AIF-C01 Guidelines for Responsible AI Practice Question
A healthcare company is training a model on sensitive patient data using Amazon SageMaker. They need to ensure that individual patient data cannot be reverse-engineered from the model. Which technique should they implement during training?
⚠ Common exam trap
AIF-C01 often tests the distinction between data protection mechanisms, and candidates confuse encryption or access control (which protect data at rest/in transit) with differential privacy (which protects against inference from the model itself).
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Differential privacy
Differential privacy is the technique specifically designed to prevent reverse-engineering of individual records from a trained model by injecting calibrated statistical noise during training. It provides a mathematical guarantee that the presence or absence of any single patient's data has a bounded effect on the model's output, directly addressing the requirement that individual patient data cannot be inferred. This is the only option that operates at the training algorithm level to protect individual records.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Data encryption at rest
Why it's wrong here
Encryption at rest protects stored objects and volumes from unauthorised reading, but the training algorithm still learns from plaintext records, leaving them recoverable from model weights or outputs. Encryption is the correct control for securing data at rest, not for preventing inference-time leakage.
- ✗
AWS Identity and Access Management (IAM) policies
Why it's wrong here
IAM policies govern who may call AWS APIs and which resources they reach; they do not alter training mathematics, so a model can still memorise and expose patient records through inference. IAM is the right control for scoping SageMaker access, roles and permissions, not for preventing reconstruction of training data.
- ✓
Differential privacy
Why this is correct
Differential privacy adds calibrated noise during training, bounding any single patient's influence on learned parameters. This satisfies the requirement that individual records cannot be reverse-engineered, providing a formal privacy guarantee rather than mere access control or encryption at rest.
- ✗
SageMaker Model Monitor
Why it's wrong here
SageMaker Model Monitor detects data drift and quality issues in deployed endpoints; it does not prevent a model from memorising and leaking individual patient records. It is tempting because it monitors models, but the scenario needs a training-time privacy technique such as differential privacy.
Go deeper
Related to this question
About these practice questions
One of 862 original AIF-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Amazon Web Services exam blueprint
This AIF-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AIF-C01 exam.