Generative AI Leader Practice Question: Business Strategies for Generative AI Solutions
A healthcare company wants to use Gemini to analyze patient records and summarize findings. Which data privacy practice is most critical when using the Gemini API on Vertex AI?
⚠ Common exam trap
Google Cloud often tests the misconception that disabling logging is sufficient for data privacy, when in fact the critical step is preventing sensitive data from being sent to the API in the first place, which is achieved through data masking or redaction.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable Vertex AI Data Governance to mask or redact PII before sending to the API.
Vertex AI Data Governance allows you to configure data masking or redaction of personally identifiable information (PII) before the data is sent to the Gemini API, ensuring compliance with healthcare regulations like HIPAA. This is the most critical practice because it prevents PHI from being exposed to the model or stored in logs, directly addressing the core privacy requirement. Disabling logging alone (Option B) does not prevent PHI from being processed by the model, and fine-tuning with PHI (Option A) introduces significant compliance risks.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Fine-tune Gemini using PHI to improve accuracy.
Why it's wrong here
A is wrong because fine-tuning with PHI could expose sensitive data if not properly managed.
- ✗
Disable request-response logging in Vertex AI to ensure data is not stored.
Why it's wrong here
B is wrong because logging is one part, but you must also control data in prompts.
- ✓
Enable Vertex AI Data Governance to mask or redact PII before sending to the API.
Why this is correct
D is correct because Data Governance can automatically protect sensitive data.
- ✗
Use the text-davinci-003 model instead of Gemini, as it is more private.
Why it's wrong here
C is wrong because text-davinci-003 is an OpenAI model, not Google, and privacy controls are different.
Go deeper
Related to this question
About these practice questions
Courseiva writes every Generative AI Leader question from scratch — 683 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This Generative AI Leader practice question is part of Courseiva's free Google Cloud certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the Generative AI Leader exam.