Exam AI-103 Topic 1 Question 145 Discussion

Explanation:
Box 1: No
The audit list will not include entity records for "Contact" and "SSN" because neither word is a target PII entity type defined in the configuration.
The code limits scanning to Person and PhoneNumber via the piiCategories list.
"Contact" Definition: This is a regular English verb/noun, not a person's name or a telephone number.
"SSN" Definition: While "SSN" is a text label that points to sensitive data, it is a descriptor rather than an actual Social Security Number.
Box 2: Yes
For the given sample_text, text_for_model will include both or [email protected] and 859-
98-0987 completely unredacted.
The payload explicitly restricts the Personally Identifiable Information (PII) recognition to only two specific categories by setting piiCategories: ["Person", "PhoneNumber"].
Email Address Excluded: Because the Email category is omitted from the configuration list, the service bypasses the email address ([email protected]) and leaves it fully intact.
SSN Excluded: Similarly, because the USSSN (or equivalent Social Security Number) category is not specified in the piiCategories array, the SSN (859-98-0987) is completely ignored by the redaction policy and remains visible.
Box 3: Yes
text_for_model will contain entity type masks for "John Doe" and "312-555-1234", but only for those two specific items.
The piiCategories array explicitly requests Person and PhoneNumber.
Applied Redaction: The Azure AI Language service will replace "John Doe" and "312-555-1234" with masks like * or entity labels (depending on exact policy settings).
Skipped Data: The email ([email protected]) and the SSN (859-98-0987) will not be redacted because their categories (Email and USSSN) were omitted from your piiCategories list.
Reference:
https://learn.microsoft.com/en-us/azure/ai-services/language-service/personally-identifiable-information/concepts/conversations-entity-categories