Configuring Einstein Trust Layer to Mask Sensitive Data in Einstein GPT
A Salesforce admin wants to use Einstein GPT to generate personalized email content for a marketing campaign. To ensure the AI does not produce responses that include sensitive customer data or violate company policies, which Salesforce feature should the admin configure?
Quick Answer
Einstein Trust Layer is the correct feature because it sits between Salesforce and the underlying large language model specifically to govern what data goes out and what comes back, which is exactly the concern the admin has about sensitive customer data and policy violations. Before a prompt is sent to the LLM, the Trust Layer masks sensitive information such as personally identifiable data, and once the response comes back, it unmasks that content for use within Salesforce, meaning the external model itself never actually sees the sensitive values in the first place. That's a meaningfully different kind of protection than just training the AI to behave or reviewing output after generation, because it removes the sensitive data from the exchange entirely rather than trusting the model to handle it responsibly or catching problems only after the fact. It's this proactive, structural approach to governance, masking before the prompt leaves Salesforce and unmasking only after the response returns, that makes it the answer whenever a scenario is worried about generative AI exposing sensitive data or violating company policy. Any question describing a need to prevent an AI feature from leaking customer information or producing non-compliant content, rather than simply improving the quality of its writing, is pointing toward the Trust Layer as the governance mechanism responsible for that protection.
⚠ Common exam trap
Test-takers frequently confuse Prompt Builder (which controls the prompt content) with the Trust Layer (which controls data security), assuming that defining strict prompts alone is sufficient to prevent sensitive data leakage, when in fact the Trust Layer's automated masking is required for true data protection.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Einstein Trust Layer
Einstein Trust Layer is the correct feature because it acts as a governance and security layer between Salesforce and the large language model (LLM). It automatically masks sensitive customer data (e.g., personally identifiable information) before the prompt is sent to the LLM and then unmasks the response, ensuring the AI never sees or exposes sensitive information. This directly addresses the admin's need to prevent responses containing sensitive data or violating company policies.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Prompt Builder
Why it's wrong here
Prompt Builder is used to create prompt templates, not to enforce data governance or safety filters.
- ✗
Data Cloud
Why it's wrong here
Data Cloud is a platform for unifying data, not a trust or governance layer for generated content.
- ✗
Einstein Studio
Why it's wrong here
Einstein Studio is used to build and manage custom AI models, not to apply governance to generated content.
- ✓
Einstein Trust Layer
Why this is correct
Einstein Trust Layer provides data masking, toxicity detection, and adherence to privacy policies for AI-generated content.
Go deeper
Related to this question
About these practice questions
This AI Associate question is part of Courseiva's 753-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on AI Associate
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Refer to the exhibit. A Salesforce admin configured the Einstein Trust Layer policy shown. What is the effect of this policy on AI model usage?
medium- A.All fields in the org will be masked to protect customer privacy.
- B.AI models will not be able to use the configured fields, and model insights are disabled.
- C.AI models can still use the fields but feature importance insights are blocked.
- ✓ D.AI models receive masked data for those fields, but feature importance insights are still available.
Why D: The Einstein Trust Layer policy configured to mask specific fields ensures that sensitive data is replaced with masked values before being sent to the AI model. This preserves data privacy while still allowing the model to generate predictions and insights. Feature importance insights remain available because they are computed from the masked data, not the original values.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AI Associate practice question is part of Courseiva's free Salesforce certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI Associate exam.