AI0-001 AI Infrastructure and Technologies Practice Question
A security team needs to ensure that all data used for AI model training in the cloud is encrypted at rest and in transit. Which set of measures meets this requirement on AWS?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable S3 default encryption with SSE-S3 and use HTTPS for API calls
AWS provides KMS for at-rest encryption and TLS for in-transit encryption. These are standard practices to secure data across the AI pipeline.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Use Security Groups and Network ACLs
Why it's wrong here
These are firewall rules that control traffic but do not provide encryption.
- ✗
Use client-side encryption and store keys in AWS Secrets Manager
Why it's wrong here
Client-side encryption is at-rest, but in-transit encryption (TLS) is still needed; also, key management adds complexity.
- ✓
Enable S3 default encryption with SSE-S3 and use HTTPS for API calls
Why this is correct
SSE-S3 encrypts data at rest in S3; HTTPS encrypts data in transit. This covers both requirements.
- ✗
Enable VPC peering and use VPN connections
Why it's wrong here
VPC peering and VPN secure network connectivity but do not directly encrypt data at rest.
About these practice questions
One of 754 original AI0-001 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AI0-001 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AI0-001 exam.