AIF-C01 Security, Compliance, and Governance for AI Solutions Practice Test 1 — 15 Questions

Question 1

A data scientist needs to restrict access to a specific Amazon SageMaker notebook instance so that only a designated IAM role can invoke the CreatePresignedNotebookInstanceUrl API. Which IAM policy element should be used to achieve this?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Add a Condition block in the IAM policy attached to the user's role. Amazon SageMaker notebook instances do not support resource-based policies. The correct way to restrict the CreatePresignedNotebookInstanceUrl API to a specific IAM role is to attach an identity-based policy to the user's role that includes a Condition block specifying the resource ARN of the notebook instance. This ensures only that role can generate presigned URLs for that instance.

Answer

Modify the trust policy of the IAM role

Answer

Place the notebook instance in a private VPC subnet

Answer

Use a resource-based policy on the notebook instance

Question 2

A machine learning team needs to share a SageMaker notebook with a colleague from a different AWS account. The colleague should be able to open and run the notebook but not delete it. Which combination of actions should the team take?

Accepted Answer

Share the notebook via S3 with a bucket policy that grants read/write access to the colleague's account. SageMaker notebook instances do not support resource-based policies for cross-account access. To share a SageMaker notebook (the .ipynb file) with a colleague from a different AWS account, the notebook should be stored in an S3 bucket. A bucket policy can grant the colleague's account read access to the notebook file, and IAM roles can allow them to open and run it without delete permissions. Option A (Lake Formation) is used for sharing data lake resources, not typically for SageMaker notebooks directly. Option B is invalid because resource-based policies are not available for notebook instances. Option C grants too broad permissions.

Answer

Use AWS Lake Formation to share the notebook

Answer

Attach a resource-based policy to the notebook instance that grants the colleague's IAM role permissions to open and run, and deny delete

Answer

Create an IAM role in the colleague's account with permissions to create and manage SageMaker notebooks

Question 3

A company is deploying a generative AI application using Amazon Bedrock and needs to ensure that the model's responses do not include any sensitive information. Which TWO Bedrock Guardrail configurations should be used together to meet this requirement? (Select TWO.)

Accepted Answer

PII redaction to redact or mask sensitive data. Amazon Bedrock Guardrails provide multiple mechanisms to control model outputs. PII redaction specifically identifies and removes or masks personally identifiable information, directly addressing the requirement to prevent sensitive data exposure. Content policies, on the other hand, filter outputs based on harmful content categories (e.g., hate, violence) and do not target sensitive information like PII. Therefore, only PII redaction (Option A) is needed to meet this specific requirement.

Answer

Topic restriction to limit topics

Answer

Word filter to block specific words

Answer

Grounding check to verify responses are grounded in source documents

Answer

Content policy to filter out harmful content

Question 4

A company uses Amazon SageMaker to train sensitive ML models. Which AWS service should they use to encrypt the training data and model artifacts at rest?

Accepted Answer

AWS Key Management Service (KMS). AWS Key Management Service (KMS) allows customers to create and manage encryption keys used to encrypt data at rest in SageMaker, including training data and model artifacts.

Answer

AWS Secrets Manager

Answer

AWS CloudHSM

Answer

AWS Certificate Manager

Question 5

A data scientist needs to allow a foundation model in Amazon Bedrock to access a specific S3 bucket containing reference documents. The bucket is in a different AWS account. What is the MOST secure way to grant access?

Accepted Answer

Configure the S3 bucket policy to allow access from the Bedrock service role and add a Bedrock resource policy allowing the bucket. Cross-account access requires both the S3 bucket policy to grant the Bedrock service role and the Bedrock resource policy to allow the bucket, ensuring least privilege.

Answer

Use AWS Lake Formation to grant cross-account access to the bucket

Answer

Copy the S3 bucket to the same account as Bedrock

Answer

Make the S3 bucket public and use a pre-signed URL

Question 6

A company uses Bedrock Guardrails to filter harmful content in a generative AI application. They need to prevent the model from discussing proprietary internal projects. Which Guardrail component should be configured?

Accepted Answer

Topic restrictions. Topic restrictions allow administrators to define denied topics; the model will not generate responses related to those topics.

