cert
cert-1
cert-2

Pass Google Generative AI Leader Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
Generative AI Leader Exam - Verified By Experts
Generative AI Leader Premium Bundle
$29.98

Generative AI Leader Premium Bundle

$79.99
$109.97
  • Premium File 99 Questions & Answers. Last update: Nov 08, 2026
  • Training Course 28 Video Lectures
  • Study Guide 407 Pages
 
$109.97
$79.99
accept 59 downloads in last 7 days
block-screenshots
Purchase Google Generative AI Leader Exam Training Products Individually
Google Generative AI Leader Premium File
Premium File 99 Q&A
$76.99$69.99
Google Generative AI Leader Video Training Course
Training Course 28 Lectures
$21.99 $19.99
Google Generative AI Leader PDF Study Guide
Study Guide 407 Pages
$21.99 $19.99
Google Generative AI Leader Practice Test 50

Question 490

A developer proposes embedding production database credentials directly in an agent's prompt for easier access. Which AI choice or business response BEST addresses the primary requirement?

  1. Use Agent Search prebuilt retrieval-augmented generation when answers should be grounded in approved indexed enterprise content without building every retrieval component.
  2. Use Google Cloud's model ecosystem to evaluate appropriate first-party, open and partner models while retaining objective quality, compliance and deployment comparisons.
  3. Use Cloud Run or Cloud Functions to host appropriately controlled server-side tool endpoints rather than putting secrets or privileged logic in model prompts.
  4. Prepare structured tables and unstructured documents through appropriate parsing and governance pipelines instead of treating all source material as a uniform CSV.

Explanation

Correct Answer

C:

Use Cloud Run or Cloud Functions to host appropriately controlled server-side tool endpoints rather than putting secrets or privileged logic in model prompts. This approach directly addresses the decision boundary. Serverless compute can implement tool business logic; it is not a foundation model and does not bypass service-level IAM. Validate key assumptions using: Check runtime needs, authenticated invocation, quotas, network and secret permissions, response contracts and logging. Scenario: A developer proposes embedding production database credentials directly in an agent's prompt for easier access.

Incorrect Answers

A:

Use Agent Search prebuilt retrieval-augmented generation when answers should be grounded in approved indexed enterprise content without building every retrieval component. This response is aimed at Agent Search prebuilt RAG for enterprise knowledge, not the controlling requirement here. Prebuilt RAG combines retrieval and generation; it does not turn stale or unauthorized documents into trustworthy facts. The targeted response is: Use Cloud Run or Cloud Functions to host appropriately controlled server-side tool endpoints rather than putting secrets or privileged logic in model prompts. Scenario: A developer proposes embedding production database credentials directly in an agent's prompt for easier access.

B:

Use Google Cloud's model ecosystem to evaluate appropriate first-party, open and partner models while retaining objective quality, compliance and deployment comparisons. This response is aimed at Open AI ecosystem and model flexibility, not the controlling requirement here. An open model ecosystem increases deployment options but does not mean every model is equally safe, performant or available everywhere. The targeted response is: Use Cloud Run or Cloud Functions to host appropriately controlled server-side tool endpoints rather than putting secrets or privileged logic in model prompts. Scenario: A developer proposes embedding production database credentials directly in an agent's prompt for easier access.

D:

Prepare structured tables and unstructured documents through appropriate parsing and governance pipelines instead of treating all source material as a uniform CSV. This response is aimed at Structured and unstructured data distinctions, not the controlling requirement here. Structured fields support predictable queries, while unstructured text and media require extraction or interpretation before downstream use. The targeted response is: Use Cloud Run or Cloud Functions to host appropriately controlled server-side tool endpoints rather than putting secrets or privileged logic in model prompts. Scenario: A developer proposes embedding production database credentials directly in an agent's prompt for easier access.

Question 491

A compliance extraction tool is tuned for creativity and begins returning inconsistent field values. Which outcome BEST demonstrates the requirement has been satisfied?

  1. The agent calls only permitted tools, incorporates returned evidence and stops safely when a dependency fails.
  2. The chosen settings meet creativity or consistency requirements in tests while unsupported combinations fail clearly.
  3. A query about current policies returns the valid version or an explicit limitation when evidence is absent.
  4. The selected pilot solves a documented problem and outperforms an appropriate non-AI baseline on agreed measures.

