NCA-GENL Trustworthy AI Practice Question
A financial services company deploys an NVIDIA NIM inference microservice for an LLM that drafts internal investment summaries. The security team wants to ensure that the model does not reveal sensitive account numbers that appear in its training data. Which NVIDIA NeMo Guardrails mechanism should be configured to detect and block such disclosures at runtime?
⚠ Common exam trap
The trap here is assuming that input filtering or dialog flow control is sufficient to stop sensitive data leakage, when the actual leak occurs in the model's generated output and must be intercepted there.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
An output rail that applies a custom action to scan the model response for sensitive patterns and block or mask them.
Output rails are the correct guardrail type because they inspect the model's generated response before it is returned to the user. By attaching a custom action that scans for account-number patterns, the system can block or mask the disclosure. Input, dialog, and retrieval rails operate at different stages and cannot reliably prevent sensitive data from appearing in the final output.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A retrieval rail that filters documents from the vector database before they are passed to the model.
Why it's wrong here
Retrieval rails filter external knowledge retrieved from a vector store, but the risk here is data memorized in the model's training data. Even with perfect retrieval filtering, the model could still generate account numbers from its parameters. Retrieval rails do not inspect or sanitize the model's final generated text.
- ✗
A dialog rail that uses a canonical form to redirect the conversation when a sensitive pattern is detected.
Why it's wrong here
Dialog rails control the flow of conversation and can redirect or refuse, but they are not designed to scan generated text for sensitive patterns like account numbers. They operate on user intent and bot responses at the dialogue level, not as a content filter for PII, so they would not reliably prevent leakage of account numbers embedded in model output.
- ✗
An input rail that validates user prompts against a blocklist of forbidden terms.
Why it's wrong here
Input rails examine the user's prompt, not the model's output. They can stop a user from asking for sensitive data, but they cannot prevent the model from spontaneously including sensitive account numbers in a legitimate response. The leak occurs in the output, so an input rail does not address the scenario.
- ✓
An output rail that applies a custom action to scan the model response for sensitive patterns and block or mask them.
Why this is correct
Output rails in NeMo Guardrails intercept the model's generated response before it reaches the user, allowing a custom action to run pattern matching or a classifier that detects account numbers. If a match is found, the rail can block the response or mask the sensitive data, directly preventing disclosure at runtime.
About these practice questions
This NCA-GENL question is part of Courseiva's 367-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official NVIDIA exam blueprint
This NCA-GENL practice question is part of Courseiva's free NVIDIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the NCA-GENL exam.