Question 310
A compliance officer sees a risky public-storage finding but no one is assigned to resolve it. Which AI choice or business response BEST addresses the primary requirement?
Explanation
Correct Answer
Use Security Command Center and suitable operational monitoring to surface cloud security posture and findings, then assign remediation and verify fixes. This approach directly addresses the decision boundary. Security tools aid detection and prioritization; deploying a dashboard does not automatically harden an exposed AI workload. Validate key assumptions using: Review asset findings, relevant IAM misconfigurations, alert triage, ownership, mitigation logs and residual risk. Scenario: A compliance officer sees a risky public-storage finding but no one is assigned to resolve it.
Incorrect Answers
Equip agents with narrowly scoped tools or functions for external data and state changes, verifying inputs and effects independently of the model's suggestions. This response is aimed at Agent tools and function calling authorization, not the controlling requirement here. A model can propose a function call but does not itself possess the right to change a database or purchase goods. The targeted response is: Use Security Command Center and suitable operational monitoring to surface cloud security posture and findings, then assign remediation and verify fixes. Scenario: A compliance officer sees a risky public-storage finding but no one is assigned to resolve it.
Use Google's Secure AI Framework (SAIF) as a structured way to identify and mitigate AI-specific risks across data, models, infrastructure and use. This response is aimed at Secure AI Framework risk categories and defense, not the controlling requirement here. SAIF guides security practices throughout the AI system; a framework name does not independently enforce access policy. The targeted response is: Use Security Command Center and suitable operational monitoring to surface cloud security posture and findings, then assign remediation and verify fixes. Scenario: A compliance officer sees a risky public-storage finding but no one is assigned to resolve it.
Choose generative AI use cases by business pain, process constraints and appropriate output modality rather than by novelty or executive enthusiasm. This response is aimed at Business use case selection and measurable need, not the controlling requirement here. Business value comes from fit to the task, not from inserting a foundation model into every process. The targeted response is: Use Security Command Center and suitable operational monitoring to surface cloud security posture and findings, then assign remediation and verify fixes. Scenario: A compliance officer sees a risky public-storage finding but no one is assigned to resolve it.


