AIF-C01 Security, Compliance and Governance for AI Solutions — 10 Questions

Question 1

A healthcare company is deploying a machine learning model on Amazon SageMaker to analyze patient records. The model requires access to a DynamoDB table containing patient data. Which combination of AWS services and features should the company use to restrict access to only the necessary resources?

Accepted Answer

Create an IAM role with a policy granting read-only access to the specific DynamoDB table and attach it to the SageMaker notebook instance. Option B is correct because it follows the AWS principle of least privilege by creating an IAM role with a policy that grants read-only access to the specific DynamoDB table, then attaching that role to the SageMaker notebook instance. This ensures the notebook can only perform read operations on the required table without exposing long-term credentials or granting broader permissions.

Answer

Attach a DynamoDB resource-based policy to the table allowing access from the SageMaker notebook

Answer

Store AWS access keys in the notebook and use those credentials to access DynamoDB

Answer

Launch the SageMaker notebook in a VPC with a security group that allows access to DynamoDB

Question 2

A company uses Amazon Rekognition to analyze images stored in an S3 bucket. The security team requires that all image analysis be logged to AWS CloudTrail for auditing. What is the minimum configuration needed to meet this requirement?

Accepted Answer

Enable CloudTrail data events for the S3 bucket to capture GetObject API calls. Option D is correct because CloudTrail data events capture S3 object-level API operations such as GetObject, which is the API call made by Amazon Rekognition when it retrieves images from the S3 bucket for analysis. By enabling data events for the S3 bucket, every GetObject request is logged to CloudTrail, providing the audit trail the security team requires. Management events alone do not capture object-level operations, and S3 server access logs are not integrated with CloudTrail for auditing.

Answer

Enable Rekognition logging in the AWS Management Console

Answer

Enable CloudTrail management events for the S3 bucket

Answer

Enable S3 server access logs on the bucket

Question 3

A financial services company is building a predictive model using Amazon SageMaker. The model training data contains personally identifiable information (PII). The company must ensure that the data is encrypted at rest and in transit, and that access to the data is logged. Which combination of AWS services meets these requirements?

Accepted Answer

Use S3 server-side encryption with AWS KMS (SSE-KMS), enable SageMaker inter-container traffic encryption, and enable CloudTrail data events for the S3 bucket. Option B is correct because it addresses all three requirements: SSE-KMS encrypts data at rest in S3, SageMaker inter-container traffic encryption ensures data in transit between training containers is encrypted, and CloudTrail data events for the S3 bucket log all access to the PII data. This combination provides a complete, auditable encryption and logging solution.

Answer

Use S3 server-side encryption with S3-managed keys (SSE-S3) and enable CloudTrail trail for S3 data events

Answer

Use S3 client-side encryption and configure SageMaker to use HTTPS for inter-container traffic

Answer

Enable S3 default encryption with AES-256 and use AWS CloudTrail for S3 data events

Question 4

A data scientist needs to grant an IAM user access to a specific Amazon SageMaker notebook instance. The user should only be able to start and stop the notebook instance, but not delete it. Which IAM policy statement should be used?

Accepted Answer

{"Effect":"Allow","Action":["sagemaker:StartNotebookInstance","sagemaker:StopNotebookInstance"],"Resource":"arn:aws:sagemaker:us-east-1:123456789012:notebook-instance/MyNotebook"}. Option B is correct because it uses the specific actions `sagemaker:StartNotebookInstance` and `sagemaker:StopNotebookInstance` with a resource ARN that targets only the intended notebook instance. This grants the least privilege required to start and stop the instance while explicitly preventing deletion, as no delete action is included. The resource ARN restricts the policy to a single notebook instance, ensuring the user cannot affect other resources.

Answer

{"Effect":"Allow","Action":["sagemaker:Start*","sagemaker:Stop*"],"Resource":"*"}

Answer

{"Effect":"Allow","Action":"sagemaker:*","Resource":"*"}

Answer

{"Effect":"Allow","Action":"sagemaker:*","Resource":"arn:aws:sagemaker:us-east-1:123456789012:notebook-instance/MyNotebook"}

Question 5

A company is using Amazon Comprehend to extract entities from customer support tickets. The compliance team requires that the text sent to Comprehend be encrypted in transit and that Comprehend does not store any data beyond the processing time. How should the company configure the API call?

Accepted Answer

Use the HTTPS endpoint for the DetectEntities API and rely on Comprehend's stateless design. Option D is correct because Amazon Comprehend's DetectEntities API is inherently stateless—it does not store any text or results beyond the processing time required to generate the response. By using the HTTPS endpoint, the company ensures encryption in transit via TLS, satisfying the compliance requirement without additional configuration. Comprehend does not persist data from synchronous API calls, so no data is retained after the response is returned.