Explanation

Correct Answer

B:

The chosen settings meet creativity or consistency requirements in tests while unsupported combinations fail clearly. This is an observable business or technical acceptance result, not just a claim that AI was deployed. Sampling controls influence token choice but do not guarantee factual accuracy or eliminate the need for validation. Scenario: A compliance extraction tool is tuned for creativity and begins returning inconsistent field values.

Incorrect Answers

A:

The agent calls only permitted tools, incorporates returned evidence and stops safely when a dependency fails. This result assesses ReAct planning with tool observation, not the business outcome under test. The relevant acceptance condition is: The chosen settings meet creativity or consistency requirements in tests while unsupported combinations fail clearly. Scenario: A compliance extraction tool is tuned for creativity and begins returning inconsistent field values.

C:

A query about current policies returns the valid version or an explicit limitation when evidence is absent. This result assesses Knowledge cutoff and fresh business information, not the business outcome under test. The relevant acceptance condition is: The chosen settings meet creativity or consistency requirements in tests while unsupported combinations fail clearly. Scenario: A compliance extraction tool is tuned for creativity and begins returning inconsistent field values.

D:

The selected pilot solves a documented problem and outperforms an appropriate non-AI baseline on agreed measures. This result assesses Business use case selection and measurable need, not the business outcome under test. The relevant acceptance condition is: The chosen settings meet creativity or consistency requirements in tests while unsupported combinations fail clearly. Scenario: A compliance extraction tool is tuned for creativity and begins returning inconsistent field values.

Question 492

A business user asks a model to approve invoices with no configured approval workflow or IAM permission. Which outcome BEST demonstrates the requirement has been satisfied?

  1. A trained custom model meets held-out evaluation targets and is governed in a managed deployment.
  2. The model portfolio recommendation explains why each candidate is or is not fit for the intended task and budget.
  3. Approved users obtain consistent draft or research support in the chosen interactive surface without unapproved external actions.
  4. The custom agent performs only approved steps and confirms actual system outcomes with logs and escalation paths.

Explanation

Correct Answer

D:

The custom agent performs only approved steps and confirms actual system outcomes with logs and escalation paths. This is an observable business or technical acceptance result, not just a claim that AI was deployed. An agent may plan and call tools, but server-side authorization and result verification remain the application's obligations. Scenario: A business user asks a model to approve invoices with no configured approval workflow or IAM permission.

Incorrect Answers

A:

A trained custom model meets held-out evaluation targets and is governed in a managed deployment. This result assesses Agent Platform AutoML managed custom ML tasks, not the business outcome under test. The relevant acceptance condition is: The custom agent performs only approved steps and confirms actual system outcomes with logs and escalation paths. Scenario: A business user asks a model to approve invoices with no configured approval workflow or IAM permission.

B:

The model portfolio recommendation explains why each candidate is or is not fit for the intended task and budget. This result assesses Foundation model portfolio choice by business case, not the business outcome under test. The relevant acceptance condition is: The custom agent performs only approved steps and confirms actual system outcomes with logs and escalation paths. Scenario: A business user asks a model to approve invoices with no configured approval workflow or IAM permission.

C:

Approved users obtain consistent draft or research support in the chosen interactive surface without unapproved external actions. This result assesses Gemini app and Gems personal productivity, not the business outcome under test. The relevant acceptance condition is: The custom agent performs only approved steps and confirms actual system outcomes with logs and escalation paths. Scenario: A business user asks a model to approve invoices with no configured approval workflow or IAM permission.

Question 493

A company reports thousands of AI chats but never measures resolved customer requests or escalation rates. Which outcome BEST demonstrates the requirement has been satisfied?

  1. Answers accurately cite existing approved information or acknowledge missing support without fabricating details.
  2. The selected model handles the required text, image, audio or video materials in a documented supported workflow.
  3. Quality regressions trigger investigation or rollback while business and safety metrics remain measurable.
  4. Answers refer to the correct approved enterprise source or declare insufficient evidence while enforcing permissions.

