Task 3.2: Design, Implement, and Troubleshoot Security Controls for Compute Workloads SCS-C03 Practice Questions (Page 10)

Questions 46–50

1. 46foundation · easy

   What is a common attack against LLM applications that involves injecting malicious instructions into the model's input?

   • ACross-site scripting (XSS)
   • BPrompt injection
   • CSQL injection
   • DDenial of service (DoS)
   Reveal Solution Discussion Select an answer first
2. 47expert · hard

   A company is developing a generative AI application that uses an LLM to summarize confidential internal documents. The security team is concerned about 'sensitive information disclosure', where the model might inadvertently reveal confidential data in its responses. They also want to prevent the model from being used to generate phishing emails. What is the most comprehensive approach to mitigate these risks?

   • AUse a more advanced LLM that is guaranteed to not leak information.
   • BImplement output filtering to redact sensitive information and use Amazon Bedrock Guardrails to block harmful content like phishing attempts.
   • CDisable the model's ability to generate text and only allow it to classify documents.
   • DRestrict the model's training data to only non-confidential documents.
   Reveal Solution Discussion Select an answer first
4. 48foundation · easy

   Which AWS service uses a service role to access other AWS resources?

   • AAmazon VPC
   • BAWS Lambda
   • CAmazon S3
   • DAmazon EC2
   Reveal Solution Discussion Select an answer first
5. 49foundation · easy

   What is a benefit of integrating security scanning into a CI/CD pipeline?

   • AIt provides a browser-based shell for instances.
   • BIt eliminates the need for runtime monitoring.
   • CIt allows you to detect and remediate vulnerabilities early in the development lifecycle.
   • DIt automatically patches production instances.
   Reveal Solution Discussion Select an answer first
6. 50foundation · easy

   What is the purpose of an IAM instance profile?

   • ATo define the security group rules for the instance.
   • BTo configure the instance's operating system user accounts.
   • CTo store the private key for SSH access to the instance.
   • DTo associate an IAM role with an EC2 instance so it can make AWS API calls.
   Reveal Solution Discussion Select an answer first