or provide a tested compatibility adapter during migration.
  3. Add a typed output parser/serializer after generation and verify the consumer contract.
  4. Use an available Foundation Model API endpoint with compatible authentication, task API and quotas.

Explanation

Correct Answer

C:

Correct. A minimal chain composes a retriever, prompt, LLM and output parser, preserving required variables and failure states. In the given situation — A LangChain pipeline returns an SDK message object while its API gateway expects a plain answer string. — the targeted implement action is: Add a typed output parser/serializer after generation and verify the consumer contract. This directly meets the stated workflow constraint instead of addressing an adjacent capability.

Incorrect Answers

A:

Not the strongest implement choice for this specific question. Resolve the authorized production alias at runtime using a controlled refresh strategy. This action primarily relates to MLflow Prompt Registry version aliases and promotion: Prompt Registry tracks immutable prompt versions with mutable aliases for staging and production, enabling change control and rollback. However, the described case — A LangChain pipeline returns an SDK message object while its API gateway expects a plain answer string. — is testing Simple prompt-retrieval-generation chain assembly. It does not directly establish the implement outcome or constraint that the question requires; it may still be useful in a different stage or incident.

B:

Not the strongest implement choice for this specific question. Version the serving input schema or provide a tested compatibility adapter during migration. This action primarily relates to Deployed model dependency drift and environment compatibility: Models logged in experiments can fail in serving if Python dependencies or inference signatures differ between build and target. However, the described case — A LangChain pipeline returns an SDK message object while its API gateway expects a plain answer string. — is testing Simple prompt-retrieval-generation chain assembly. It does not directly establish the implement outcome or constraint that the question requires; it may still be useful in a different stage or incident.

D:

Not the strongest implement choice for this specific question. Use an available Foundation Model API endpoint with compatible authentication, task API and quotas. This action primarily relates to Foundation Model API versus custom serving choices: Databricks Foundation Model APIs offer managed access to supported models; custom serving is suitable for specialized models or control needs. However, the described case — A LangChain pipeline returns an SDK message object while its API gateway expects a plain answer string. — is testing Simple prompt-retrieval-generation chain assembly. It does not directly establish the implement outcome or constraint that the question requires; it may still be useful in a different stage or incident.

Question 358

What validation would most convincingly show the correction works? A corporate help desk must answer policy questions from a vetted HR handbook and cite the passage used.

  1. Check answer fidelity, citation paths and forbidden document access across test identities.
  2. Run cases with complete and missing required input fields and verify schema, access scope and usefulness.
  3. Run adversarial quoted-text tests and compare output structure on representative and edge inputs.
  4. Test malformed inputs and inspect whether every response satisfies the parser and required field contract.

Explanation

Correct Answer

A:

Correct. A governed knowledge assistant grounds conversational responses in curated documents and access-controlled retrieval. In the given situation — A corporate help desk must answer policy questions from a vetted HR handbook and cite the passage used. — the targeted verify action is: Check answer fidelity, citation paths and forbidden document access across test identities. It tests an observable outcome using realistic inputs rather than relying on a working demo alone.

Incorrect Answers

B:

Not the strongest verify choice for this specific question. Run cases with complete and missing required input fields and verify schema, access scope and usefulness. This action primarily relates to Translate use-case requirements into pipeline inputs and outputs: Business acceptance criteria must map to concrete source inputs, generated fields, correctness measures and permission constraints. However, the described case — A corporate help desk must answer policy questions from a vetted HR handbook and cite the passage used. — is testing Agent Bricks Knowledge Assistant suitability. It does not directly establish the verify outcome or constraint that the question requires; it may still be useful in a different stage or incident.

C:

Not the strongest verify choice for this specific question. Run adversarial quoted-text tests and compare output structure on representative and edge inputs. This action primarily relates to Instruction hierarchy and bounded prompt examples: Few-shot examples and explicit boundaries can clarify expected outputs, but embedded source documents should not become new system instructions. However, the described case — A corporate help desk must answer policy questions from a vetted HR handbook and cite the passage used. — is testing Agent Bricks Knowledge Assistant suitability. It does not directly establish the verify outcome or constraint that the question requires; it may still be useful in a different stage or incident.

D:

Not the strongest verify choice for this specific question. Test malformed inputs and inspect whether every response satisfies the parser and required field contract. This action primarily relates to Structured JSON schema prompt and format compliance: A model can produce plausible prose rather than machine-readable JSON unless the output contract and validation are explicit. However, the described case — A corporate help desk must answer policy questions from a vetted HR handbook and cite the passage used. — is testing Agent Bricks Knowledge Assistant suitability. It does not directly establish the verify outcome or constraint that the question requires; it may still be useful in a different stage or incident.

Question 359

Which continuing engineering control best reduces recurrence of this issue? A brainstorming app wants creative draft ideas but is incorrectly evaluated on exact-string matching to one reference.

