Question 480
A call analytics pipeline extracts customers' card information from recordings and includes full payment details in every trace. Which control is needed?
Explanation
Correct Answer
Payment card numbers in audio and derived text require restricted access and source-aware redaction before broad tracing. Retain only task-necessary diagnostics and approved audio under bounded policies.
Incorrect Answers
Dashboard masking is too late when raw audio/transcripts and card details remain in operational traces accessible to others.
Encryption at rest does not address unnecessary exposure to engineers or indefinite retention of payment details. Redaction, access controls and retention limits are still required.
Automated extraction does not convert private card numbers into public metadata; the underlying data remains protected throughout processing.



Microsoft Azure AI Fundamentals (AI-901) Practice Tests