Google Professional Cloud Security Engineer Question 367
Select 3Google Cloud PlatformYou are responsible for implementing security and privacy controls for an AI/ML system that processes sensitive customer data. To prevent unintentional exploitation of the model or exposure of sensitive data, which actions should you take?
- A
Implement differential privacy techniques to limit the exposure of individual data points in the training set.
- B
Enable model explainability to ensure users understand the decision-making process of the model.
- C
Use data encryption during storage and transmission to protect sensitive data.
- D
Perform membership inference testing to detect whether the model unintentionally exposes training data.
- E
Disable logging and monitoring to minimize the collection of sensitive data.
Show answer and explanation
Correct answers: A, C, D
Explanation
To protect AI/ML systems from unintentional exploitation, it is crucial to implement privacy-preserving techniques like differential privacy, ensure sensitive data is encrypted, and perform regular testing such as membership inference testing. These measures reduce the risk of exposing sensitive information while maintaining the security of the system. Disabling essential tools like logging and monitoring would hinder the ability to respond to security threats and is not a best practice.
- A. Correct.
Implementing differential privacy is a key approach to protecting sensitive data in AI/ML systems. It ensures that individual data points cannot be reverse-engineered from the model outputs.
- B. Incorrect.
While model explainability is important for trust and accountability, it does not directly prevent unintentional exploitation of data or models.
- C. Correct.
Encrypting sensitive data during storage and transmission is a fundamental security measure to prevent unauthorized access.
- D. Correct.
Membership inference testing is an important practice to identify whether a model unintentionally exposes data from its training set, helping to mitigate privacy risks.
- E. Incorrect.
Disabling logging and monitoring is not recommended, as these tools are essential for detecting and responding to security incidents. Instead, logging should be configured securely to avoid collecting sensitive data unnecessarily.