312-41 practice question 19 of 35

James, the lead system administrator, has successfully integrated the organization’s Active Directory to handle user logins and has assigned standard…

Full set: 100 questions
James, the lead system administrator, has successfully integrated the organization’s Active Directory to handle user logins and has assigned standard "User" and "Viewer" designations to all employees. However, a security audit reveals a critical gap: while a marketing employee correctly has "User" level permissions to use the AI tool, they were able to query and retrieve sensitive financial forecasts that should have been restricted to the Finance team. James needs to implement a control that restricts the specific information scope available to a user, without changing their high-level permission designation. Which capability addresses this specific granularity issue?
Answer options
A: Content filtering controls
B: Data Access Correct answer
C: Role-based Access
D: Feature Controls
Correct Answer:
B. Data Access
Explanation

Fine-grained data-access controls restrict which underlying information a user can retrieve independent of their global role. By enforcing data-level entitlements (e.g., finance-only forecasts), James can keep the employee’s “User” designation while preventing exposure to sensitive datasets inside the AI application.

Why Incorrect

A. Content filtering removes or redacts returned text but does not prevent the initial query from reaching restricted data.
C. Role-based access would require creating a new role; the task is to keep existing roles.
D. Feature controls toggle application functions, not the visibility of specific datasets.

References

1. Microsoft Azure AI “Data Access and Isolation” guide, §“Fine-grained access control,” 2023.

2. Google Cloud “IAM Conditions for AI Platform,” Concepts §2, 2022.

3. University of Washington CSE 446 Lecture 14, “Data Governance in ML Systems,” slide 7, 2021.

Scroll to Top