TOPIC
Security
These are the same questions found in the library, grouped here by the capability each one mainly examines.
59 questions
Questions 51–59 of 59 on this page.
A · Professional problem solving and implementation5
- Two currently valid policies in the knowledge base conflict, with similar retrieval scores. The assistant must not choose whichever is more convenient. What response and escalation path would you design?
- Model responses may echo customer identifiers, while production debugging relies on request and response logs. How would you design collection, redaction, access, and retention?
- A model labels some accounts high-risk and automatically denies service, affecting customer rights. How would you set validation, appeals, and human review?
- An admin API can change customer states in bulk. A script began calling it directly and caused broad changes. How would you redesign authorization and safeguards?
- Every read request is logged, driving cost up, while compliance requires evidence for sensitive actions. How would you tier collection and retention?
No questions in this section match your target. ·
B · Business understanding and domain modeling2
- A user requests personal-data deletion, but the system uses append-only events, search indexes, and offline analytics copies; some events must remain for business audit. How would you distinguish deletable fields, identity mappings, cryptographic erasure, and retention exceptions?
- The system changes its user key from email to an immutable ID, but mobile caches, partner callbacks, and historical exports still reference email. How would you design mappings, a dual-read period, privacy cleanup, and retirement of old references?
No questions in this section match your target. ·
D · Delivery and ongoing operations1
No questions in this section match your target. ·