LLM Application Security Specialist Diagnostic

A focused diagnostic for practitioners building or securing LLM-powered applications, RAG systems, and agentic workflows.

60 q · 75m

Question 1 of 602%

rag security

Select the seven capabilities of a mature RAG security program.

A company deploys RAG across customer support, internal policy search, engineering docs, sales enablement, and compliance workflows.

A. Observability for retrieved IDs, source metadata, prompt versions, model routes.B. Poisoning defenses for hidden instructions, low-trust sources, public web content, and unreviewed.C. Eval suites for leakage, stale ACLs, deletion propagation, query rewriting, source conflicts.D. Release and incident processes that turn findings into owners.E. Authorization enforcement at source, chunk, retrieval, citation, cache, and output layers.F. A plan to maximize retrieval recall regardless of permissions.G. A single prompt saying always cite sourcesH. Source inventory with trust tiers, owners, sensitivity, freshness, allowed influence, and review.I. Lifecycle controls for ingestion, updates, permission changes, deletion, embedding refresh, and cache.