AIF-C01 Practice Question: Security, Compliance, and Governance for AI Solutions
A machine learning team uses Amazon SageMaker to train and deploy models. They need to ensure that only approved base models from the AWS Marketplace are used. Which feature should they use to enforce this policy?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
IAM policies that allow only specific model package ARNs from the AWS Marketplace
SageMaker Role Manager helps administrators create least-privilege IAM roles, but it does not restrict which models can be used. Model access in SageMaker is controlled via IAM policies on the CreateTrainingJob and CreateModel APIs, combined with resource-level permissions.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
SageMaker Role Manager
Why it's wrong here
Role Manager creates roles with permissions, but does not restrict which specific models can be used.
- ✓
IAM policies that allow only specific model package ARNs from the AWS Marketplace
Why this is correct
By using resource-level permissions in IAM, you can restrict users to only use certain model package ARNs.
- ✗
AWS Config rules to detect non-compliant models
Why it's wrong here
AWS Config can detect non-compliant resources after the fact, but does not prevent the use of unauthorized models.
- ✗
SageMaker Model Registry
Why it's wrong here
Model Registry manages model versions, but does not enforce which base models are allowed.
Go deeper
Related to this question
About these practice questions
One of 619 original AIF-C01 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AIF-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AIF-C01 exam.