Drag a concept onto its matching description — or click a concept then click the description.
Concepts
Matches
Manage access to AWS resources
Encryption key management
Audit API calls
Isolate network resources
Discover and protect sensitive data
MLS-C01 Data Engineering Practice Question
Match each AWS security service to its function in ML.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
AWS KMS: Manages encryption keys for securing ML model data at rest and in transit
In ML, AWS KMS handles encryption keys, IAM manages access, CloudTrail provides audit logs. Common confusions arise because these services often work together, but each has a distinct primary function.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
AWS KMS: Manages encryption keys for securing ML model data at rest and in transit
Why this is correct
AWS KMS is used to create and control encryption keys, ensuring data security for ML models.
- ✓
AWS IAM: Manages user permissions and roles for accessing ML resources
Why this is correct
AWS IAM controls access to AWS services and resources, crucial for securing ML pipelines.
- ✓
AWS CloudTrail: Logs API calls for auditing ML pipeline activities
Why this is correct
AWS CloudTrail provides audit logs of API calls, helping track changes and access in ML workflows.
- ✗
AWS KMS: Provides identity-based access control for ML resources
Why it's wrong here
Incorrect — identity-based access control is provided by AWS IAM, not KMS.
- ✗
AWS IAM: Encrypts data during ML processing
Why it's wrong here
Incorrect — data encryption is handled by AWS KMS, not IAM.
- ✗
AWS CloudTrail: Monitors and enforces compliance rules for ML
Why it's wrong here
Incorrect — CloudTrail logs API calls; compliance monitoring and enforcement are typically done by AWS Config or Macie.
Go deeper
Related to this question
About these practice questions
Courseiva writes every MLS-C01 question from scratch — 1,672 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MLS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MLS-C01 exam.