easyMultiple ChoiceObjective-mapped
AIF-C01 Practice Question: A company uses Amazon SageMaker Model Registry to…
A company uses Amazon SageMaker Model Registry to manage model versions. The security team requires that only approved models can be deployed to production. The ML team creates a new model version and registers it in the Model Registry. When trying to deploy the model to a production endpoint, the deployment fails because the model is not approved. The ML team asks the DevOps team to approve the model. However, the DevOps team cannot see the model in the Model Registry. What is the MOST likely reason?
⚠ Common exam trap
Watch out — candidates often confuse the approval status (Pending) with visibility, assuming a model in 'Pending' status is hidden, when in fact the approval status only controls deployment, not the ability to see the model in the registry.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The DevOps team does not have the required IAM permissions to view models in the Model Registry.
The most likely reason the DevOps team cannot see the model in the Model Registry is that they lack the required IAM permissions (e.g., `sagemaker:DescribeModelPackage` or `sagemaker:ListModelPackages`) to view models. Without these permissions, the model is invisible to them in the SageMaker console or API, even though it exists. The deployment failure due to approval status is a separate symptom; the core issue here is visibility, not approval workflow.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The model artifacts are stored in an S3 bucket that uses SSE-KMS, and the DevOps team does not have KMS decrypt permission.
Why it's wrong here
KMS permissions are needed to download artifacts, but not to view the model in the registry.
- ✗
The model version is in a 'Pending' approval status and needs to be promoted by the ML team first.
Why it's wrong here
Status affects ability to deploy, but DevOps can still see the model if they have permissions.
- ✓
The DevOps team does not have the required IAM permissions to view models in the Model Registry.
Why this is correct
Access to Model Registry is controlled by IAM; the DevOps team likely lacks list/list-approvals permissions.
- ✗
The Model Registry is in a different AWS account, and the DevOps team does not have cross-account access.
Why it's wrong here
No indication of multiple accounts; assume same account.
Go deeper
Related to this question
About these practice questions
Courseiva writes every AIF-C01 question from scratch — 619 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AIF-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AIF-C01 exam.