CyberCertPrepAI Security FundamentalsAI Governance, Risk & FrameworksEASYFree question
"All prompts deployed in customer-facing AI systems must pass the approved prompt-injection test suite before release." In a documentation hierarchy, what type of document does this statement belong in?
- A.A guideline, because testing is a recommended practice
- B.A procedure, because it describes the philosophy of secure AI
- C.A policy, because it mentions customers
- D.A standard, because it is a mandatory, specific, testable requirement that implements a higher-level policy
Why D is correct
The statement is mandatory ("must"), specific (the approved test suite, customer-facing systems, before release), and verifiable - the defining traits of a standard that implements a broader policy commitment to secure AI deployment. It is not a guideline because compliance is required, not merely recommended; it is too granular for a policy, which states high-level intent; and a procedure would instead enumerate the steps for actually running the test suite.
Know someone studying for AI Security Fundamentals? Send them this one.