AI Security Engineering Practice Exam

A practice version of the readiness assessment intended for repeat attempts, self-study, and training cohorts. The practice exam emphasizes explanations and remediation rather than pass/fail outcomes.

100 q · 90m

Question 1 of 1001%

rag security

Select the seven artifacts that should be in a RAG security evidence packet before launch.

A SaaS company is launching a customer-facing RAG assistant over tenant documents and support records. Enterprise customers will ask for assurance evidence.

A. Authorization design showing tenant, role, source, chunk, citation, and cache enforcement points.B. Screenshots of correct-looking answersC. Source taxonomy showing trust tiers, owner, review status, freshness, and allowed influence.D. Eval results for cross-tenant leakage, stale ACLs, deletion propagation, query rewriting.E. Data-flow and trust-boundary diagram showing source systems, ingestion, chunks, embeddings.F. Ingestion controls for poisoning, hidden instructions, parser safety, metadata integrity, and source.G. Logging and incident-response plan for retrieval IDs.H. A public statement that the assistant uses citationsI. Known limitations, residual risks, owners, exceptions, and retest cadence.