Explanation

Correct Answer

C:

Quality regressions trigger investigation or rollback while business and safety metrics remain measurable. This is an observable business or technical acceptance result, not just a claim that AI was deployed. Foundation-model updates and data drift can change outcomes; continuous monitoring must include both technical and business indicators. Scenario: A company reports thousands of AI chats but never measures resolved customer requests or escalation rates.

Incorrect Answers

A:

Answers accurately cite existing approved information or acknowledge missing support without fabricating details. This result assesses Hallucination detection and source verification, not the business outcome under test. The relevant acceptance condition is: Quality regressions trigger investigation or rollback while business and safety metrics remain measurable. Scenario: A company reports thousands of AI chats but never measures resolved customer requests or escalation rates.

B:

The selected model handles the required text, image, audio or video materials in a documented supported workflow. This result assesses Select foundation models by task modality, not the business outcome under test. The relevant acceptance condition is: Quality regressions trigger investigation or rollback while business and safety metrics remain measurable. Scenario: A company reports thousands of AI chats but never measures resolved customer requests or escalation rates.

D:

Answers refer to the correct approved enterprise source or declare insufficient evidence while enforcing permissions. This result assesses First-party enterprise grounding and source access, not the business outcome under test. The relevant acceptance condition is: Quality regressions trigger investigation or rollback while business and safety metrics remain measurable. Scenario: A company reports thousands of AI chats but never measures resolved customer requests or escalation rates.

Question 494

A compliance officer sees a risky public-storage finding but no one is assigned to resolve it. Which outcome BEST demonstrates the requirement has been satisfied?

  1. Staff use the new workflow appropriately and retain control of consequential actions with measurable adoption quality.
  2. Security alerts result in attributable review and effective remediation rather than being treated as proof that all risk was eliminated.
  3. A custom application retrieves the right permitted passages and cites their sources under representative queries.
  4. Only necessary lawful inputs reach the model, and users are not exposed through recoverable identifiers or leaked outputs.

Explanation

Correct Answer

B:

Security alerts result in attributable review and effective remediation rather than being treated as proof that all risk was eliminated. This is an observable business or technical acceptance result, not just a claim that AI was deployed. Security tools aid detection and prioritization; deploying a dashboard does not automatically harden an exposed AI workload. Scenario: A compliance officer sees a risky public-storage finding but no one is assigned to resolve it.

Incorrect Answers

A:

Staff use the new workflow appropriately and retain control of consequential actions with measurable adoption quality. This result assesses Organizational adoption and human workflow redesign, not the business outcome under test. The relevant acceptance condition is: Security alerts result in attributable review and effective remediation rather than being treated as proof that all risk was eliminated. Scenario: A compliance officer sees a risky public-storage finding but no one is assigned to resolve it.

C:

A custom application retrieves the right permitted passages and cites their sources under representative queries. This result assesses RAG APIs and custom retrieval integration, not the business outcome under test. The relevant acceptance condition is: Security alerts result in attributable review and effective remediation rather than being treated as proof that all risk was eliminated. Scenario: A compliance officer sees a risky public-storage finding but no one is assigned to resolve it.

D:

Only necessary lawful inputs reach the model, and users are not exposed through recoverable identifiers or leaked outputs. This result assesses Privacy minimization anonymization and pseudonymization, not the business outcome under test. The relevant acceptance condition is: Security alerts result in attributable review and effective remediation rather than being treated as proof that all risk was eliminated. Scenario: A compliance officer sees a risky public-storage finding but no one is assigned to resolve it.

Question 495

A business analyst wants to prototype an internal FAQ assistant without building a new model from scratch. Which AI choice or business response BEST addresses the primary requirement?

  1. Use the Gemini app and permitted Gems for interactive individual assistance or specialized reusable guidance rather than assuming the chat interface is a deployed enterprise backend.
  2. Use Security Command Center and suitable operational monitoring to surface cloud security posture and findings, then assign remediation and verify fixes.
  3. Assess Google Cloud's managed ecosystem for reliability, scaling, integration and operational monitoring against specific service-level requirements.
  4. Choose suitable managed APIs or low-code/no-code tools for approved prototypes, while keeping security, validation and deployment responsibilities explicit.

