Question 520
A model summarizes a security incident and recommends immediate account termination. A company adopts a third-party AI connector but neglects procurement and security evaluation. An assistant is asked to change records in a shared system but only has read-only connector access. What is the most appropriate plan for this situation?
Explanation
Correct Answer
Irreversible security actions should be based on verified incident evidence and authorized response. Third-party integrations create distinct contractual and technical risks. The organization needs explicit assurance about data handling and access. Read permission is not equivalent to permission or capability to mutate records.
Incorrect Answers
Two of the three actions fit, but the change aimed at AI vendor governance gate is replaced by a measure for payment data minimization. Payment credentials create financial and compliance risk and are not needed for routine wording help. The omitted requirement remains unsatisfied.
Word-for-word fluency does not guarantee equivalent interpretation across languages. A fluent translation can still alter a legal obligation or assurance. In this workflow, an authorized incident responder must verify actual logs, account activity and the applicable playbook before approving containment. A model summary is a lead for investigation, not a substitute for factual evidence or decision authority.
Two of the three actions fit, but the change aimed at connector read-versus-write boundary is replaced by a measure for source-first knowledge correction. Fixing the authoritative input prevents the same error from recurring across outputs. The omitted requirement remains unsatisfied.



Claude Certified Associate - Foundations (CCAO-F) Practice Tests