AI-900 Question 60
Select 3You are designing an AI solution for processing sensitive customer data, such as personal addresses and financial information. Which actions should you take to ensure privacy and security compliance when implementing the solution?
- A
Implement encryption for data at rest and in transit.
- B
Store all sensitive data in a publicly accessible storage container for easy access.
- C
Adopt role-based access control (RBAC) to restrict access to data and resources.
- D
Ensure transparency by sharing customer data with third-party vendors without explicit consent.
- E
Comply with relevant data protection regulations, such as GDPR or HIPAA, depending on your region and industry.
Show answer and explanation
Correct answers: A, C, E
Explanation
To ensure privacy and security in an AI solution, it is essential to use robust security mechanisms like encryption, implement access control measures such as RBAC, and comply with applicable data protection regulations. These steps help protect sensitive customer data from unauthorized access and misuse, ensuring ethical and legal handling of information. Avoid practices like making sensitive data publicly accessible or sharing it without consent, as they pose significant privacy risks and may lead to regulatory violations.
- A. Correct.
Encryption for data at rest and in transit is a best practice to protect sensitive data from unauthorized access during storage and transmission.
- B. Incorrect.
Storing sensitive data in a publicly accessible storage container is a significant security risk and violates privacy best practices.
- C. Correct.
Role-based access control (RBAC) ensures that only authorized personnel have access to sensitive data, reducing the risk of data misuse.
- D. Incorrect.
Sharing customer data with third-party vendors without explicit consent violates privacy regulations and ethical data practices.
- E. Correct.
Compliance with data protection regulations is critical for ensuring privacy and avoiding legal and financial penalties, especially for sensitive data.