Explanation

Correct Answer

D:

Choose suitable managed APIs or low-code/no-code tools for approved prototypes, while keeping security, validation and deployment responsibilities explicit. This approach directly addresses the decision boundary. Pretrained models and low-code builders lower development barriers, not operational accountability or data governance requirements. Validate key assumptions using: Review intended user technical skills, integration needs, required customization, tool permissions and release testing. Scenario: A business analyst wants to prototype an internal FAQ assistant without building a new model from scratch.

Incorrect Answers

A:

Use the Gemini app and permitted Gems for interactive individual assistance or specialized reusable guidance rather than assuming the chat interface is a deployed enterprise backend. This response is aimed at Gemini app and Gems personal productivity, not the controlling requirement here. A Gem can encapsulate task guidance for a user; it is not automatically a securely deployed company-wide agent with backend authorization. The targeted response is: Choose suitable managed APIs or low-code/no-code tools for approved prototypes, while keeping security, validation and deployment responsibilities explicit. Scenario: A business analyst wants to prototype an internal FAQ assistant without building a new model from scratch.

B:

Use Security Command Center and suitable operational monitoring to surface cloud security posture and findings, then assign remediation and verify fixes. This response is aimed at Security Command Center and workload monitoring, not the controlling requirement here. Security tools aid detection and prioritization; deploying a dashboard does not automatically harden an exposed AI workload. The targeted response is: Choose suitable managed APIs or low-code/no-code tools for approved prototypes, while keeping security, validation and deployment responsibilities explicit. Scenario: A business analyst wants to prototype an internal FAQ assistant without building a new model from scratch.

C:

Assess Google Cloud's managed ecosystem for reliability, scaling, integration and operational monitoring against specific service-level requirements. This response is aimed at Scalability reliability and enterprise ecosystem integration, not the controlling requirement here. Enterprise-ready capacity and integrations enable scale only when the application designs for quotas, failure modes and monitoring. The targeted response is: Choose suitable managed APIs or low-code/no-code tools for approved prototypes, while keeping security, validation and deployment responsibilities explicit. Scenario: A business analyst wants to prototype an internal FAQ assistant without building a new model from scratch.

Question 496

A claims team wants a first draft of claimant-friendly explanations, not only a claim risk score. Which TWO complementary actions identify the appropriate response AND the evidence needed to verify it? Select TWO.

  1. The model produces the specified output on varied evaluation inputs without merely copying demonstration examples.
  2. Examine the requested output type, accepted variability, labeled examples, review obligations, and error cost.
  3. Inspect requested capability and identify whether it concerns compute, trained model, managed tools, action planning or user workflow.
  4. Improve instructions, examples and context through prompt engineering first; consider parameter-efficient tuning only when the model and business case justify trained adaptations.
  5. Select a generative model when the business requires newly composed text or other content; use classification or regression when the outcome is an existing label or number.

Explanation

Correct Answers

B:

Examine the requested output type, accepted variability, labeled examples, review obligations, and error cost. These observations test the stated cause before the team changes a system or policy. Generative output is not inherently a verified prediction or deterministic classification; the business task determines whether creation is appropriate. The most suitable approach is: Select a generative model when the business requires newly composed text or other content; use classification or regression when the outcome is an existing label or number. This is the verification part of the requested pair. Scenario: A claims team wants a first draft of claimant-friendly explanations, not only a claim risk score.

E:

Select a generative model when the business requires newly composed text or other content; use classification or regression when the outcome is an existing label or number. This approach directly addresses the decision boundary. Generative output is not inherently a verified prediction or deterministic classification; the business task determines whether creation is appropriate. Validate key assumptions using: Examine the requested output type, accepted variability, labeled examples, review obligations, and error cost. This is the implementation part of the requested pair. Scenario: A claims team wants a first draft of claimant-friendly explanations, not only a claim risk score.

Incorrect Answers

A:

The model produces the specified output on varied evaluation inputs without merely copying demonstration examples. This step is associated with Zero shot one shot and few shot prompting, but it is not one of the two complementary requirements here. The intended response and verification are: Select a generative model when the business requires newly composed text or other content; use classification or regression when the outcome is an existing label or number. Plus: Examine the requested output type, accepted variability, labeled examples, review obligations, and error cost. Scenario: A claims team wants a first draft of claimant-friendly explanations, not only a claim risk score.

