AI-900 Question 58
Select 3You are developing an AI solution using Azure Cognitive Services to process and analyze customer data. Which considerations should you prioritize to ensure the solution complies with privacy and security standards?
- A
Ensure data is encrypted both in transit and at rest.
- B
Limit data collection to only what is necessary for the AI solution's purpose.
- C
Store all customer data indefinitely to improve AI model performance over time.
- D
Implement role-based access control (RBAC) to restrict access to sensitive data.
- E
Disable logging of sensitive data used by the AI solution.
Show answer and explanation
Correct answers: A, B, D
Explanation
To ensure privacy and security in an AI solution, it is crucial to encrypt data, limit data collection to what is necessary, and use access control mechanisms like RBAC. These measures align with industry best practices and regulatory requirements. Retaining data indefinitely or disabling logging entirely can lead to compliance and security risks, so these practices should be avoided.
- A. Correct.
Encrypting data both in transit and at rest is a fundamental security measure to protect sensitive information from unauthorized access.
- B. Correct.
Limiting data collection to only what is necessary helps comply with privacy regulations like GDPR and ensures ethical use of data.
- C. Incorrect.
Storing customer data indefinitely increases the risk of data breaches and may violate privacy regulations that require data minimization and retention policies.
- D. Correct.
Role-based access control (RBAC) ensures that only authorized individuals can access sensitive data, improving security and compliance.
- E. Incorrect.
Disabling logging entirely is not recommended as logging is important for monitoring and auditing purposes. Instead, sensitive data in logs should be anonymized or excluded.