Generative AI Leader · Free Practice Question Hard
Question 3
A healthcare organization is using Vertex AI Search to build a sophisticated search engine for its internal medical research knowledge base. The goal is to allow researchers to find information quickly while adhering to strict security and data governance policies.
When configuring and deploying Vertex AI Search for this sensitive use case, which of the following is NOT a recommended security or governance practice?
-
A
Using Identity and Access Management (IAM) policies to define which specific groups of researchers can query the search application.
-
B
Manually reading and redacting all sensitive information from millions of source documents before uploading them to Cloud Storage.
-
C
Enabling audit logging to create an immutable record of all search queries and data access attempts for compliance reviews.
-
D
Grounding the search application in organizational data while applying data controls to ensure it only surfaces information the user is permitted to see.
Reveal correct answer
Correct answer: B
Explanation
The question focuses on implementing security and governance in an efficient, scalable, and cloud-native way. The correct approach is to leverage automated and integrated platform capabilities, not manual, error-prone processes.
INCORRECT: Using Identity and Access Management (IAM) policies to define which specific groups of researchers can query the search application.
This is a fundamental best practice. IAM is the primary mechanism for controlling access to any Google Cloud resource, including a Vertex AI Search application.CORRECT: Manually reading and redacting all sensitive information from millions of source documents before uploading them to Cloud Storage.
This is an inefficient, unscalable, and error-prone anti-pattern. The recommended Google Cloud approach is to use the Cloud Data Loss Prevention (DLP) API to automatically discover and redact sensitive data at scale, rather than relying on manual intervention.INCORRECT: Enabling audit logging to create an immutable record of all search queries and data access attempts for compliance reviews.
This is a critical governance requirement, especially in healthcare. Cloud Audit Logs provide the necessary transparency and traceability to meet compliance obligations.INCORRECT: Grounding the search application in organizational data while applying data controls to ensure it only surfaces information the user is permitted to see.
This is a core capability. Vertex AI Search is designed to be grounded in enterprise data and can be configured to respect existing data permissions and controls.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
