AWS Certified AI Practitioner AIF-C01 Practice Test 49
Question 480
A security team wants to discover possible personally identifiable information in an S3 corpus for an AI project. Before approving a rollout, an architect suggests Use a CloudTrail event count as a list of exposed personal fields. Which mismatch should be documented for this precise design?
- Speech synthesis is not stored-object sensitive-data scanning
- API request counts do not identify PII within stored objects
- Access policy limits access but does not analyze content for PII
- Macie can find sensitive data patterns in S3 and produce findings
Explanation
Correct Answer
B:This is the actual failure mode of the proposed approach: Use a CloudTrail event count as a list of exposed personal fields. API request counts do not identify PII within stored objects
Incorrect Answers
A:This limitation concerns Use Amazon Polly voice generation to find customer PII; it does not diagnose the proposed Use a CloudTrail event count as a list of exposed personal fields approach.
C:This limitation concerns Use IAM roles alone as a sensitive-data classifier; it does not diagnose the proposed Use a CloudTrail event count as a list of exposed personal fields approach.
D:Macie can find sensitive data patterns in S3 and produce findings This explains the recommended design, but it is not the requested diagnosis of Use a CloudTrail event count as a list of exposed personal fields.
Question 481
A finance team must protect stored AI training data with customer-controlled cryptographic keys. Before approving a rollout, an architect suggests Use public model guardrail word lists as the KMS key policy. Which mismatch should be documented for this precise design?
- Text filters do not manage cryptographic keys
- KMS helps manage keys used by integrated services for stored data
- Transport encryption does not protect stored data by itself
- CloudTrail records actions rather than encrypting objects
Explanation
Correct Answer
A:This is the actual failure mode of the proposed approach: Use public model guardrail word lists as the KMS key policy. Text filters do not manage cryptographic keys
Incorrect Answers
B:KMS helps manage keys used by integrated services for stored data This explains the recommended design, but it is not the requested diagnosis of Use public model guardrail word lists as the KMS key policy.
C:This limitation concerns Rely on HTTPS alone as at-rest encryption; it does not diagnose the proposed Use public model guardrail word lists as the KMS key policy approach.
D:This limitation concerns Use CloudTrail as the encryption engine; it does not diagnose the proposed Use public model guardrail word lists as the KMS key policy approach.
Question 482
A procurement team asks for AWS third-party compliance reports and agreements. During a design review, someone proposes Use CloudTrail events as an external auditor's signed report. Which technical objection is specifically relevant to this proposal?
- Model documentation is not AWS provider certification evidence
- Artifact provides access to AWS compliance reports and agreements
- Config focuses on resource configuration, not compliance report distribution
- Account activity logs do not replace provider audit reports
Explanation
Correct Answer
D:This is the actual failure mode of the proposed approach: Use CloudTrail events as an external auditor's signed report. Account activity logs do not replace provider audit reports
Incorrect Answers
A:This limitation concerns Assume a customer-authored model card constitutes AWS SOC evidence; it does not diagnose the proposed Use CloudTrail events as an external auditor's signed report approach.
B:Artifact provides access to AWS compliance reports and agreements This explains the recommended design, but it is not the requested diagnosis of Use CloudTrail events as an external auditor's signed report.
C:This limitation concerns Use AWS Config as the repository for signed AWS third-party audits; it does not diagnose the proposed Use CloudTrail events as an external auditor's signed report approach.
Question 483
Compliance analysts need evidence showing whether configured AWS controls were assessed over time. During a design review, someone proposes Use translation service output as control attestation. Which technical objection is specifically relevant to this proposal?
- Artifact reports alone do not assess each customer's current configuration
- Audit Manager helps collect and manage evidence for audit assessments
- Billing history is not a security control assessment
- Translated text does not provide control evidence
Explanation
Correct Answer
D:This is the actual failure mode of the proposed approach: Use translation service output as control attestation. Translated text does not provide control evidence
Incorrect Answers
A:This limitation concerns Treat AWS Artifact documents as a real-time report of every customer control; it does not diagnose the proposed Use translation service output as control attestation approach.
B:Audit Manager helps collect and manage evidence for audit assessments This explains the recommended design, but it is not the requested diagnosis of Use translation service output as control attestation.
C:This limitation concerns Use only invoice data as proof all controls passed; it does not diagnose the proposed Use translation service output as control attestation approach.
Question 484
A business agent should call external APIs on behalf of users without sharing one permanent master credential. After selecting the recommended approach, which evidence MOST DIRECTLY demonstrates that the actual required outcome has been achieved?
- A reviewed design record approves this competing approach: Use vector similarity as proof of permission to invoke an API
- A component test invokes this alternate approach successfully: Rely on a prompt statement that the user is authorized
- Caller-scoped credentials are enforced and cross-user tool calls are denied
- A system inventory lists this competing approach as active: Give all agents a permanent account-wide administrative secret
Explanation
Correct Answer
C:Caller-scoped credentials are enforced and cross-user tool calls are denied. This checks the business result rather than just a configured feature.
Incorrect Answers
A:Semantic relevance does not establish the caller's authority Design approval is not evidence that the alternative meets the actual requirement.
B:Plain language is not a cryptographically verified identity A component invocation does not validate the necessary end-to-end outcome.
D:Shared high-privilege credentials create excessive blast radius An active setting cannot independently prove the requested business outcome.
Question 485
An internal service must invoke supported AWS endpoints without traversing the public internet path. Which option BEST meets the business requirement?
