ExamPark
Course menuAIF-C01

Exams / AIF-C01 / Securing AI systems / Question 2

AIF-C01 practice question: Securing AI systems (2 of 5)

Security, Compliance, and Governance for AI Solutions A free question from our original AIF-C01 practice exam. Try it, then open the answer to see why each option is right or wrong.

Last verified against current AWS documentation ·How we write our questions

A data science team is about to use thousands of files in Amazon S3 to fine-tune a model.

The security team first wants to find any files that contain personal data, such as names, addresses or card numbers, without anyone reading each file by hand.

Which AWS service should the team use?

Choose one answer.

  1. A. Amazon Macie, which discovers and reports sensitive data such as personal information in S3 buckets.
  2. B. Amazon Inspector, which scans EC2 instances and container images for software vulnerabilities.
  3. C. Amazon GuardDuty, which detects suspicious activity and threats across AWS accounts and workloads.
  4. D. AWS Config, which evaluates the configuration of S3 buckets, such as encryption settings, against rules.
Show the answer and explanation

Answer: A

  • A. Right: Correct. Macie uses managed and custom data identifiers to find personal and sensitive data inside S3 objects and reports where it is. Learn more: What is Amazon Macie? (opens in a new tab)
  • B. Wrong: Inspector finds vulnerabilities in software on compute resources and containers. It does not look inside data files for personal information.
  • C. Wrong: GuardDuty analyzes account activity and logs to detect threats, such as unusual access. It does not search the contents of files for personal data.
  • D. Wrong: Config checks whether settings such as bucket encryption follow your rules. It does not look inside the files for personal information.

Explanation

Amazon Macie is built to find sensitive data in S3 at scale and report it, which helps a team decide what to protect before using data for fine-tuning. The other services address vulnerabilities, threats and configuration rather than the contents of data files. This question tests matching a data-discovery need to the right security service.

Study

Keep practicing

Answer questions with a score at the end, or practice just this topic with the explanation after each one. No sign-up needed.

Take the free AIF-C01 practice examPractice Securing AI systemsAll Securing AI systems questions

Want more on Securing AI systems? The 5 full-length practice sets have 22 more Securing AI systems questions, 325 in all, none of them in the free exam. One payment of $14.99, no subscription. See the practice sets