A chatbot may have disclosed customer data.
Contain harm, investigate, and prevent recurrence.
Choose two appropriate first actions.
Restrict affected functions, permissions, or data paths and preserve model, prompt, source, log, and change provenance for investigation.
Detailed explanation
Investigation and accountability are lost.
This limits further disclosure or unsafe action.
The damage and misplaced trust can grow.
The incident can be reconstructed and scoped.
Check official documentation
Compare the following points with the official documentation.
AWS公式AIF-C01 Domain 3.4・5.2の監視、インシデント対応、監査を確認する。
Official references
What to confirm
AI固有の来歴・データ漏えいを含めた初動と調査を説明できる。
Key points
- Containment
- Evidence
- Provenance
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Compare the definition with the AIF-C01 objective and the service documentation before applying it.
- Keep the concept separate from a particular answer choice or implementation step.
Foundation review
Incident containment
Restricting functions, permissions, or paths to stop an ongoing impact from spreading.
Evidence preservation
Keeping logs, settings, inputs, outputs, and artifacts intact for later investigation.