AIF-C01 Applications of Foundation Models Practice Question
A financial services company uses a foundation model for document analysis. They need to ensure the model does not output sensitive customer information from its training data. What is the most effective mitigation?
⚠ Common exam trap
It's easy for candidates to confuse input-side controls (like data masking or fine-tuning) with output-side controls, assuming that protecting the input or training the model on domain data is sufficient to prevent leakage of memorized sensitive information.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement output filtering using an external service
Output filtering using an external service is the most effective mitigation because it acts as a post-processing layer that can detect and redact sensitive customer information (e.g., PII, account numbers) before the model's response is returned to the user. This approach does not rely on the model's internal training or input modifications, which can be bypassed or incomplete. It provides a robust, policy-driven control that can be updated independently of the model.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Implement output filtering using an external service
Why this is correct
Output filtering can scan and block responses containing sensitive data.
- ✗
Choose a model that has been fine-tuned on financial data
Why it's wrong here
Fine-tuning reduces likelihood but does not guarantee elimination of sensitive output.
- ✗
Apply data masking before sending input
Why it's wrong here
Input masking protects input data, but model output may still contain sensitive information.
- ✗
Use a private endpoint
Why it's wrong here
Private endpoint secures network transport, not output content.
Go deeper
Related to this question
About these practice questions
Courseiva writes every AIF-C01 question from scratch — 619 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AIF-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AIF-C01 exam.