AIF-C01 Practice Question: Security, Compliance, and Governance for AI Solutions
A company is using Amazon SageMaker to manage the lifecycle of their machine learning models. They need to implement a governance framework that includes model versioning, monitoring for drift, and decommissioning of outdated models. Which THREE AWS services or features should they use together to meet these requirements? (Select THREE.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
SageMaker Pipelines
SageMaker Model Registry (C) is the correct service for model versioning and governance, as it maintains a catalog of model versions with metadata, approval statuses, and lineage, enabling tracking and controlled promotion of models through their lifecycle. SageMaker Model Monitor (E) is correct because it continuously monitors deployed endpoints for data drift, model quality drift, bias drift, and feature attribution drift, alerting when the model deviates from baseline behavior. SageMaker Pipelines (B) is correct because it provides CI/CD orchestration to automate the ML workflow, including training, evaluation, registration to the Model Registry, and deployment, which supports governance and decommissioning through repeatable, versioned pipeline executions. AWS CloudTrail (A) only records API activity for auditing and does not provide model versioning, drift monitoring, or lifecycle decommissioning, so it does not meet the requirements. SageMaker Role Manager (D) merely helps create and manage IAM roles and permissions for SageMaker personas; it does not provide versioning, drift detection, or model decommissioning capabilities.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
AWS CloudTrail
Why it's wrong here
CloudTrail records API activity for audit and compliance, but it does not version models, detect data or model drift, or retire them. It is the correct service when the requirement is capturing account-level API calls and event history, not managing the model lifecycle itself.
- ✓
SageMaker Pipelines
Why this is correct
SageMaker Pipelines orchestrates the end-to-end ML workflow as code, automating retraining, evaluation and conditional deployment steps. Within a governance framework it enforces repeatable, auditable lifecycle transitions, complementing Model Registry versioning and Model Monitor drift detection rather than duplicating them.
- ✓
SageMaker Model Registry
Why this is correct
SageMaker Model Registry provides a central catalogue that versions model artefacts, tracks approval status and manages metadata through each stage. It directly satisfies the versioning and decommissioning requirements by letting teams mark outdated model versions as archived or rejected.
- ✗
SageMaker Role Manager
Why it's wrong here
SageMaker Role Manager builds IAM roles and permissions for users, so it grants access rather than versioning, monitoring or decommissioning models. It is the correct feature when defining persona-based permissions for SageMaker domain users, not for governing model artefacts and drift.
- ✓
SageMaker Model Monitor
Why this is correct
SageMaker Model Monitor continuously captures endpoint data and compares it against a baseline, detecting data quality and drift violations and emitting CloudWatch alerts. This directly satisfies the drift-monitoring requirement, triggering retraining or investigation before prediction quality degrades.
Go deeper
Related to this question
About these practice questions
Courseiva writes every AIF-C01 question from scratch — 862 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AIF-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AIF-C01 exam.