Task Statement 5.1: Explain Methods to Secure AI Systems. AIF-C01 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A financial services company is deploying a customer-facing chatbot powered by Amazon Bedrock. The compliance team requires that the chatbot never reveal sensitive financial advice and that it only respond within approved topics. The chatbot is invoked through an API. What should the company configure to enforce these policies?

   • ACreate a Bedrock Guardrail with denied topics and content filters, and associate it with the model invocation.
   • BUse an IAM policy that restricts the Bedrock model to only generate responses on approved topics.
   • CEnable Amazon Macie to scan the chatbot's responses for sensitive data.
   • DConfigure the model's temperature and top_p parameters to limit the creativity of responses.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Why is data lineage important for AI systems?

   • AIt helps trace data errors back to their source and supports compliance auditing
   • BIt speeds up model training by optimizing GPU usage
   • CIt reduces the cost of storing data in S3
   • DIt automatically encrypts sensitive data in pipelines
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which AWS service is used to manage the encryption keys that protect AI training data stored in Amazon S3?

   • AAmazon Macie
   • BAWS Key Management Service (KMS)
   • CAWS Shield
   • DAWS WAF
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is using Amazon Bedrock Agents to automate customer service workflows. The agent needs to access a customer database to retrieve account information. The security team wants to ensure that the agent only has the minimum permissions necessary to perform its task. What should they configure?

   • ACreate a new IAM user for the agent and attach a policy that allows all database actions.
   • BAttach an IAM policy to the agent's execution role that grants only the required database actions.
   • CUse an S3 bucket policy to control the agent's access to the database.
   • DConfigure the agent's knowledge base to restrict access to the database.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the primary purpose of Amazon Macie?

   • ATo manage IAM roles and policies
   • BTo monitor network traffic for intrusions
   • CTo provide a firewall for web applications
   • DTo discover and protect sensitive data stored in Amazon S3
   Reveal Solution Discussion Select an answer first