CCNA Sfai Ethical Ai Privacy Questions — Page 2 of 2

Multi-Selecthard

A company deploying Einstein Bots for customer service wants to ensure compliance with GDPR's right to explanation. Which TWO measures should they implement?

Select 2 answers

A.Implement an audit trail that logs which AI decisions were made and why

B.Store all customer chat transcripts permanently

C.Enable score factors to show why a bot recommended a specific action

D.Use only rule-based bots to avoid AI complications

E.Allow customers to opt out of all AI interactions

AnswersA, C

Audit trails enable review and explanation of automated decisions.

Why this answer

Option A is correct because GDPR's right to explanation requires organizations to provide meaningful information about the logic involved in automated decision-making. An audit trail that logs which AI decisions were made and why directly satisfies this by recording the decision path, input features, and model version used, enabling retrospective explanation. Option C is correct because score factors (e.g., feature importance weights in Einstein Bot's predictive models) allow the bot to show why a specific action was recommended, fulfilling the transparency requirement under Article 22 of GDPR.

Exam trap

Cisco often tests the misconception that GDPR requires storing all data for audit purposes or avoiding AI entirely, when in fact it mandates data minimization and explainability of automated decisions, not prohibition of AI.

Practice this question →

MCQeasy

A company wants to use Einstein Sentiment Analysis to classify customer feedback. What is the FIRST step they should take to ensure ethical use of customer data?

A.Set up an audit trail for all AI actions

B.Choose a pre-trained model to avoid using customer data

C.Obtain proper consent from customers for using their data in AI

D.Anonymize all customer feedback before analysis

AnswerC

Consent is the foundation of ethical data use. Without it, any further steps may violate privacy regulations.

Why this answer

Ethical AI begins with data governance. Obtaining proper consent from customers to use their feedback for AI analysis is a fundamental requirement under privacy regulations like GDPR and CCPA. It also aligns with the Trusted AI principle of Empathy, respecting customer autonomy.

Practice this question →

MCQeasy

A company is deploying Einstein Reply Recommendations for a sales team. To comply with Salesforce's Trusted AI principle of transparency, what must the company ensure about the AI-generated replies?

A.Sales reps are informed that the reply is AI-generated and can review before sending

B.The AI model is fine-tuned on the company's past sales data

C.The AI-generated replies are automatically sent without human review

D.Customer data used to generate replies is retained for 90 days

AnswerA

Transparency means the user knows the source of the recommendation.

Why this answer

Transparency requires that users know when they are interacting with AI-generated content. Therefore, the company must indicate to the sales rep that the reply recommendation was generated by AI.

Practice this question →

Multi-Selectmedium

A company uses Einstein to generate automated email responses. To comply with CCPA, which THREE practices should they adopt?

Select 3 answers

A.Store all AI-generated emails indefinitely for auditing

B.Obtain consent only once at account creation

C.Provide an opt-out mechanism for customers who do not want AI-generated communications

D.Limit the data used to generate emails to what is necessary for the task

E.Disclose to customers that the email was generated by AI

AnswersC, D, E

CCPA gives consumers the right to opt out of certain uses.

Why this answer

Option C is correct because the CCPA grants consumers the right to opt out of the sale or use of their personal information for automated decision-making, including AI-generated communications. Einstein’s automated email responses rely on customer data, so providing a clear opt-out mechanism ensures compliance with CCPA’s requirement for consumer control over data-driven communications.

Exam trap

Cisco often tests the misconception that CCPA compliance is a one-time setup (like consent at account creation) rather than an ongoing, purpose-specific obligation, leading candidates to pick Option B over the correct opt-out mechanism.

Practice this question →

Multi-Selecteasy

A sales manager is reviewing the AI predictions from Einstein Opportunity Scoring. Which THREE actions should the manager take to ensure ethical use of AI according to Salesforce Trusted AI principles?

Select 3 answers

A.Provide sales reps with explanations of the key factors influencing each score.

B.Regularly validate the model's predictions against actual outcomes to ensure accuracy.

C.Keep the model's logic secret to prevent gaming the system.

D.Override the scores without review if they conflict with intuition.

E.Encourage reps to use their judgment and escalate borderline cases for human review.

