mediumMultiple SelectObjective-mapped
AIF-C01 Practice Question: Deploying an AI-based customer service chatbot…
A company is deploying an AI-based customer service chatbot using Amazon Lex and AWS Lambda. The company must ensure compliance with GDPR by allowing users to request deletion of their personal data collected during conversations. Which TWO actions should the company take? (Choose two.)
⚠ Common exam trap
Candidates often think that restricting access (IAM policy) or stopping data collection (modifying settings) is sufficient for GDPR deletion, but GDPR requires actual erasure of existing data, not just access control or future prevention.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use the Amazon Lex DeleteTranscript API to delete user conversation transcripts.
Amazon Lex provides the DeleteTranscript API, which allows the deletion of user conversation transcripts stored by Lex. This directly supports GDPR compliance by enabling the removal of personal data from conversation logs. The API targets the specific transcripts associated with a user, ensuring that their data is permanently deleted.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Use the Amazon Lex DeleteTranscript API to delete user conversation transcripts.
Why this is correct
DeleteTranscript directly removes stored transcripts for a specific user.
- ✗
Apply an IAM policy that denies access to the conversation logs for the user who requested deletion.
Why it's wrong here
Denying access does not delete the data, which is required by GDPR.
- ✓
Delete the corresponding log streams in Amazon CloudWatch Logs that contain the conversation data.
Why this is correct
Lex stores logs in CloudWatch Logs; deleting them removes the data.
- ✗
Disable encryption of conversation logs to allow manual deletion.
Why it's wrong here
Encryption is separate from deletion; disabling does not help.
- ✗
Modify the Lex bot's conversation log settings to stop collecting personal data.
Why it's wrong here
Stopping collection does not delete already collected data.
Quick reference
Cloud Service Model Comparison
| Model | You Manage | Provider Manages | Examples |
|---|---|---|---|
| IaaS | OS, runtime, apps, data | Hardware, hypervisor, networking | EC2, Azure VMs, GCP Compute Engine |
| PaaS | Apps and data | OS, runtime, middleware, hardware | Elastic Beanstalk, Azure App Service |
| SaaS | Data and settings only | Everything else | Microsoft 365, Salesforce, Workday |
| FaaS / Serverless | Function code only | Infra, scaling, runtime | Lambda, Azure Functions, Cloud Run |
| CaaS | Containers and apps | Kubernetes, OS, hardware | EKS, AKS, GKE |
Go deeper
Related to this question
About these practice questions
This AIF-C01 question is part of Courseiva's 619-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AIF-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AIF-C01 exam.