Amazon AWS Certified AI Practitioner AIF-C01 Practice Test 106

Question 1050

A subscription services team must detect an AWS resource configuration that drifted from an approved baseline. Which listed concept or AWS capability directly matches that requirement?

  1. Security incident escalation
  2. AWS CloudTrail
  3. AWS Config
  4. AWS Artifact
  5. Control evidence retention

Explanation

Correct Answer

C:

This is the choice aligned with the subscription services requirement to detect an AWS resource configuration that drifted from an approved baseline: AWS Config evaluates supported resource configurations against rules and recorded changes. A realistic pilot must still check the qualification that configuration compliance does not verify the accuracy of model responses, especially where that could affect the acceptance criterion.

Incorrect Answers

A:

For the subscription services objective to detect an AWS resource configuration that drifted from an approved baseline, Security incident escalation addresses a different task—route possible model data exposure to established incident response teams. Its operating mechanism differs from that of AWS Config: incident workflows define detection, containment, investigation and reporting; this does not satisfy the requested outcome.

B:

For the subscription services objective to detect an AWS resource configuration that drifted from an approved baseline, AWS CloudTrail addresses a different task—identify which principal called a model-related AWS API at a particular time. Its operating mechanism differs from that of AWS Config: CloudTrail records supported AWS API activity for governance and audit analysis; this does not satisfy the requested outcome.

D:

For the subscription services objective to detect an AWS resource configuration that drifted from an approved baseline, AWS Artifact addresses a different task—obtain AWS compliance reports and agreements for vendor due diligence. Its operating mechanism differs from that of AWS Config: AWS Artifact provides access to AWS security and compliance documentation; this does not satisfy the requested outcome.

E:

For the subscription services objective to detect an AWS resource configuration that drifted from an approved baseline, Control evidence retention addresses a different task—preserve relevant change approvals and evaluation results for audits. Its operating mechanism differs from that of AWS Config: evidence retention records what was approved, when and by whom; this does not satisfy the requested outcome.

Question 1051

A new public-sector support initiative has one measurable requirement: route correction or deletion requests through an accountable data workflow. What should the team select?

  1. AWS shared responsibility model
  2. Data subject rights handling
  3. Periodic governance review
  4. Vendor contract and data-processing review

Explanation

Correct Answer

B:

This is the choice aligned with the public-sector support requirement to route correction or deletion requests through an accountable data workflow: privacy governance links requests to affected datasets and applicable legal requirements. A realistic pilot must still check the qualification that retraining a model immediately is not always the sole or lawful remedy, especially where that could affect the acceptance criterion.

Incorrect Answers

A:

For the public-sector support objective to route correction or deletion requests through an accountable data workflow, AWS shared responsibility model addresses a different task—identify who must configure access controls on a cloud-hosted AI workload. Its operating mechanism differs from that of Data subject rights handling: AWS secures underlying cloud infrastructure while customers remain responsible for their data and configurations; this does not satisfy the requested outcome.

C:

For the public-sector support objective to route correction or deletion requests through an accountable data workflow, Periodic governance review addresses a different task—reassess AI controls as models, datasets and business requirements change. Its operating mechanism differs from that of Data subject rights handling: scheduled control reviews test whether existing safeguards remain effective; this does not satisfy the requested outcome.

D:

For the public-sector support objective to route correction or deletion requests through an accountable data workflow, Vendor contract and data-processing review addresses a different task—check third-party model service terms before sharing customer data. Its operating mechanism differs from that of Data subject rights handling: contract review evaluates permitted processing, confidentiality and obligations; this does not satisfy the requested outcome.

Question 1052

In industrial maintenance, the planned workflow needs to route possible model data exposure to established incident response teams. Which option is aligned with this outcome?

  1. AWS Trusted Advisor
  2. Control evidence retention
  3. Security incident escalation
  4. AWS CloudTrail

Explanation

Correct Answer

C:

This is the choice aligned with the industrial maintenance requirement to route possible model data exposure to established incident response teams: incident workflows define detection, containment, investigation and reporting. A realistic pilot must still check the qualification that simply deleting an alert does not satisfy evidence preservation or notification duties, especially where that could affect the acceptance criterion.

Incorrect Answers

A:

For the industrial maintenance objective to route possible model data exposure to established incident response teams, AWS Trusted Advisor addresses a different task—review account-level recommendations about AWS best practices. Its operating mechanism differs from that of Security incident escalation: trusted Advisor provides checks and advice on topics such as security and costs; this does not satisfy the requested outcome.