  1. Keep component roles explicit so updates to a generation model do not silently alter retrieval vectors.
  2. Never trust an LLM-extracted customer identifier without server-side permission validation.
  3. Document supported decoding options per endpoint and do not assume temperature guarantees factual correctness.
  4. Expire or segregate conversation memory by identity and purpose, especially for financial and personal records.

Explanation

Correct Answer

C:

Correct. Decoding settings can affect variability and cost but cannot replace validation, grounding or application logic. In the given situation — A brainstorming app wants creative draft ideas but is incorrectly evaluated on exact-string matching to one reference. — the targeted safeguard action is: Document supported decoding options per endpoint and do not assume temperature guarantees factual correctness. It preserves an enduring engineering or governance boundary after the current issue is fixed.

Incorrect Answers

A:

Not the strongest safeguard choice for this specific question. Keep component roles explicit so updates to a generation model do not silently alter retrieval vectors. This action primarily relates to Specialized model versus general LLM: Embedding, reranking, extraction and generative models solve different stages and should be evaluated for their actual role. However, the described case — A brainstorming app wants creative draft ideas but is incorrectly evaluated on exact-string matching to one reference. — is testing Temperature and deterministic format tradeoffs. It does not directly establish the safeguard outcome or constraint that the question requires; it may still be useful in a different stage or incident.

B:

Not the strongest safeguard choice for this specific question. Never trust an LLM-extracted customer identifier without server-side permission validation. This action primarily relates to Query-field driven prompt and retrieval filters: User intent and structured fields such as account_id should drive authorized SQL lookups or retrieval filters, not be ignored in free text. However, the described case — A brainstorming app wants creative draft ideas but is incorrectly evaluated on exact-string matching to one reference. — is testing Temperature and deterministic format tradeoffs. It does not directly establish the safeguard outcome or constraint that the question requires; it may still be useful in a different stage or incident.

D:

Not the strongest safeguard choice for this specific question. Expire or segregate conversation memory by identity and purpose, especially for financial and personal records. This action primarily relates to Conversation context and intent routing: Multi-turn assistants need explicit conversational state while routing each new request to the correct tool or topic. However, the described case — A brainstorming app wants creative draft ideas but is incorrectly evaluated on exact-string matching to one reference. — is testing Temperature and deterministic format tradeoffs. It does not directly establish the safeguard outcome or constraint that the question requires; it may still be useful in a different stage or incident.

Question 360

What information should the engineer inspect before choosing a remedy? An imported policy library contains a deliberately altered obsolete security procedure mixed into current instructions.

  1. Inspect flagged passages, content provenance, approval status and observed retrieval matches.
  2. Inspect content provenance, licensing terms, rights reservations and intended distribution.
  3. Inspect source origin, prompt hierarchy, tool permissions and trace evidence of instruction-following attempts.
  4. Inspect extraction fields, masking policy, downstream embedded text and sensitive-data exposure paths.

Explanation

Correct Answer

A:

Correct. Unreliable source text can teach unsafe behavior through retrieval; quarantine and source review matter before embeddings. In the given situation — An imported policy library contains a deliberately altered obsolete security procedure mixed into current instructions. — the targeted diagnose action is: Inspect flagged passages, content provenance, approval status and observed retrieval matches. It inspects the stage or constraint most likely to explain the observed failure before changing the system.

Incorrect Answers

B:

Not the strongest diagnose choice for this specific question. Inspect content provenance, licensing terms, rights reservations and intended distribution. This action primarily relates to Training and retrieval corpus license rights: Public accessibility does not automatically authorize copying, embedding or using content in commercial RAG services. However, the described case — An imported policy library contains a deliberately altered obsolete security procedure mixed into current instructions. — is testing Toxic, inaccurate and adversarial corpus cleaning. It does not directly establish the diagnose outcome or constraint that the question requires; it may still be useful in a different stage or incident.

C:

Not the strongest diagnose choice for this specific question. Inspect source origin, prompt hierarchy, tool permissions and trace evidence of instruction-following attempts. This action primarily relates to Input guardrails against prompt-injected source documents: A document that says 'ignore your rules' is untrusted data; a robust agent must enforce instruction and tool boundaries independently. However, the described case — An imported policy library contains a deliberately altered obsolete security procedure mixed into current instructions. — is testing Toxic, inaccurate and adversarial corpus cleaning. It does not directly establish the diagnose outcome or constraint that the question requires; it may still be useful in a different stage or incident.

D:

Not the strongest diagnose choice for this specific question. Inspect extraction fields, masking policy, downstream embedded text and sensitive-data exposure paths. This action primarily relates to Sensitive-field masking before embedding: Masking or tokenization can remove unnecessary PII from chunks before embedding and external model calls while retaining useful meaning. However, the described case — An imported policy library contains a deliberately altered obsolete security procedure mixed into current instructions. — is testing Toxic, inaccurate and adversarial corpus cleaning. It does not directly establish the diagnose outcome or constraint that the question requires; it may still be useful in a different stage or incident.