A healthcare multi-agent system must block PHI leakage, unsafe tool use, and non-compliant model outputs. Architects want defense-in-depth rather than a single filter at the end of the chat. Which guardrail strategy best matches multi-intervention design for multi-agent solutions?
Select an answer to reveal the explanation.
Short Explanation
Correct answer: C. Multi-intervention guardrails are speed bumps on every road, not one checkpoint at the exit. You filter what users type in, what tools agents try to call, what tools return, and what the agent finally says—especially with PHI and clinical policy. A single end-of-chat filter is too late once a tool already exfiltrated data.
Full Explanation
Microsoft’s multi-agent security guidance emphasizes multi-intervention guardrails: controls at user inputs, tool calls, tool responses, and outputs. Option C is correct because it implements independent checks at each stage and layers domain-specific PHI and clinical constraints, so a jailbreak that slips past input filters can still be blocked before a dangerous tool call or before a PHI-laden tool result is echoed to the user.
Option A is incorrect because filtering only the final answer leaves intermediate tool invocations and tool responses unprotected—classic single-point-of-failure design.
Option B is incorrect: removing tools may reduce attack surface but fails clinical workflows that need EHR or knowledge tools, and parametric-only answers increase hallucination risk for medical content.
Option D is incorrect because after-the-fact weekly review is detective, not preventive; it does not stop live leakage.
Exam tip: When the stem asks for multi-intervention or defense-in-depth guardrails, the correct answer enumerates input + tool-call + tool-response + output controls, often with custom domain rules.