ExamPark
Course menuAIF-C01

Exams / AIF-C01 / Securing AI systems / Question 3

AIF-C01 practice question: Securing AI systems (3 of 5)

Security, Compliance, and Governance for AI Solutions A free question from our original AIF-C01 practice exam. Try it, then open the answer to see why each option is right or wrong.

Last verified against current AWS documentation ·How we write our questions

A retailer builds a customer support chatbot on Amazon Bedrock and plans to include customer data in some prompts. Its engineers want to know which security tasks remain with the retailer rather than AWS.

Under the AWS shared responsibility model, which TWO are the retailer's responsibility? (Choose two.)

Choose two answers.

  1. A. Give application roles only the IAM permissions they need to invoke the specific Bedrock models they use.
  2. B. Decide which customer personal data may go into prompts, and mask or remove it before the request is sent.
  3. C. Patch and maintain the physical servers and networking that host the Bedrock model deployment environment.
  4. D. Secure the data centers where AWS runs Bedrock and control physical access to the buildings and racks.
  5. E. Keep the foundation model software and its serving stack patched and secure inside the Bedrock service.
Show the answer and explanation

Answers: A, B

  • A. Right: Correct. Managing who and what can access Bedrock is the customer's job, so roles should carry only the model permissions each application needs. Learn more: Data protection in Amazon Bedrock (opens in a new tab)
  • B. Right: Correct. What data enters a prompt is the customer's decision, and AWS advises keeping sensitive details such as customer email addresses out of free-text fields.
  • C. Wrong: This is AWS's responsibility. Securing the infrastructure that runs AWS services is part of the provider's side of the model.
  • D. Wrong: AWS protects its own data centers, so physical access controls are not the retailer's task. The retailer's controls sit on its content, identities and configuration.
  • E. Wrong: AWS operates and secures the model deployment environment. The retailer does not patch it, and model providers do not have access to Bedrock logs or customer prompts.

Explanation

Under the shared responsibility model, AWS secures the cloud infrastructure and the managed model environment, while customers control their own content, identities, configuration and data. For a Bedrock chatbot, that means IAM access and what data enters prompts. This question tests dividing security tasks between AWS and the customer.

Study

Keep practicing

Answer questions with a score at the end, or practice just this topic with the explanation after each one. No sign-up needed.

Take the free AIF-C01 practice examPractice Securing AI systemsAll Securing AI systems questions

Want more on Securing AI systems? The 5 full-length practice sets have 22 more Securing AI systems questions, 325 in all, none of them in the free exam. One payment of $14.99, no subscription. See the practice sets