問題文
A hospital's clinical assistant lets each physician search patient records. In testing, a physician's query surfaced a passage from a patient outside that physician's care team. The retrieval index contains all patients' notes. Which two changes are required to close this gap? (Select two.)
選択肢
- Apply the requesting physician's access rights as a filter inside the retrieval step itself, so out-of-scope records are never candidates.
- Reduce the number of retrieved passages so the chance of including an out-of-scope record is lower.
- Instruct the assistant in its system prompt to refuse to discuss patients outside the requesting physician's care team.
- Log all retrieval results and review them weekly to detect access violations.
- Propagate the end user's identity to the retrieval service rather than querying with a single service account that can read every record.