Answer

Content filters

Answer

Grounding check

Answer

Word filters

Question 7

A financial services firm needs to ensure that all calls to Amazon Bedrock APIs are logged for audit purposes. Which AWS service should they enable to capture API calls?

Accepted Answer

AWS CloudTrail. AWS CloudTrail records API activity in AWS accounts, including Bedrock API calls, providing audit logs.

Answer

Amazon S3 server access logs

Answer

Amazon CloudWatch Logs

Answer

AWS Config

Question 8

A company wants to detect sensitive data such as PII in their training datasets stored in S3 before using them for model training. Which AWS service should they use?

Accepted Answer

Amazon Macie. Amazon Macie uses machine learning to discover and protect sensitive data in S3, including PII.

Answer

Amazon Inspector

Answer

AWS Shield

Answer

Amazon GuardDuty

Question 9

A company uses SageMaker Clarify to detect bias in a deployed model. The monitoring must run automatically on a schedule. Which SageMaker feature should they use?

Accepted Answer

SageMaker Model Monitor. SageMaker Model Monitor can be configured to run bias detection jobs on a schedule using Clarify's bias metrics.

Answer

SageMaker Pipelines

Answer

SageMaker Experiments

Answer

SageMaker Data Wrangler

Question 10

An organization uses AWS Lake Formation to govern a data lake used for SageMaker training. They need to enforce row-level security so that different teams only see data relevant to their projects. Which Lake Formation feature should they use?

Accepted Answer

Row-level security. Lake Formation's row-level security uses filters to restrict access to specific rows based on conditions.

Answer

Cell-level security

Answer

Column-level security

Answer

Tag-based access control

Question 11

A company wants to use Amazon Bedrock to generate responses grounded in their proprietary knowledge base. They need to minimize hallucinations and ensure responses are based on the provided documents. Which feature should they enable?

Accepted Answer

Grounding check. Grounding check in Bedrock Guardrails verifies that the model's response is supported by the source documents, reducing hallucinations.

Answer

Topic restrictions

Answer

Word filters

Answer

Content filters

Question 12

A data scientist needs to restrict access to a SageMaker notebook instance to only the corporate network. Which configuration should they use?

Accepted Answer

Place the notebook instance in a VPC and configure security groups to allow only corporate IP ranges. VPC isolation places the notebook instance inside a VPC, and security groups can restrict inbound traffic to the corporate network IP range.

Answer

Enable multi-factor authentication for the notebook

Answer

Use an IAM policy to allow only corporate users

Answer

Use a SageMaker lifecycle configuration to block external IPs

Question 13

A company needs to ensure that model inference endpoints in SageMaker are only accessible from a private subnet in their VPC, and no traffic goes over the public internet. Which network configuration should they use?

Accepted Answer

Use a VPC interface endpoint for SageMaker and disable public access. A VPC-only endpoint (interface endpoint) or private endpoint without public internet access ensures traffic stays within the VPC.

Answer

Create a public endpoint and restrict access using IAM policies

Answer

Use AWS PrivateLink for the endpoint, but keep public endpoint enabled

Answer

Deploy the endpoint in a public subnet with a security group blocking all inbound traffic

Question 14

A company using Amazon Bedrock needs to redact personally identifiable information (PII) from user inputs before sending them to the foundation model. Which Bedrock Guardrails component should be configured?

Accepted Answer

Sensitive information filters. PII redaction in Guardrails automatically detects and redacts PII in user inputs or model responses.

Answer

Content filters

Answer

Topic restrictions

Answer

Word filters

Question 15

A company wants to use a third-party foundation model in Bedrock and is concerned about the provider's data handling policies. Which action should they take to ensure their data is not used for model training by the provider?

Accepted Answer

Review the provider's data privacy policy and enable the opt-out option for training data use if available. AWS provides model access approval settings where customers can review and accept data handling policies; many providers offer opt-out options for training data use.

Answer

Use Bedrock's content filters to block sensitive data

Answer

Encrypt all data with KMS before sending to Bedrock

Answer

Use a custom model hosted on SageMaker instead