B:

For the industrial maintenance objective to route possible model data exposure to established incident response teams, Control evidence retention addresses a different task—preserve relevant change approvals and evaluation results for audits. Its operating mechanism differs from that of Security incident escalation: evidence retention records what was approved, when and by whom; this does not satisfy the requested outcome.

D:

For the industrial maintenance objective to route possible model data exposure to established incident response teams, AWS CloudTrail addresses a different task—identify which principal called a model-related AWS API at a particular time. Its operating mechanism differs from that of Security incident escalation: CloudTrail records supported AWS API activity for governance and audit analysis; this does not satisfy the requested outcome.

Question 1053

A stakeholder in customer operations asks how to track how AI input data is collected, used, archived and destroyed. Which of the listed approaches fits that request?

  1. AI risk register
  2. Data lifecycle control
  3. Change approval for model releases
  4. AWS shared responsibility model

Explanation

Correct Answer

B:

This is the choice aligned with the customer operations requirement to track how AI input data is collected, used, archived and destroyed: lifecycle governance applies controls from collection through final disposal. A realistic pilot must still check the qualification that a secure storage location does not define lawful reuse or deletion, especially where that could affect the acceptance criterion.

Incorrect Answers

A:

For the customer operations objective to track how AI input data is collected, used, archived and destroyed, AI risk register addresses a different task—record and prioritize known harms before launching a new FM application. Its operating mechanism differs from that of Data lifecycle control: a risk register assigns likelihood, impact, controls and accountable owners; this does not satisfy the requested outcome.

C:

For the customer operations objective to track how AI input data is collected, used, archived and destroyed, Change approval for model releases addresses a different task—prevent unreviewed prompt and model versions from entering production. Its operating mechanism differs from that of Data lifecycle control: release governance ties proposed changes to test evidence and accountable approvals; this does not satisfy the requested outcome.

D:

For the customer operations objective to track how AI input data is collected, used, archived and destroyed, AWS shared responsibility model addresses a different task—identify who must configure access controls on a cloud-hosted AI workload. Its operating mechanism differs from that of Data lifecycle control: AWS secures underlying cloud infrastructure while customers remain responsible for their data and configurations; this does not satisfy the requested outcome.

Question 1054

An online retail proof of concept is intended to review account-level recommendations about AWS best practices. Which concept is most applicable to the stated goal?

  1. AWS CloudTrail
  2. AWS Trusted Advisor
  3. Control evidence retention
  4. Security incident escalation

Explanation

Correct Answer

B:

This is the choice aligned with the online retail requirement to review account-level recommendations about AWS best practices: trusted Advisor provides checks and advice on topics such as security and costs. A realistic pilot must still check the qualification that advisory findings are not a substitute for legal or regulatory assessment, especially where that could affect the acceptance criterion.

Incorrect Answers

A:

For the online retail objective to review account-level recommendations about AWS best practices, AWS CloudTrail addresses a different task—identify which principal called a model-related AWS API at a particular time. Its operating mechanism differs from that of AWS Trusted Advisor: CloudTrail records supported AWS API activity for governance and audit analysis; this does not satisfy the requested outcome.

C:

For the online retail objective to review account-level recommendations about AWS best practices, Control evidence retention addresses a different task—preserve relevant change approvals and evaluation results for audits. Its operating mechanism differs from that of AWS Trusted Advisor: evidence retention records what was approved, when and by whom; this does not satisfy the requested outcome.

D:

For the online retail objective to review account-level recommendations about AWS best practices, Security incident escalation addresses a different task—route possible model data exposure to established incident response teams. Its operating mechanism differs from that of AWS Trusted Advisor: incident workflows define detection, containment, investigation and reporting; this does not satisfy the requested outcome.

Question 1055

The university services acceptance criterion is to teach staff not to paste confidential records into unapproved AI tools. Which of these choices should be shortlisted first?

  1. Generative AI Security Scoping Matrix
  2. Data retention schedule
  3. Change approval for model releases
  4. Employee AI safety training

Explanation

Correct Answer

D:

This is the choice aligned with the university services requirement to teach staff not to paste confidential records into unapproved AI tools: training reinforces acceptable usage, data handling and incident reporting. A realistic pilot must still check the qualification that education complements but cannot replace enforceable technical controls, especially where that could affect the acceptance criterion.

Incorrect Answers

A:

For the university services objective to teach staff not to paste confidential records into unapproved AI tools, Generative AI Security Scoping Matrix addresses a different task—clarify which party operates and secures each layer of an FM solution. Its operating mechanism differs from that of Employee AI safety training: the scoping matrix helps frame ownership and security considerations for differing GenAI adoption patterns; this does not satisfy the requested outcome.

