Question 100
A team shares one overprivileged service account across multiple untrusted agent experiments. Which outcome BEST demonstrates the requirement has been satisfied?
Explanation
Correct Answer
Authorized users and services reach only the minimum required resources, and cross-team access attempts fail predictably. This is an observable business or technical acceptance result, not just a claim that AI was deployed. IAM is a server-enforced authorization control; natural-language instructions to a model cannot replace it. Scenario: A team shares one overprivileged service account across multiple untrusted agent experiments.
Incorrect Answers
Responses fit the intended audience without granting new data access or committing unsupported actions. This result assesses Role prompting and explicit output contracts, not the business outcome under test. The relevant acceptance condition is: Authorized users and services reach only the minimum required resources, and cross-team access attempts fail predictably. Scenario: A team shares one overprivileged service account across multiple untrusted agent experiments.
The AI service maintains layered controls against representative misuse, with findings assigned and mitigated. This result assesses Secure AI Framework risk categories and defense, not the business outcome under test. The relevant acceptance condition is: Authorized users and services reach only the minimum required resources, and cross-team access attempts fail predictably. Scenario: A team shares one overprivileged service account across multiple untrusted agent experiments.
Security alerts result in attributable review and effective remediation rather than being treated as proof that all risk was eliminated. This result assesses Security Command Center and workload monitoring, not the business outcome under test. The relevant acceptance condition is: Authorized users and services reach only the minimum required resources, and cross-team access attempts fail predictably. Scenario: A team shares one overprivileged service account across multiple untrusted agent experiments.


