Question 30
A customer-facing AI app prints bank-account values into diagnostic logs whenever a model response is generated. What should the observability design change?
Explanation
Correct Answer
Masking account numbers protects customers while trace identifiers, timestamps and typed errors still let engineers correlate failed requests. Role-scoped diagnostics solve the observability need without duplicating banking secrets.
Incorrect Answers
Reducing retention can reduce the exposure window, but the sensitive account digits still appear in operational logs available to staff and systems during that day. Mask the account fields before logging while retaining non-sensitive diagnostics.
Encryption at rest protects one storage property but does not ensure everyone with log access has a need to see account details. Broad permissions, long retention and trace export can still expose the identifiers.
Capturing every prompt and response for all staff increases the number of stores containing sensitive bank values. Unless explicitly authorized and minimized, full-content logging is unnecessary to troubleshoot ordinary API failures.



Microsoft Azure AI Fundamentals (AI-901) Practice Tests