B:

For the university services objective to teach staff not to paste confidential records into unapproved AI tools, Data retention schedule addresses a different task—delete stored prompts and artifacts after the authorized retention period. Its operating mechanism differs from that of Employee AI safety training: retention rules establish how long data is kept and when it must be disposed of; this does not satisfy the requested outcome.

C:

For the university services objective to teach staff not to paste confidential records into unapproved AI tools, Change approval for model releases addresses a different task—prevent unreviewed prompt and model versions from entering production. Its operating mechanism differs from that of Employee AI safety training: release governance ties proposed changes to test evidence and accountable approvals; this does not satisfy the requested outcome.

Question 1056

A logistics team must clarify which party operates and secures each layer of an FM solution. Which listed concept or AWS capability directly matches that requirement?

  1. AWS shared responsibility model
  2. Periodic governance review
  3. Generative AI Security Scoping Matrix
  4. Change approval for model releases

Explanation

Correct Answer

C:

This is the choice aligned with the logistics requirement to clarify which party operates and secures each layer of an FM solution: the scoping matrix helps frame ownership and security considerations for differing GenAI adoption patterns. A realistic pilot must still check the qualification that it is guidance, not a replacement for the shared responsibility model or legal advice, especially where that could affect the acceptance criterion.

Incorrect Answers

A:

For the logistics objective to clarify which party operates and secures each layer of an FM solution, AWS shared responsibility model addresses a different task—identify who must configure access controls on a cloud-hosted AI workload. Its operating mechanism differs from that of Generative AI Security Scoping Matrix: AWS secures underlying cloud infrastructure while customers remain responsible for their data and configurations; this does not satisfy the requested outcome.

B:

For the logistics objective to clarify which party operates and secures each layer of an FM solution, Periodic governance review addresses a different task—reassess AI controls as models, datasets and business requirements change. Its operating mechanism differs from that of Generative AI Security Scoping Matrix: scheduled control reviews test whether existing safeguards remain effective; this does not satisfy the requested outcome.

D:

For the logistics objective to clarify which party operates and secures each layer of an FM solution, Change approval for model releases addresses a different task—prevent unreviewed prompt and model versions from entering production. Its operating mechanism differs from that of Generative AI Security Scoping Matrix: release governance ties proposed changes to test evidence and accountable approvals; this does not satisfy the requested outcome.

Question 1057

A new professional-services initiative has one measurable requirement: keep regulated data processing within explicitly authorized geographic boundaries. What should the team select?

  1. Generative AI Security Scoping Matrix
  2. AI use policy
  3. Periodic governance review
  4. Data residency policy
  5. Data retention schedule

Explanation

Correct Answer

D:

This is the choice aligned with the professional-services requirement to keep regulated data processing within explicitly authorized geographic boundaries: residency governance maps storage and processing locations to the organization's requirements. A realistic pilot must still check the qualification that choosing a nearby Region without checking service behavior is not a compliance determination, especially where that could affect the acceptance criterion.

Incorrect Answers

A:

For the professional-services objective to keep regulated data processing within explicitly authorized geographic boundaries, Generative AI Security Scoping Matrix addresses a different task—clarify which party operates and secures each layer of an FM solution. Its operating mechanism differs from that of Data residency policy: the scoping matrix helps frame ownership and security considerations for differing GenAI adoption patterns; this does not satisfy the requested outcome.

B:

For the professional-services objective to keep regulated data processing within explicitly authorized geographic boundaries, AI use policy addresses a different task—set permitted and prohibited business uses of generative AI. Its operating mechanism differs from that of Data residency policy: an organizational AI policy establishes usage rules, review and exception processes; this does not satisfy the requested outcome.

C:

For the professional-services objective to keep regulated data processing within explicitly authorized geographic boundaries, Periodic governance review addresses a different task—reassess AI controls as models, datasets and business requirements change. Its operating mechanism differs from that of Data residency policy: scheduled control reviews test whether existing safeguards remain effective; this does not satisfy the requested outcome.

E:

For the professional-services objective to keep regulated data processing within explicitly authorized geographic boundaries, Data retention schedule addresses a different task—delete stored prompts and artifacts after the authorized retention period. Its operating mechanism differs from that of Data residency policy: retention rules establish how long data is kept and when it must be disposed of; this does not satisfy the requested outcome.

Question 1058

In media publishing, the planned workflow needs to preserve relevant change approvals and evaluation results for audits. Which option is aligned with this outcome?