Answer

Encrypt the text using AWS KMS before sending it to Comprehend

Answer

Use the AWS SDK with server-side encryption enabled for the API call

Answer

Create a VPC endpoint for Comprehend and send requests over the private network

Question 6

A company uses Amazon SageMaker to host a real-time inference endpoint. The model was trained on sensitive data, and the company wants to ensure that the data sent to the endpoint is encrypted in transit. Additionally, the company wants to restrict access to the endpoint to only traffic originating from a specific VPC. Which configuration meets these requirements?

Accepted Answer

Create the SageMaker endpoint in a VPC, associate a security group that allows inbound HTTPS from the VPC CIDR, and configure the endpoint to use HTTPS. Option A is correct because creating the SageMaker endpoint within a VPC and associating a security group that restricts inbound HTTPS traffic to the VPC CIDR ensures that only traffic from within that VPC can reach the endpoint. Configuring the endpoint to use HTTPS encrypts data in transit using TLS, meeting both the encryption and VPC-only access requirements.

Answer

Configure the SageMaker endpoint to use mutual TLS (mTLS) with client certificates

Answer

Place the SageMaker endpoint behind an Amazon CloudFront distribution with an origin access identity

Answer

Use AWS STS to generate temporary credentials and require the client to sign requests with them

Question 7

A company is using Amazon Textract to extract text from scanned documents stored in an S3 bucket. The security team requires that all access to the documents be logged and that the documents be encrypted at rest using a customer-managed key. What should the company do to meet these requirements?

Accepted Answer

Enable S3 server-side encryption with AWS KMS (SSE-KMS) and enable CloudTrail data events for the S3 bucket. Option B is correct because enabling S3 server-side encryption with AWS KMS (SSE-KMS) satisfies the requirement for encryption at rest using a customer-managed key, and enabling CloudTrail data events for the S3 bucket captures all access to the documents (including GetObject, PutObject, etc.) for logging. This combination meets both security requirements precisely.

Answer

Use S3 default encryption and enable Textract logging

Answer

Enable S3 server access logs and use S3 SSE-KMS

Answer

Use S3 server-side encryption with S3-managed keys (SSE-S3) and enable S3 access logs

Question 8

A company is using Amazon SageMaker to train machine learning models. The security team wants to ensure that the training data is encrypted at rest and that the SageMaker notebook instances cannot access the internet. Which TWO actions should the company take? (Choose TWO.)

Accepted Answer

Enable S3 server-side encryption with AWS KMS (SSE-KMS) for the training data bucket. Option A is correct because enabling S3 server-side encryption with AWS KMS (SSE-KMS) ensures that the training data stored in the S3 bucket is encrypted at rest. This satisfies the security team's requirement for data encryption at rest, as SSE-KMS provides envelope encryption with a customer-managed or AWS-managed KMS key, giving the company control over the encryption keys and auditability via AWS CloudTrail.

Answer

Create an AWS CloudTrail trail to log all S3 data events

Answer

Enable encryption at rest for the SageMaker endpoint using the AWS Management Console

Answer

Use AWS Security Token Service (STS) to generate temporary credentials for the notebook instance

Question 9

A company is deploying an Amazon Lex chatbot that processes customer credit card information. The company must ensure that the chatbot does not log sensitive data and that the data is encrypted in transit. Which THREE actions should the company take? (Choose THREE.)

Accepted Answer

Ensure the Amazon Lex endpoint uses HTTPS for all API calls. Option A is correct because Amazon Lex endpoints support HTTPS, which encrypts data in transit using TLS. By ensuring all API calls use HTTPS, the company protects sensitive credit card information from being intercepted during communication between the client and the Lex service.

Answer

Enable CloudTrail data events for the Lex bot to capture conversation logs

Answer

Enable S3 server access logs on the bucket storing the Lex bot configuration

Question 10

A company is using Amazon Rekognition to detect objects in images stored in an S3 bucket. The company needs to ensure that the Rekognition service has permission to read images from the S3 bucket. Which TWO methods can achieve this? (Choose TWO.)

Accepted Answer

Attach an IAM role to the Lambda function that calls Rekognition, with an IAM policy granting s3:GetObject on the bucket. Option A is correct because when a Lambda function calls Amazon Rekognition, the function needs an IAM role with a policy that grants s3:GetObject permission on the source bucket. This allows the Lambda function to read the images and pass them to Rekognition for analysis. Option E is correct because you can attach a bucket policy that explicitly grants the Rekognition service principal (rekognition.amazonaws.com) permission to read objects, enabling Rekognition to directly access the S3 bucket when invoked.

Answer

Create an IAM role for Rekognition to assume and attach it to the Rekognition service

Answer

Configure the S3 bucket with a bucket ACL that grants read access to the Rekognition service

Answer

Attach a resource-based policy to the Rekognition collection allowing S3 access