An agentic AI system is deployed to manage a company's cloud infrastructure. A red team test shows that by sending a crafted request to the AI system, an attacker can cause it to deprovision production servers. Which of the following controls BEST addresses this vulnerability?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because the principle of least privilege applied to agentic AI systems limits the blast radius of successful attacks. Requiring explicit human confirmation for destructive operations (deprovisioning, deletion) adds a human-in-the-loop control for irreversible actions, preventing automated execution of attacker-induced commands.
Full explanation below image
Full Explanation
B is correct because the principle of least privilege applied to agentic AI systems limits the blast radius of successful attacks. Requiring explicit human confirmation for destructive operations (deprovisioning, deletion) adds a human-in-the-loop control for irreversible actions, preventing automated execution of attacker-induced commands. Read-only restriction (A) would prevent the system from performing its intended infrastructure management role. A more capable model (C) may be better at detecting attacks but does not provide a hard control boundary. Encryption (D) protects communication confidentiality, not the integrity of commands an authenticated AI agent issues.