An AI may have returned confidential information.
Investigate impact and prevent recurrence.
Choose two first-response actions.
Preserve model, prompt, retrieved-document, authorization, and timestamp evidence, contain exposure, and start the reporting process.
Detailed explanation
Containment and organizational response proceed together.
Cause and impact cannot be established.
The event can be reproduced and scoped.
Incorrect information can create further harm.
Check official documentation
Compare the following points with the official documentation.
AWS公式AIF-C01 Domain 5.2のインシデント対応、監査、データ保持を確認する。
Official references
What to confirm
AI出力の事故で証跡を保全し、被害抑制と報告を進める初動を説明できる。
Key points
- Evidence preservation
- Containment
- Reporting
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Compare the definition with the AIF-C01 objective and the service documentation before applying it.
- Keep the concept separate from a particular answer choice or implementation step.
Foundation review
Evidence preservation
Keeping relevant logs, inputs, outputs, permissions, versions, and timestamps intact for investigation.
Incident response
The process of detecting, containing, investigating, recovering from, and learning from an incident.