Exam AB-731 Topic 2 Question 18 Discussion

Explanation:
Answer Area
* Content filtering controls can prevent AI-generated responses from exposing confidential and sensitive information. Answer: Yes
* AI-generated content can unintentionally reveal sensitive information if the generative AI model has access to unsecured data sources. Answer: Yes
* To prevent data exposure, only the prompts used by users must be protected by using policies. Answer:
No
* Yes - Content filtering (and related safety controls) can help reduce the chance that responses contain policy-violating or sensitive outputs by detecting and blocking certain categories of content. While filtering is not a perfect guarantee, it is a recognized control to prevent or reduce exposure risk in outputs (for example, blocking regulated data patterns, disallowed content categories, or unsafe disclosures).
* Yes - If a model (or the solution's retrieval layer) can access poorly governed repositories-such as broadly shared folders, misconfigured SharePoint sites, or unsecured databases-then the system can surface sensitive information in responses even without malicious intent. This is why access control, data classification, and permission hygiene are critical prerequisites for deploying AI assistants grounded in organizational content.
* No - Protecting only user prompts is insufficient. Data exposure can occur through multiple paths:
retrieved documents, generated outputs, logs/telemetry, training/fine-tuning data, and connector/index configuration. Preventing exposure requires layered controls: data governance (labels, DLP, least privilege), secure connectors, output filtering, auditing, and user training-not prompt policy alone.