CyberCertPrepAI Security FundamentalsSecure AI Deployment & MLOpsEASYFree question
Scenario
An engineering team is configuring the tool manifest for a new AI agent that handles customer billing questions via a chat interface. The team is debating which tools to include.
An LLM agent has a tool manifest with the following tools: read_database, write_database, execute_shell, send_email, read_file, delete_file. The agent's purpose is to answer customer billing questions. Which tool set follows the principle of least privilege?
- A.All tools - anticipate future use cases
- B.read_database, write_database, send_email - may need to update records for billing corrections
- C.read_database, execute_shell - shell execution provides maximum flexibility
- D.read_database, send_email - read billing records and communicate results
Why D is correct