C:

Inspect requested capability and identify whether it concerns compute, trained model, managed tools, action planning or user workflow. This step is associated with Five-layer gen AI landscape taxonomy, but it is not one of the two complementary requirements here. The intended response and verification are: Select a generative model when the business requires newly composed text or other content; use classification or regression when the outcome is an existing label or number. Plus: Examine the requested output type, accepted variability, labeled examples, review obligations, and error cost. Scenario: A claims team wants a first draft of claimant-friendly explanations, not only a claim risk score.

D:

Improve instructions, examples and context through prompt engineering first; consider parameter-efficient tuning only when the model and business case justify trained adaptations. This step is associated with Prompt engineering versus prompt tuning, but it is not one of the two complementary requirements here. The intended response and verification are: Select a generative model when the business requires newly composed text or other content; use classification or regression when the outcome is an existing label or number. Plus: Examine the requested output type, accepted variability, labeled examples, review obligations, and error cost. Scenario: A claims team wants a first draft of claimant-friendly explanations, not only a claim risk score.

Question 497

A claims processor misclassifies rare document layouts until varied labeled examples are added to the prompt. Which TWO complementary actions identify the appropriate response AND the evidence needed to verify it? Select TWO.

  1. Inspect source citations, retrieved passage relevance, factual counterexamples, model output logs and a human review threshold.
  2. Break complex tasks into bounded stages with validated intermediate outputs, using prompt chaining only where sequential dependencies are real.
  3. The system preserves correct table relationships and document evidence with traceable origin and consistent permissions.
  4. Inspect prompt task statement, example diversity, expected response format, edge cases and token cost.
  5. Use clear task instructions first and add one or a few representative input-output examples when ambiguity warrants them, testing on unseen cases.

Explanation

Correct Answers

D:

Inspect prompt task statement, example diversity, expected response format, edge cases and token cost. These observations test the stated cause before the team changes a system or policy. Examples can steer format but do not replace application validation or prove generalization to unusual requests. The most suitable approach is: Use clear task instructions first and add one or a few representative input-output examples when ambiguity warrants them, testing on unseen cases. This is the verification part of the requested pair. Scenario: A claims processor misclassifies rare document layouts until varied labeled examples are added to the prompt.

E:

Use clear task instructions first and add one or a few representative input-output examples when ambiguity warrants them, testing on unseen cases. This approach directly addresses the decision boundary. Examples can steer format but do not replace application validation or prove generalization to unusual requests. Validate key assumptions using: Inspect prompt task statement, example diversity, expected response format, edge cases and token cost. This is the implementation part of the requested pair. Scenario: A claims processor misclassifies rare document layouts until varied labeled examples are added to the prompt.

Incorrect Answers

A:

Inspect source citations, retrieved passage relevance, factual counterexamples, model output logs and a human review threshold. This step is associated with Hallucination detection and source verification, but it is not one of the two complementary requirements here. The intended response and verification are: Use clear task instructions first and add one or a few representative input-output examples when ambiguity warrants them, testing on unseen cases. Plus: Inspect prompt task statement, example diversity, expected response format, edge cases and token cost. Scenario: A claims processor misclassifies rare document layouts until varied labeled examples are added to the prompt.

B:

Break complex tasks into bounded stages with validated intermediate outputs, using prompt chaining only where sequential dependencies are real. This step is associated with Prompt chaining and staged transformations, but it is not one of the two complementary requirements here. The intended response and verification are: Use clear task instructions first and add one or a few representative input-output examples when ambiguity warrants them, testing on unseen cases. Plus: Inspect prompt task statement, example diversity, expected response format, edge cases and token cost. Scenario: A claims processor misclassifies rare document layouts until varied labeled examples are added to the prompt.

C:

The system preserves correct table relationships and document evidence with traceable origin and consistent permissions. This step is associated with Structured and unstructured data distinctions, but it is not one of the two complementary requirements here. The intended response and verification are: Use clear task instructions first and add one or a few representative input-output examples when ambiguity warrants them, testing on unseen cases. Plus: Inspect prompt task statement, example diversity, expected response format, edge cases and token cost. Scenario: A claims processor misclassifies rare document layouts until varied labeled examples are added to the prompt.

Question 498

A retailer requires a managed multimodal foundation model to analyze products and generate descriptions. What evidence should the team examine FIRST before making a decision?