  1. AWS Trusted Advisor
  2. Control evidence retention
  3. AWS Artifact
  4. AWS Config

Explanation

Correct Answer

B:

This is the choice aligned with the media publishing requirement to preserve relevant change approvals and evaluation results for audits: evidence retention records what was approved, when and by whom. A realistic pilot must still check the qualification that an undocumented verbal approval cannot reliably establish past compliance, especially where that could affect the acceptance criterion.

Incorrect Answers

A:

For the media publishing objective to preserve relevant change approvals and evaluation results for audits, AWS Trusted Advisor addresses a different task—review account-level recommendations about AWS best practices. Its operating mechanism differs from that of Control evidence retention: trusted Advisor provides checks and advice on topics such as security and costs; this does not satisfy the requested outcome.

C:

For the media publishing objective to preserve relevant change approvals and evaluation results for audits, AWS Artifact addresses a different task—obtain AWS compliance reports and agreements for vendor due diligence. Its operating mechanism differs from that of Control evidence retention: AWS Artifact provides access to AWS security and compliance documentation; this does not satisfy the requested outcome.

D:

For the media publishing objective to preserve relevant change approvals and evaluation results for audits, AWS Config addresses a different task—detect an AWS resource configuration that drifted from an approved baseline. Its operating mechanism differs from that of Control evidence retention: AWS Config evaluates supported resource configurations against rules and recorded changes; this does not satisfy the requested outcome.

Question 1059

A stakeholder in manufacturing quality asks how to obtain AWS compliance reports and agreements for vendor due diligence. Which of the listed approaches fits that request?

  1. AWS CloudTrail
  2. AWS Artifact
  3. AWS Trusted Advisor
  4. Control evidence retention

Explanation

Correct Answer

B:

This is the choice aligned with the manufacturing quality requirement to obtain AWS compliance reports and agreements for vendor due diligence: AWS Artifact provides access to AWS security and compliance documentation. A realistic pilot must still check the qualification that downloading a report does not certify a customer's own workload configuration, especially where that could affect the acceptance criterion.

Incorrect Answers

A:

For the manufacturing quality objective to obtain AWS compliance reports and agreements for vendor due diligence, AWS CloudTrail addresses a different task—identify which principal called a model-related AWS API at a particular time. Its operating mechanism differs from that of AWS Artifact: CloudTrail records supported AWS API activity for governance and audit analysis; this does not satisfy the requested outcome.

C:

For the manufacturing quality objective to obtain AWS compliance reports and agreements for vendor due diligence, AWS Trusted Advisor addresses a different task—review account-level recommendations about AWS best practices. Its operating mechanism differs from that of AWS Artifact: trusted Advisor provides checks and advice on topics such as security and costs; this does not satisfy the requested outcome.

D:

For the manufacturing quality objective to obtain AWS compliance reports and agreements for vendor due diligence, Control evidence retention addresses a different task—preserve relevant change approvals and evaluation results for audits. Its operating mechanism differs from that of AWS Artifact: evidence retention records what was approved, when and by whom; this does not satisfy the requested outcome.

Question 1060

An online retail proof of concept is intended to give stakeholders an understandable account of an AI system's intended use. Which concept is most applicable to the stated goal?

  1. Periodic governance review
  2. AI risk register
  3. Transparency documentation
  4. Compliance monitoring dashboard

Explanation

Correct Answer

C:

This is the choice aligned with the online retail requirement to give stakeholders an understandable account of an AI system's intended use: transparency records purpose, limitations, oversight and user recourse. A realistic pilot must still check the qualification that publishing documentation cannot replace actual performance and harm monitoring, especially where that could affect the acceptance criterion.

Incorrect Answers

A:

For the online retail objective to give stakeholders an understandable account of an AI system's intended use, Periodic governance review addresses a different task—reassess AI controls as models, datasets and business requirements change. Its operating mechanism differs from that of Transparency documentation: scheduled control reviews test whether existing safeguards remain effective; this does not satisfy the requested outcome.

B:

For the online retail objective to give stakeholders an understandable account of an AI system's intended use, AI risk register addresses a different task—record and prioritize known harms before launching a new FM application. Its operating mechanism differs from that of Transparency documentation: a risk register assigns likelihood, impact, controls and accountable owners; this does not satisfy the requested outcome.

D:

For the online retail objective to give stakeholders an understandable account of an AI system's intended use, Compliance monitoring dashboard addresses a different task—surface overdue control checks and unresolved AI governance findings. Its operating mechanism differs from that of Transparency documentation: continuous monitoring tracks control status and timely remediation ownership; this does not satisfy the requested outcome.

AWS Certified AI Practitioner AIF-C01 Practice Tests