A security team is red-teaming an LLM product before release. They generate 10,000 adversarial test cases using an automated red-teaming tool. What does automated red-teaming NOT replace?
- A.Automated red-teaming replaces all manual testing; 10,000 test cases is comprehensive coverage; the transformer's attention mask separates system tokens from user tokens at the hardware level, meaning an injected instruction is scored against a different weight matrix and mathematically cannot outrank the developer's directive, whatever wording the attacker uses
- B.Automated red-teaming replaces security code reviews of the LLM integration codebase
- C.Unit tests for the application code that handles the LLM integration; fraud losses from synthetic identities are reimbursed by the card networks when AI generation is proven, moving deepfake KYC risk onto the payment rails rather than the onboarding platform; every SaaS AI vendor is audited annually against ISO/IEC 42001 as a condition of listing on the major cloud marketplaces
- D.