James, the lead system administrator, has successfully integrated the organization's Active Directory to handle user logins and has assigned standard "User" and "Viewer" designations to all employees. However, a security audit reveals a critical gap: while a marketing employee correctly has "User" level permissions to use the AI tool, they were able to query and retrieve sensitive financial forecasts that should have been restricted to the Finance team. James needs to implement a control that restricts the specific information scope available to a user, without changing their high-level permission designation. Which capability addresses this specific granularity issue?

• A. Content filtering controls
• B. Role-based Access
• C. Data Access
• D. Feature Controls

The "Aura" AI assistant for legal research has finished its internal pilot. The final audit validated that the tool correctly identifies relevant case law in 98% of tests, and the legal team's senior partners have already signed off on the official "Usage and Prohibited Activities" handbook. However, Joey, the Program Lead, halts the full expansion because a sub-audit reveals that junior associates have begun delegating their final case summaries entirely to the AI without a secondary manual verification step. While the tool is accurate, Joey argues that the associates do not yet understand the "threshold of trust" required for high-stakes litigation.
Which specific Readiness Category is lacking a confirmed validation?

• A. Support Readiness
• B. Technical Readiness
• C. Business Readiness
• D. Governance Readiness

Elena, a Vendor Risk Manager, is auditing a prospective AI translation provider. The primary vendor has flawless security credentials and encrypts all data at rest. However, Elena discovers that for complex linguistic nuances, the vendor routes specific anonymized text snippets to a network of third-party linguistic specialists for quality assurance. Elena flags this as a critical gap because the contract does not list these external entities or define their security obligations. Which specific critical question is Elena prioritizing to expose the risk within this supply chain?

• A. Who else touches the data?
• B. Can we export our data?
• C. How long is data stored?
• D. Is my data used to train models?

An organization is consolidating large volumes of operational data from multiple production environments to support analytical evaluation and planning activities. The AI capability will operate on accumulated datasets rather than interacting with live operational decisions.
Outputs must be reliable, optimized for cost, and accessible to multiple downstream reporting and planning systems. As part of AI operations oversight, you are asked to validate whether the proposed integration approach aligns with data management and lifecycle expectations. Which integration pattern best supports this operational and data-management context?

• A. Asynchronous activation initiated by operational state changes
• B. In-application execution tightly coupled to a single system's workflow
• C. On-demand execution triggered by direct system requests
• D. Periodic processing of aggregated datasets with persisted outputs for enterprise reuse

A Chief Technology Officer (CTO) at AeroGuard Defense, a military aerospace contractor, is selecting a Generative AI platform for a critical three-year project. The immediate requirement is to deploy rapidly on public cloud infrastructure to demonstrate value. However, the corporate security roadmap mandates that all AI workloads handling classified technical data must migrate to an air-gapped, on-premises data center within
18 months. The CTO needs a platform that supports this transition without requiring a change in the underlying model provider. Which specific "Enterprise Factor" is the CTO prioritizing to ensure this roadmap is feasible?

• A. SLA and support levels
• B. Fine-tuning options
• C. Rate limits and pricing
• D. Model hosting flexibility