AWS AIF-C01
Security, Compliance and Governance
Securing AI systems
- Which AWS service is used to define who may invoke which Bedrock models? Easy
- What does the principle of least privilege state? Easy
- Which AWS service manages keys for encrypting data, such as training data in Amazon S3? Easy
- Which AWS service finds sensitive data such as personal information in Amazon S3? Easy
- What is AWS PrivateLink used for with AI services? Easy
- What does the AWS shared responsibility model describe? Easy
Data provenance
Securing AI systems
Governance processes
- A company uses (a) a public AI chat in the browser, (b) its own app via the Bedrock API with a ready-made model and (c) a model it has fine-tuned itself. How does the Generative AI Security Scoping Matrix classify these cases? Hard
- What typically changes when a company moves from an application on a pre-trained model to its own fine-tuned model? Hard