Tokenize identifiers: Which approach best satisfies both constraints?
Tokenize sensitive identifiers, limit access, and share only fields necessary for diagnosis.
The question
A medical-administration assistant provides no clinical advice. Prompt logs contain patient identifiers, and a vendor needs enough information to investigate failures. The organization must support incident diagnosis while minimizing sensitive disclosure and preserving accountable access. Which approach best satisfies both constraints?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Tokenize identifiers, restrict access, and retain only diagnostic fields for vendor review. ✓Tokenization and access restriction reduce exposure while diagnostic-field retention supports investigation, monitoring, and accountable third-party collaboration.
- Remove names but retain full prompts and unrestricted internal access.Removing names helps, yet full prompts may retain sensitive information and unrestricted access weakens accountable handling.
- Send complete logs to the vendor under a confidentiality agreement.Confidentiality terms may allocate responsibility, but transmitting complete sensitive prompts exceeds the stated minimization constraint.
- Keep raw logs internally and provide the vendor selected excerpts for debugging.Selected excerpts reduce disclosure, but without systematic transformation they may still expose identifiers or unnecessary sensitive content.
The trap
Separate the need to investigate failures from the separate question of how much raw information the investigator receives. How to remember it
Tokenize sensitive identifiers, limit access, and share only fields necessary for diagnosis.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How to Govern AI Deployment and Use questions
- Treat retrieved instructions as data: Which design best meets those constraints? →
- Publish a preliminary factual notice describing: What should the organization do first? →
- Use manual fallback: Which response best preserves safe continuity? →
- All 424 Understanding How to Govern AI Deployment and Use questions →
Part of the Certsqill AIGP question bank · Understanding How to Govern AI Deployment and Use ·
Every answer, right and wrong, comes with its own explanation.