AnswersA, B, E

Transparency principle requires explaining AI outputs.

Why this answer

Accuracy validation, transparency through explanation, and human oversight align with Salesforce's principles.

Practice this question →

MCQhard

A data scientist is training a custom AI model using Salesforce Data. They want to ensure that the model does not inadvertently learn patterns from Personal Identifiable Information (PII) fields such as Social Security numbers. Which approach aligns with Salesforce's responsible AI practices?

A.Use the PII fields but restrict the model from outputting them through post-processing filters.

B.Exclude PII fields from the training dataset entirely and use only non-sensitive features.

C.Anonymize the PII fields by hashing them and include the hashed values as features.

D.Include all fields initially, then use feature importance to prune PII fields after training.

AnswerB

Excluding PII prevents the model from accessing sensitive data, aligning with data minimisation.

Why this answer

Data minimisation and privacy by design dictate that PII should be excluded from training data to prevent the model from memorizing or relying on sensitive information.

Practice this question →

MCQmedium

A sales team is using Einstein Lead Scoring and notices that leads from a certain geographic region are consistently scored lower, even when the lead's profile matches high-performing customers from other regions. What is the most likely cause and recommended first step?

A.The model is accurate; the region is genuinely underperforming. The team should accept the scores.

B.The model may be biased due to underrepresented data from that region in the training set. Audit the model for bias and review training data demographics.

C.The region has lower quality leads, so the scores are correct. The team should focus on other regions.

D.Retrain the model with more data from that region, even if it means duplicating records.

AnswerB

Bias auditing is the correct first step to identify if the model is unfairly penalizing leads based on geography.

Why this answer

The low scores for a specific region likely indicate bias in the model due to historical data imbalances. The first step should be to audit the model for bias using tools like Fairness in AI or reviewing training data distribution.

Practice this question →

Multi-Selectmedium

A company must comply with GDPR when using Einstein Features to process customer data for AI predictions. Which THREE actions are required under GDPR that relate directly to AI-driven decisions?

Select 3 answers

A.Implement a data retention policy that deletes customer data after 30 days

B.Ensure that only data necessary for the prediction is used (data minimisation)

C.Provide customers with the right to explanation for automated decisions that significantly affect them

D.Audit AI models for bias on a quarterly basis

E.Obtain explicit consent from customers for using their data in AI models

AnswersB, C, E

Data minimisation is a key principle in GDPR; only relevant data should be processed.

Why this answer

GDPR requires a lawful basis for processing (e.g., consent), the right to explanation for automated decisions, and data minimization. Data retention policy is important but not exclusive to AI decisions; and bias auditing is a best practice but not a GDPR requirement.

Practice this question →

MCQeasy

Which of the following is a key feature of Salesforce Einstein Trust Layer that protects customer data when using AI?

A.Zero data retention

B.Automatic model retraining

C.Data masking for all PII

D.Open-source model deployment

AnswerA

Zero data retention means customer data is not stored or used to retrain foundation models.

Why this answer

Option A is correct because the Salesforce Einstein Trust Layer is designed with a zero data retention policy, meaning that once an AI model processes a request and returns a response, Salesforce does not store the customer's data. This ensures that sensitive information is not retained on Salesforce servers, protecting customer privacy and complying with data protection regulations. The zero data retention feature is a core architectural principle that prevents data leakage from AI interactions.

Exam trap

Cisco often tests the misconception that data masking or encryption is the primary protection mechanism, when in fact the Einstein Trust Layer's zero data retention policy is the key differentiator that prevents data from being stored at all.

How to eliminate wrong answers

Option B is wrong because automatic model retraining is not a feature of the Einstein Trust Layer; it is a machine learning operational practice that may occur on the Salesforce platform but does not directly protect customer data during AI inference. Option C is wrong because data masking for all PII is not a built-in feature of the Einstein Trust Layer; while Salesforce offers data masking capabilities in other contexts, the Trust Layer specifically focuses on zero data retention rather than masking data in transit or at rest. Option D is wrong because open-source model deployment is not a characteristic of the Einstein Trust Layer; Salesforce uses proprietary models and does not deploy open-source models as part of its trust layer architecture.

Practice this question →