easyMultiple ChoiceObjective-mapped
AIF-C01 Practice Question: A company uses Amazon Rekognition to analyze…
A company uses Amazon Rekognition to analyze images for a user-generated content platform. To comply with data residency requirements, they must ensure that images are not processed outside a specific AWS region. What should the company do?
⚠ Common exam trap
Candidates often confuse VPC endpoints or WAF with data residency controls, not realizing that Rekognition processes data in the region of the API call, and that network-level or application-layer controls do not enforce regional data processing boundaries.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use an AWS Lambda function to copy images to a bucket in the desired region and invoke Rekognition there.
It directly addresses the data residency requirement by using a Lambda function to copy images to an S3 bucket in the desired region and then invoking Rekognition in that same region. This ensures that image data never leaves the specified AWS region, as Rekognition processes images only in the region where the API call is made. The other options either do not prevent cross-region processing or are not applicable to Rekognition's data handling.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable Amazon Rekognition VPC endpoints.
Why it's wrong here
VPC endpoints are for private connectivity, not region restriction.
- ✓
Use an AWS Lambda function to copy images to a bucket in the desired region and invoke Rekognition there.
Why this is correct
This ensures data is processed only in the specified region.
- ✗
Configure an AWS WAF rule to block cross-region processing.
Why it's wrong here
WAF does not control regional processing of Rekognition.
- ✗
Set up AWS Organizations to restrict the Rekognition service to one region.
Why it's wrong here
Organizations cannot restrict service usage to a single region.
Quick reference
AWS S3 Storage Class Comparison
| Storage Class | Min Duration | Retrieval | Use Case |
|---|---|---|---|
| S3 Standard | None | Immediate | Frequently accessed data |
| S3 Standard-IA | 30 days | Immediate | Infrequent access, rapid retrieval |
| S3 One Zone-IA | 30 days | Immediate | Non-critical infrequent data |
| S3 Intelligent-Tiering | None | Immediate–hours | Unknown or changing access patterns |
| S3 Glacier Instant | 90 days | Milliseconds | Archive with instant retrieval |
| S3 Glacier Flexible | 90 days | Minutes–hours | Archive, flexible retrieval |
| S3 Glacier Deep Archive | 180 days | Hours | Long-term compliance archive |
Go deeper
Related to this question
About these practice questions
Courseiva writes every AIF-C01 question from scratch — 619 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AIF-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AIF-C01 exam.