Option B is correct because Cortex Guard evaluates the LLM's responses, not just the prompts, to filter unsafe content. Additionally, only the input tokens for Cortex Guard are counted for billing, and this cost is in addition to the function's cost. Option E is correct because Snowflake's trust and safety principles explicitly state that your Usage and Customer Data (including inputs and outputs of Snowflake AI Features) are NOT available to other customers and are NOT used to train, re-train, or fine-tune Models made available to others. Option A is incorrect as customer data is not anonymised and used to improve general model performance for others. Option C is incorrect as the sources do not mention fine-tuning a customer-owned guardrail model. Option D is incorrect as the sources do not mention a 'CORTEX GUARD ADMIN' role or logging of filtered content to a customer-accessible audit table.