  1. Inspect model hardware compatibility, expected training/inference load, region, latency, power/performance and estimated costs.
  2. Compare supported model capability, licensing, deployment location, fine-tuning path, inference cost and task performance before choosing.
  3. Inspect requested capability and identify whether it concerns compute, trained model, managed tools, action planning or user workflow.
  4. Compare target users, available modalities, licensing, data policy, throughput budget and verified trial results.

Explanation

Correct Answer

B:

Compare supported model capability, licensing, deployment location, fine-tuning path, inference cost and task performance before choosing. These observations test the stated cause before the team changes a system or policy. Gemini and Gemma differ in positioning and deployment options; neither automatically satisfies every enterprise policy or use case. The most suitable approach is: Recognize Gemini as Google's multimodal model family for managed AI use cases and Gemma as a family of lightweight open models suited to greater deployment customization. Scenario: A retailer requires a managed multimodal foundation model to analyze products and generate descriptions.

Incorrect Answers

A:

Inspect model hardware compatibility, expected training/inference load, region, latency, power/performance and estimated costs. These observations are relevant to AI-optimized infrastructure accelerators and capacity, but do not isolate the main question. The decisive evidence is: Compare supported model capability, licensing, deployment location, fine-tuning path, inference cost and task performance before choosing. Scenario: A retailer requires a managed multimodal foundation model to analyze products and generate descriptions.

C:

Inspect requested capability and identify whether it concerns compute, trained model, managed tools, action planning or user workflow. These observations are relevant to Five-layer gen AI landscape taxonomy, but do not isolate the main question. The decisive evidence is: Compare supported model capability, licensing, deployment location, fine-tuning path, inference cost and task performance before choosing. Scenario: A retailer requires a managed multimodal foundation model to analyze products and generate descriptions.

D:

Compare target users, available modalities, licensing, data policy, throughput budget and verified trial results. These observations are relevant to Foundation model portfolio choice by business case, but do not isolate the main question. The decisive evidence is: Compare supported model capability, licensing, deployment location, fine-tuning path, inference cost and task performance before choosing. Scenario: A retailer requires a managed multimodal foundation model to analyze products and generate descriptions.

Question 499

A compliance extraction tool is tuned for creativity and begins returning inconsistent field values. Which AI choice or business response BEST addresses the primary requirement?

  1. Adjust supported temperature and top-p sampling to manage generation diversity, then evaluate output consistency with deterministic downstream checks.
  2. Address model knowledge-cutoff limitations with authorized current retrieval and source freshness validation rather than assuming training contains the latest facts.
  3. Use Agent Search prebuilt retrieval-augmented generation when answers should be grounded in approved indexed enterprise content without building every retrieval component.
  4. Choose grounding/RAG for changing source facts, consider fine-tuning for repeatable learned behavior with suitable examples and keep human review for high-impact uncertain results.

Explanation

Correct Answer

A:

Adjust supported temperature and top-p sampling to manage generation diversity, then evaluate output consistency with deterministic downstream checks. This approach directly addresses the decision boundary. Sampling controls influence token choice but do not guarantee factual accuracy or eliminate the need for validation. Validate key assumptions using: Inspect repeated samples, model-specific parameter support, task constraints, acceptance metrics and output variability. Scenario: A compliance extraction tool is tuned for creativity and begins returning inconsistent field values.

Incorrect Answers

B:

Address model knowledge-cutoff limitations with authorized current retrieval and source freshness validation rather than assuming training contains the latest facts. This response is aimed at Knowledge cutoff and fresh business information, not the controlling requirement here. Base model training data is not a live enterprise database and does not establish a current policy or price. The targeted response is: Adjust supported temperature and top-p sampling to manage generation diversity, then evaluate output consistency with deterministic downstream checks. Scenario: A compliance extraction tool is tuned for creativity and begins returning inconsistent field values.

C:

Use Agent Search prebuilt retrieval-augmented generation when answers should be grounded in approved indexed enterprise content without building every retrieval component. This response is aimed at Agent Search prebuilt RAG for enterprise knowledge, not the controlling requirement here. Prebuilt RAG combines retrieval and generation; it does not turn stale or unauthorized documents into trustworthy facts. The targeted response is: Adjust supported temperature and top-p sampling to manage generation diversity, then evaluate output consistency with deterministic downstream checks. Scenario: A compliance extraction tool is tuned for creativity and begins returning inconsistent field values.

