Generative AI Leader Fundamentals of Generative AI Practice Question
A financial services company is deploying a generative AI model to summarize sensitive customer emails. The security team requires that no email content is used to train or improve the underlying foundation model. Which Google Cloud approach ensures this requirement is met?
⚠ Common exam trap
The trap here is assuming that network or encryption controls prevent data from being used for model training, when the guarantee is actually contractual and policy-based.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Rely on the default data processing terms of Google Cloud, which state that customer data is never used to train foundation models.
Google Cloud's generative AI services are governed by terms that prohibit using customer data to train or improve foundation models without explicit consent. This contractual commitment is the primary control that satisfies the security team's requirement. Technical measures like encryption or network isolation are important for security but do not address the specific concern about training data usage.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Rely on the default data processing terms of Google Cloud, which state that customer data is never used to train foundation models.
Why this is correct
Google Cloud's terms of service for generative AI explicitly state that customer data is not used to train or improve foundation models without explicit permission. This contractual guarantee, combined with technical measures like data residency, ensures the security team's requirement is met. It is the foundational assurance that no email content will be used for training.
- ✗
Fine-tune the model on the email data using Vertex AI, then delete the fine-tuned model after use.
Why it's wrong here
Fine-tuning on the email data would actually use that data to adapt the model, which directly contradicts the requirement that no email content is used to train or improve the model. Deleting the fine-tuned model afterward does not undo the training that already occurred and may still leave traces or violate the policy.
- ✗
Deploy the model in a private VPC and use Cloud VPN to encrypt all traffic between the application and the model endpoint.
Why it's wrong here
A private VPC and Cloud VPN protect data in transit and isolate network traffic, but they do not prevent the model provider from using the data for training. The requirement is about data usage for model improvement, which is governed by service terms and data governance settings, not network isolation alone.
- ✗
Use Vertex AI with customer-managed encryption keys (CMEK) and enable VPC Service Controls.
Why it's wrong here
CMEK and VPC Service Controls enhance data encryption and network perimeter security, but they do not govern whether data is used for model training. These controls protect data at rest and in transit, yet the foundational model provider's data usage policy is a separate contractual and technical matter that must be addressed directly.
Go deeper
Related to this question
About these practice questions
One of 1,008 original Generative AI Leader practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Google Cloud exam blueprint
This Generative AI Leader practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the Generative AI Leader exam.