5.0 Security, Compliance, and Governance for AI Solutions AIF-C01 Practice Quiz

• A. IAM roles provide temporary permissions for AI applications, services, or workloads to access AWS resources securely without long-term credentials.
• B. IAM policies define allowed or denied actions for AI workloads, users, services, and resources.
• C. Encryption protects AI-related data at rest and in transit, including datasets, prompts, model artifacts, logs, and outputs.
• D. Amazon Macie helps discover and protect sensitive data in Amazon S3 that may be used by AI systems.

IAM roles provide temporary permissions for AI applications, services, or workloads to access AWS resources securely without long-term credentials. This is the correct answer.

• A. Audit trails for AI interactions record prompts, responses, users, tools, and actions to support monitoring, investigation, and compliance.
• B. IAM policies define allowed or denied actions for AI workloads, users, services, and resources.
• C. RAG grounding connects AI responses to retrieved trusted knowledge sources to improve accuracy and reduce unsupported outputs.
• D. AWS Config records and evaluates AWS resource configurations to help support governance and compliance monitoring for AI-related resources.

IAM policies define allowed or denied actions for AI workloads, users, services, and resources. This is the correct answer.

• A. AWS Audit Manager for AI compliance is the best match when an AI security, compliance, or governance scenario requires this meaning: AWS Audit Manager helps automate evidence collection for audits and compliance assessments involving AI systems and supporting AWS resources.
• B. IAM roles for AI systems is the best match when an AI security, compliance, or governance scenario requires this meaning: IAM roles provide temporary permissions for AI applications, services, or workloads to access AWS resources securely without long-term credentials.
• C. AWS Artifact for compliance reports is the best match when an AI security, compliance, or governance scenario requires this meaning: AWS Artifact provides on-demand access to AWS compliance reports and certain agreements that can support AI governance reviews.
• D. AWS CloudTrail for AI governance is the best match when an AI security, compliance, or governance scenario requires this meaning: AWS CloudTrail records AWS account activity and API calls that can support auditing and governance for AI systems.

IAM roles provide temporary permissions for AI applications, services, or workloads to access AWS resources securely without long-term credentials. This matches the AI security and governance scenario without confusing IAM, encryption, private connectivity, guardrails, privacy, logging, grounding, governance tools, or compliance processes. This is the correct answer.

• A. Encryption for AI systems is the best match when an AI security, compliance, or governance scenario requires this meaning: Encryption protects AI-related data at rest and in transit, including datasets, prompts, model artifacts, logs, and outputs.
• B. Amazon Macie for AI data is the best match when an AI security, compliance, or governance scenario requires this meaning: Amazon Macie helps discover and protect sensitive data in Amazon S3 that may be used by AI systems.
• C. IAM policies for AI systems is the best match when an AI security, compliance, or governance scenario requires this meaning: IAM policies define allowed or denied actions for AI workloads, users, services, and resources.
• D. AWS PrivateLink for AI systems is the best match when an AI security, compliance, or governance scenario requires this meaning: AWS PrivateLink provides private connectivity to supported services without exposing traffic to the public internet.

IAM policies define allowed or denied actions for AI workloads, users, services, and resources. This matches the AI security and governance scenario without confusing IAM, encryption, private connectivity, guardrails, privacy, logging, grounding, governance tools, or compliance processes. This is the correct answer.

• A. RAG grounding is the best match when an AI security, compliance, or governance scenario requires this meaning: RAG grounding connects AI responses to retrieved trusted knowledge sources to improve accuracy and reduce unsupported outputs.
• B. AWS Config for AI governance is the best match when an AI security, compliance, or governance scenario requires this meaning: AWS Config records and evaluates AWS resource configurations to help support governance and compliance monitoring for AI-related resources.
• C. Amazon Inspector for AI workloads is the best match when an AI security, compliance, or governance scenario requires this meaning: Amazon Inspector helps identify software vulnerabilities and unintended network exposure in supported workloads that may support AI systems.
• D. Encryption for AI systems is the best match when an AI security, compliance, or governance scenario requires this meaning: Encryption protects AI-related data at rest and in transit, including datasets, prompts, model artifacts, logs, and outputs.