D:

Choose grounding/RAG for changing source facts, consider fine-tuning for repeatable learned behavior with suitable examples and keep human review for high-impact uncertain results. This response is aimed at Fine-tuning versus retrieval and human review, not the controlling requirement here. Fine-tuning adjusts behavior, retrieval supplies current facts and human review handles uncertainty; these interventions solve different problems. The targeted response is: Adjust supported temperature and top-p sampling to manage generation diversity, then evaluate output consistency with deterministic downstream checks. Scenario: A compliance extraction tool is tuned for creativity and begins returning inconsistent field values.

Question 500

A workflow exposes one unrestricted update function and the team assumes prompt instructions enforce permissions. Which TWO complementary actions identify the appropriate response AND the evidence needed to verify it? Select TWO.

  1. Inspect declared function schema, caller identity, least-privilege grants, tool outputs, approval and idempotency handling.
  2. Inspect whether the task concerns exploratory prompting or a configured multi-step agent, tool authorization and release process.
  3. The AI service maintains layered controls against representative misuse, with findings assigned and mitigated.
  4. Equip agents with narrowly scoped tools or functions for external data and state changes, verifying inputs and effects independently of the model's suggestions.
  5. Use Cloud Run or Cloud Functions to host appropriately controlled server-side tool endpoints rather than putting secrets or privileged logic in model prompts.

Explanation

Correct Answers

A:

Inspect declared function schema, caller identity, least-privilege grants, tool outputs, approval and idempotency handling. These observations test the stated cause before the team changes a system or policy. A model can propose a function call but does not itself possess the right to change a database or purchase goods. The most suitable approach is: Equip agents with narrowly scoped tools or functions for external data and state changes, verifying inputs and effects independently of the model's suggestions. This is the verification part of the requested pair. Scenario: A workflow exposes one unrestricted update function and the team assumes prompt instructions enforce permissions.

D:

Equip agents with narrowly scoped tools or functions for external data and state changes, verifying inputs and effects independently of the model's suggestions. This approach directly addresses the decision boundary. A model can propose a function call but does not itself possess the right to change a database or purchase goods. Validate key assumptions using: Inspect declared function schema, caller identity, least-privilege grants, tool outputs, approval and idempotency handling. This is the implementation part of the requested pair. Scenario: A workflow exposes one unrestricted update function and the team assumes prompt instructions enforce permissions.

Incorrect Answers

B:

Inspect whether the task concerns exploratory prompting or a configured multi-step agent, tool authorization and release process. This step is associated with Agent Studio versus Google AI Studio environment selection, but it is not one of the two complementary requirements here. The intended response and verification are: Equip agents with narrowly scoped tools or functions for external data and state changes, verifying inputs and effects independently of the model's suggestions. Plus: Inspect declared function schema, caller identity, least-privilege grants, tool outputs, approval and idempotency handling. Scenario: A workflow exposes one unrestricted update function and the team assumes prompt instructions enforce permissions.

C:

The AI service maintains layered controls against representative misuse, with findings assigned and mitigated. This step is associated with Secure AI Framework risk categories and defense, but it is not one of the two complementary requirements here. The intended response and verification are: Equip agents with narrowly scoped tools or functions for external data and state changes, verifying inputs and effects independently of the model's suggestions. Plus: Inspect declared function schema, caller identity, least-privilege grants, tool outputs, approval and idempotency handling. Scenario: A workflow exposes one unrestricted update function and the team assumes prompt instructions enforce permissions.

E:

Use Cloud Run or Cloud Functions to host appropriately controlled server-side tool endpoints rather than putting secrets or privileged logic in model prompts. This step is associated with Cloud Run and Cloud Functions as agent tool endpoints, but it is not one of the two complementary requirements here. The intended response and verification are: Equip agents with narrowly scoped tools or functions for external data and state changes, verifying inputs and effects independently of the model's suggestions. Plus: Inspect declared function schema, caller identity, least-privilege grants, tool outputs, approval and idempotency handling. Scenario: A workflow exposes one unrestricted update function and the team assumes prompt instructions enforce permissions.

Generative AI Leader Practice Tests