AI0-001 AI Security, Ethics and Governance Practice Question
A company is developing an AI chatbot for customer service. They want to ensure the bot does not generate offensive or harmful responses. Which governance practice should be implemented first?
⚠ Common exam trap
CompTIA often tests the principle of 'defense in depth' and the order of implementation, where candidates mistakenly choose data sanitization (D) as the first step, overlooking that runtime controls are more immediate and practical for preventing harm in a deployed system.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implement a content filter to screen responses before delivery
A content filter acts as a real-time safety gate that screens every response generated by the AI model before it reaches the customer. This is the first line of defense against offensive or harmful outputs, as it can catch toxic language, PII leaks, or policy violations immediately, even if the underlying model has not been fully sanitized. Without such a filter, harmful responses could be delivered before any other governance measure (like human review or policy creation) can intervene.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Set up a human-in-the-loop review process
Why it's wrong here
Human review is slower and costlier; automated filtering is first line.
- ✓
Implement a content filter to screen responses before delivery
Why this is correct
Content filtering immediately prevents harmful outputs from reaching users.
- ✗
Create a usage policy for acceptable bot behavior
Why it's wrong here
Policies guide development but are not a technical control.
- ✗
Sanitize training data to remove toxic examples
Why it's wrong here
Training data sanitization reduces risk but does not guarantee safe outputs in all cases.
About these practice questions
This AI0-001 question is part of Courseiva's 754-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AI0-001 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI0-001 exam.