The answer is to use the HTTPS endpoint for the DetectEntities API and rely on Comprehend’s stateless design. This configuration satisfies both requirements because HTTPS ensures encryption in transit via TLS, protecting the text as it travels to the service, while Amazon Comprehend’s synchronous APIs like DetectEntities are inherently stateless—they process the input and return results without storing any text or metadata beyond the milliseconds needed to generate the response. On the AWS Certified AI Practitioner AIF-C01 exam, this question tests your understanding of Comprehend’s stateless processing model versus services like Amazon Textract or Amazon Translate that may offer optional data storage. A common trap is assuming you need to configure KMS or S3 bucket policies for encryption in transit, but HTTPS is the default and sufficient. Memory tip: think “HTTPS for the trip, stateless for the slip”—the data is encrypted while moving and slips away after processing.
AIF-C01 Practice Question: Security, Compliance and Governance for AI Solutions
This AIF-C01 practice question tests your understanding of security, compliance and governance for ai solutions. This is a configuration task: choose the command set that satisfies every stated requirement. Small differences — like 'secret' vs 'password' or 'transport input ssh' vs 'all' — change whether the answer is correct. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
A company is using Amazon Comprehend to extract entities from customer support tickets. The compliance team requires that the text sent to Comprehend be encrypted in transit and that Comprehend does not store any data beyond the processing time. How should the company configure the API call?
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use the HTTPS endpoint for the DetectEntities API and rely on Comprehend's stateless design
Option D is correct because Amazon Comprehend's DetectEntities API is inherently stateless—it does not store any text or results beyond the processing time required to generate the response. By using the HTTPS endpoint, the company ensures encryption in transit via TLS, satisfying the compliance requirement without additional configuration. Comprehend does not persist data from synchronous API calls, so no data is retained after the response is returned.
Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✗
Encrypt the text using AWS KMS before sending it to Comprehend
Why it's wrong here
Comprehend cannot process encrypted text; it requires plaintext input.
✗
Use the AWS SDK with server-side encryption enabled for the API call
Why it's wrong here
Server-side encryption applies to data at rest, not in transit; the API call payload is plaintext.
✗
Create a VPC endpoint for Comprehend and send requests over the private network
Why it's wrong here
VPC endpoint provides private connectivity but does not inherently encrypt the payload; HTTPS should be used.
✓
Use the HTTPS endpoint for the DetectEntities API and rely on Comprehend's stateless design
Why this is correct
HTTPS provides encryption in transit; Comprehend does not store data after processing.
Related concept
Read the scenario before looking for a memorised answer.
Common exam traps
Common exam trap: answer the scenario, not the keyword
The trap here is that candidates confuse encryption in transit with encryption at rest or data retention controls, leading them to overcomplicate the solution with KMS, SSE, or VPC endpoints when the simple use of HTTPS and the stateless nature of the API already meet the requirements.
Detailed technical explanation
How to think about this question
Amazon Comprehend's synchronous APIs (e.g., DetectEntities) process the request in memory and discard the text and results immediately after the response is sent; this stateless design is documented in the service FAQs. Encryption in transit is achieved by using HTTPS (TLS 1.2+), which is the default when calling the API endpoint (e.g., comprehend.<region>.amazonaws.com). For asynchronous jobs (e.g., StartEntitiesDetectionJob), data is stored temporarily in S3, but for real-time APIs, no storage occurs, making D the only option that satisfies both encryption in transit and no data retention.
KKey Concepts to Remember
Read the scenario before looking for a memorised answer.
Find the constraint that changes the correct option.
Eliminate answers that are true in general but not in this case.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.
Real-world example
How this comes up in practice
A healthcare organisation deploys an application with a public-facing web tier and a private database tier. The database subnet has no public IP and only accepts connections from the web tier's security group. Questions like this test whether you can design cloud network isolation using VNets/VPCs, subnets, and security group rules.
What to study next
Got this wrong? Here's your next step.
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
Security, Compliance and Governance for AI Solutions — This question tests Security, Compliance and Governance for AI Solutions — Read the scenario before looking for a memorised answer..
What is the correct answer to this question?
The correct answer is: Use the HTTPS endpoint for the DetectEntities API and rely on Comprehend's stateless design — Option D is correct because Amazon Comprehend's DetectEntities API is inherently stateless—it does not store any text or results beyond the processing time required to generate the response. By using the HTTPS endpoint, the company ensures encryption in transit via TLS, satisfying the compliance requirement without additional configuration. Comprehend does not persist data from synchronous API calls, so no data is retained after the response is returned.
What should I do if I get this AIF-C01 question wrong?
Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.
What is the key concept behind this question?
Read the scenario before looking for a memorised answer.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This AIF-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AIF-C01 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.