AWS AIF-C01

Security, Compliance and Governance

12 of 60 questions in the app

Securing AI systems

  1. Which AWS service is used to define who may invoke which Bedrock models? Easy
  2. What does the principle of least privilege state? Easy
  3. Which AWS service manages keys for encrypting data, such as training data in Amazon S3? Easy
  4. Which AWS service finds sensitive data such as personal information in Amazon S3? Easy
  5. What is AWS PrivateLink used for with AI services? Easy
  6. What does the AWS shared responsibility model describe? Easy

Data provenance

  1. What does data lineage describe? Easy
  2. Why are source references in generative AI answers important? Easy

Securing AI systems

  1. An application should only be allowed to invoke one specific Bedrock model. How is this implemented? Medium
  2. Which tasks does Amazon Bedrock AgentCore Identity take over? Medium

Governance processes

  1. A company uses (a) a public AI chat in the browser, (b) its own app via the Bedrock API with a ready-made model and (c) a model it has fine-tuned itself. How does the Generative AI Security Scoping Matrix classify these cases? Hard
  2. What typically changes when a company moves from an application on a pre-trained model to its own fine-tuned model? Hard

Certifications & exams

Which exam comes next?

You can already practise for 19 exams, and 21 are up for a vote. See all certifications with their official information, cast your vote or suggest your exam.

See all certifications