Exams / AIF-C01 / Securing AI systems / Question 3
AIF-C01 practice question: Securing AI systems (3 of 5)
Security, Compliance, and Governance for AI Solutions A free question from our original AIF-C01 practice exam. Try it, then open the answer to see why each option is right or wrong.
A retailer builds a customer chatbot on Amazon Bedrock. Under the AWS shared responsibility model, which TWO tasks are the retailer's responsibility? (Choose two.)
Choose two answers.
- AA. Securing the physical data centres that host the models
- BB. Protecting its application against prompt injection
- CC. Patching the servers that run the Bedrock service
- DD. Granting least privilege IAM permissions to its users
- EE. Maintaining the networking hardware between AWS Regions
Show the answer and explanation
Answers: B, D
- A. Wrong: Physical security of the infrastructure is AWS's responsibility (security of the cloud).
- B. Right: Correct. AWS states that secure application development and preventing prompt injection are the customer's responsibility.
- C. Wrong: AWS manages and patches the infrastructure behind its managed services.
- D. Right: Correct. Customers control who can access their resources, including which models and data their users can use.
- E. Wrong: The global network and its hardware are part of AWS's responsibility.
Explanation
Under the shared responsibility model, AWS secures the cloud: the hardware, software, networking and facilities, including the Amazon Bedrock service itself. Customers secure what they put in the cloud: their applications, data, identity and access management, and protection against application-level threats such as prompt injection.
Study
Keep practising
Answer questions with a score at the end, or practise just this topic with the explanation after each one. No sign-up needed.