Encryption protects AI-related data at rest and in transit, including datasets, prompts, model artifacts, logs, and outputs. This matches the AI security and governance scenario without confusing IAM, encryption, private connectivity, guardrails, privacy, logging, grounding, governance tools, or compliance processes. This is the correct answer.

• A. A scenario points to Prompt injection security when AI access control, privacy, grounding, logging, compliance, or governance depends on this distinction: Prompt injection security addresses attempts to manipulate AI systems into ignoring instructions, revealing data, or taking unintended actions.
• B. A scenario points to Data leakage prevention when AI access control, privacy, grounding, logging, compliance, or governance depends on this distinction: Data leakage prevention reduces the risk that sensitive data will be exposed through prompts, training data, logs, outputs, or integrations.
• C. A scenario points to IAM roles for AI systems when AI access control, privacy, grounding, logging, compliance, or governance depends on this distinction: IAM roles provide temporary permissions for AI applications, services, or workloads to access AWS resources securely without long-term credentials.
• D. A scenario points to Audit trails for AI interactions when AI access control, privacy, grounding, logging, compliance, or governance depends on this distinction: Audit trails for AI interactions record prompts, responses, users, tools, and actions to support monitoring, investigation, and compliance.

IAM roles provide temporary permissions for AI applications, services, or workloads to access AWS resources securely without long-term credentials. This distinction matters because choosing a nearby concept would lead to the wrong access control, privacy protection, audit evidence, hallucination-control method, data governance rule, or compliance action. This is the correct answer.

• A. A scenario points to AWS Artifact for compliance reports when AI access control, privacy, grounding, logging, compliance, or governance depends on this distinction: AWS Artifact provides on-demand access to AWS compliance reports and certain agreements that can support AI governance reviews.
• B. A scenario points to AWS CloudTrail for AI governance when AI access control, privacy, grounding, logging, compliance, or governance depends on this distinction: AWS CloudTrail records AWS account activity and API calls that can support auditing and governance for AI systems.
• C. A scenario points to Data residency when AI access control, privacy, grounding, logging, compliance, or governance depends on this distinction: Data residency is the requirement or practice of storing and processing data in specific geographic locations.
• D. A scenario points to IAM policies for AI systems when AI access control, privacy, grounding, logging, compliance, or governance depends on this distinction: IAM policies define allowed or denied actions for AI workloads, users, services, and resources.

IAM policies define allowed or denied actions for AI workloads, users, services, and resources. This distinction matters because choosing a nearby concept would lead to the wrong access control, privacy protection, audit evidence, hallucination-control method, data governance rule, or compliance action. This is the correct answer.

• A. Governance review cadence is the correct AI security and governance interpretation when the access, data protection, audit, retention, or compliance decision depends on this exact meaning: Governance review cadence defines how often AI systems, policies, risks, controls, and compliance requirements are reviewed.
• B. IAM policies for AI systems is the correct AI security and governance interpretation when the access, data protection, audit, retention, or compliance decision depends on this exact meaning: IAM policies define allowed or denied actions for AI workloads, users, services, and resources.
• C. Encryption for AI systems is the correct AI security and governance interpretation when the access, data protection, audit, retention, or compliance decision depends on this exact meaning: Encryption protects AI-related data at rest and in transit, including datasets, prompts, model artifacts, logs, and outputs.
• D. IAM roles for AI systems is the correct AI security and governance interpretation when the access, data protection, audit, retention, or compliance decision depends on this exact meaning: IAM roles provide temporary permissions for AI applications, services, or workloads to access AWS resources securely without long-term credentials.

IAM roles provide temporary permissions for AI applications, services, or workloads to access AWS resources securely without long-term credentials. This applies the concept at the point where an AI Practitioner must identify the security, compliance, or governance control that best fits the AI solution. This is the correct answer.