- Move the API key into a prompt and call a public endpoint
- Use model temperature as a routing control
- Use AWS PrivateLink or an appropriate private endpoint where supported
- Assume a public S3 URL is equivalent to a VPC endpoint
Explanation
Correct Answer
C:Private connectivity can keep service traffic on AWS networking paths The specified scenario makes this the most appropriate approach.
Incorrect Answers
A:Embedding credentials does not establish private connectivity This prevents the approach from meeting the stated requirement.
B:Sampling settings do not change network connectivity This prevents the approach from meeting the stated requirement.
D:Public endpoints do not inherently supply the intended private network boundary This prevents the approach from meeting the stated requirement.
Question 486
A regulated assistant must show where each policy answer originated. Before approving a rollout, an architect suggests Use a service uptime metric as proof every fact has a source. Which mismatch should be documented for this precise design?
- Data lineage supports audits and tracing unsupported outputs
- Confidence does not identify the underlying document
- Availability does not establish informational origins
- Removing provenance weakens answer verification
Explanation
Correct Answer
C:This is the actual failure mode of the proposed approach: Use a service uptime metric as proof every fact has a source. Availability does not establish informational origins
Incorrect Answers
A:Data lineage supports audits and tracing unsupported outputs This explains the recommended design, but it is not the requested diagnosis of Use a service uptime metric as proof every fact has a source.
B:This limitation concerns Use only the model's confidence as source documentation; it does not diagnose the proposed Use a service uptime metric as proof every fact has a source approach.
D:This limitation concerns Strip source identifiers to make prompts shorter; it does not diagnose the proposed Use a service uptime metric as proof every fact has a source approach.
Question 487
A finance team must protect stored AI training data with customer-controlled cryptographic keys. A pilot uses this approach instead: Rely on HTTPS alone as at-rest encryption. Which limitation MOST DIRECTLY explains why the requirement is not met?
- Text filters do not manage cryptographic keys
- KMS helps manage keys used by integrated services for stored data
- CloudTrail records actions rather than encrypting objects
- Transport encryption does not protect stored data by itself
Explanation
Correct Answer
D:This is the actual failure mode of the proposed approach: Rely on HTTPS alone as at-rest encryption. Transport encryption does not protect stored data by itself
Incorrect Answers
A:This limitation concerns Use public model guardrail word lists as the KMS key policy; it does not diagnose the proposed Rely on HTTPS alone as at-rest encryption approach.
B:KMS helps manage keys used by integrated services for stored data This explains the recommended design, but it is not the requested diagnosis of Rely on HTTPS alone as at-rest encryption.
C:This limitation concerns Use CloudTrail as the encryption engine; it does not diagnose the proposed Rely on HTTPS alone as at-rest encryption approach.
Question 488
An organization must honor regional data residency and retention rules for AI interaction logs. Which option BEST meets the business requirement?
- Use model output length as a data residency setting
- Keep every prompt and response forever by default
- Define storage regions, retention periods and access controls for relevant data
- Assume encryption makes retention and residency irrelevant
Explanation
Correct Answer
C:Governance requires knowing where data is stored and when it is removed The specified scenario makes this the most appropriate approach.
Incorrect Answers
A:Token limits do not choose storage regions This prevents the approach from meeting the stated requirement.
B:Indefinite retention may conflict with minimization policies This prevents the approach from meeting the stated requirement.
D:Encryption does not change legal location or deletion obligations This prevents the approach from meeting the stated requirement.
Question 489
An inference application should only invoke its designated Bedrock model and read an approved S3 prefix. During a design review, someone proposes Put an access policy only in the chatbot system prompt. Which technical objection is specifically relevant to this proposal?
- Least privilege limits unintended model and data access
- Broad permissions expose unrelated resources
- Public access is incompatible with restricted source data
- Prompt words cannot enforce AWS API authorization
Explanation
Correct Answer
D:This is the actual failure mode of the proposed approach: Put an access policy only in the chatbot system prompt. Prompt words cannot enforce AWS API authorization
Incorrect Answers
A:Least privilege limits unintended model and data access This explains the recommended design, but it is not the requested diagnosis of Put an access policy only in the chatbot system prompt.
B:This limitation concerns Grant administrator privileges to every inference role; it does not diagnose the proposed Put an access policy only in the chatbot system prompt approach.
C:This limitation concerns Use a public S3 bucket as the security boundary; it does not diagnose the proposed Put an access policy only in the chatbot system prompt approach.
Question 490
An AI chat app exchanges sensitive requests with a backend over a public network. After selecting the recommended approach, which evidence MOST DIRECTLY demonstrates that the actual required outcome has been achieved?
- A component test invokes this alternate approach successfully: Use only at-rest encryption and send plaintext HTTP
- A reviewed design record approves this competing approach: Treat a model safety prompt as transport confidentiality
- A system inventory lists this competing approach as active: Rely on S3 bucket versioning as the network encryption
- Network tests confirm encrypted connections and no plaintext endpoints
Explanation
Correct Answer
D:Network tests confirm encrypted connections and no plaintext endpoints. This checks the business result rather than just a configured feature.
Incorrect Answers
A:Stored-data encryption does not cover unencrypted transit A component invocation does not validate the necessary end-to-end outcome.
B:Instructions to a model cannot encrypt network packets Design approval is not evidence that the alternative meets the actual requirement.
C:Versioning protects object history rather than network sessions An active setting cannot independently prove the requested business outcome.