Question 450
A Databricks engineer is correcting the following workflow: A customer agent is allowed to issue account refunds but a hostile chat asks it to refund unrelated accounts. Which change best addresses the documented requirement?
Explanation
Correct Answer
Correct. Content filters and action allowlists are complementary; a moderation score is not a substitute for authorization of external effects. In the given situation — A customer agent is allowed to issue account refunds but a hostile chat asks it to refund unrelated accounts. — the targeted implement action is: Use server-side ownership checks and transaction approval on the refund tool in addition to input screening. This directly meets the stated workflow constraint instead of addressing an adjacent capability.
Incorrect Answers
Not the strongest implement choice for this specific question. Redact or pseudonymize identity fields before vector indexing and enforce source access rules. This action primarily relates to Sensitive-field masking before embedding: Masking or tokenization can remove unnecessary PII from chunks before embedding and external model calls while retaining useful meaning. However, the described case — A customer agent is allowed to issue account refunds but a hostile chat asks it to refund unrelated accounts. — is testing Prompt safety filtering and tool allowlists. It does not directly establish the implement outcome or constraint that the question requires; it may still be useful in a different stage or incident.
Not the strongest implement choice for this specific question. Differentiate direct identifiers from permissible temporal fields and apply purpose-specific protection. This action primarily relates to Contextual masking versus destructive data removal: Masking must preserve information needed for the task, such as non-sensitive dates or amounts, and cannot replace access control. However, the described case — A customer agent is allowed to issue account refunds but a hostile chat asks it to refund unrelated accounts. — is testing Prompt safety filtering and tool allowlists. It does not directly establish the implement outcome or constraint that the question requires; it may still be useful in a different stage or incident.
Not the strongest implement choice for this specific question. Obtain appropriate rights or replace manuals with licensed public documentation before ingestion. This action primarily relates to Training and retrieval corpus license rights: Public accessibility does not automatically authorize copying, embedding or using content in commercial RAG services. However, the described case — A customer agent is allowed to issue account refunds but a hostile chat asks it to refund unrelated accounts. — is testing Prompt safety filtering and tool allowlists. It does not directly establish the implement outcome or constraint that the question requires; it may still be useful in a different stage or incident.