AI Security Engineering Practice Exam

A practice version of the readiness assessment intended for repeat attempts, self-study, and training cohorts. The practice exam emphasizes explanations and remediation rather than pass/fail outcomes.

100 q · 90m

Question 1 of 1001%

secure architecture design

Select the five controls that belong in a secure architecture for a multi-tenant RAG agent with CRM access.

The agent answers customer-support questions using tenant documents and can draft CRM updates for support agents to approve.

A. Security evals for cross-tenant leakage, prompt injection.B. Tenant and user ACL filtering before document chunks enter model context.C. Provider data-processing review covering training, retention, subprocessors, and region.D. A system prompt saying the agent should be secure, with no other controls.E. A single shared admin token for all CRM updates to simplify implementation.F. Prompt, retrieval, model, tool-call, approval, and output logs with privacy controls.G. Scoped CRM permissions that allow draft proposals but require human approval for writes.