Exams / AIF-C01 / Governance and compliance / Question 1
AIF-C01 practice question: Governance and compliance (1 of 2)
Security, Compliance, and Governance for AI Solutions A free question from our original AIF-C01 practice exam. Try it, then open the answer to see why each option is right or wrong.
A healthcare company's governance team is setting up oversight for its AI workloads on AWS. Match each need to the AWS service that meets it.
Match each item to one answer. An answer can be used more than once, and some may not be used.
Items
- Record who called which Bedrock API, and when, for auditing
- Track how resource configurations change and check them against rules
- Continually scan workloads for software vulnerabilities
- Download AWS's own SOC and ISO compliance reports
- Get recommendations on cost, security gaps and service limits
Answers
- AA. Amazon Inspector
- BB. Amazon Macie
- CC. AWS Artifact
- DD. AWS CloudTrail
- EE. AWS Config
- FF. AWS Trusted Advisor
Show the answer and explanation
Correct matches
- Record who called which Bedrock API, and when, for auditing: D. AWS CloudTrail
- Track how resource configurations change and check them against rules: E. AWS Config
- Continually scan workloads for software vulnerabilities: A. Amazon Inspector
- Download AWS's own SOC and ISO compliance reports: C. AWS Artifact
- Get recommendations on cost, security gaps and service limits: F. AWS Trusted Advisor
About each answer
- A. An automated vulnerability management service that scans workloads. It matches the third need.
- B. Distractor: discovers sensitive data in Amazon S3. None of the needs asks for data discovery.
- C. Provides on-demand downloads of AWS security and compliance reports. It matches the fourth need.
- D. Records actions by users, roles and services as events. It matches the first need.
- E. Records resource configurations and how they change over time. It matches the second need.
- F. Inspects an environment and recommends ways to save money, improve availability and close security gaps. It matches the fifth need.
Explanation
Governance of AI workloads uses the same AWS tools as any other workload. CloudTrail provides an audit trail of API activity, Config tracks configuration and compliance, Inspector finds vulnerabilities, Artifact gives access to AWS compliance reports, and Trusted Advisor recommends improvements. Macie focuses on sensitive data in S3.
Study
Keep practising
Answer questions with a score at the end, or practise just this topic with the explanation after each one. No sign-up needed.