Question 34
Domain 5: Deployment, Scaling, Safety, and ComplianceWhat layered safety framework would best meet these regulatory requirements?
Correct answer: B
Explanation
A layered framework fits the requirement to meet regulatory controls at multiple points in the workflow: input validation screens users, guardrails enforce policy, output filtering checks required disclosures, confidence scoring routes uncertain cases for review, and logging preserves an audit trail. This design reduces risk by combining prevention, detection, escalation, and accountability in one process.
Why each option is right or wrong
A. Improve prompt engineering with more detailed safety instructions.
B. Implement a multi-layer safety framework with: input validation (check user risk profile), NeMo Guardrails (enforce regulatory rules), output filtering (verify disclosures present), confidence scoring (escalate low-confidence cases), and comprehensive logging (audit trail).
The cited framework matches a regulated workflow because it controls the interaction at five distinct points: pre-processing risk checks, policy enforcement during generation, post-generation disclosure verification, escalation when model confidence is low, and immutable audit logging. In regulatory settings, this kind of end-to-end control is what satisfies obligations for suitability screening, rule enforcement, required disclosures, human review of uncertain outputs, and recordkeeping under common compliance regimes.
C. Fine-tune the model on examples of compliant vs non-compliant advice.
D. Use a separate classifier to detect violations after generation and block them.