Home › Certifications › AWS Certified AI Practitioner AIF-C01 › Security, Compliance, and Governance for AI Solutions
14 multiple-choice questions and 11 flashcards on Security, Compliance, and Governance for AI Solutions, about 9% of the AWS Certified AI Practitioner AIF-C01 bank. Every one carries a written rationale.
Security, Compliance, and Governance for AI Solutions is one of 5 chapters in CoStudy's AWS Certified AI Practitioner (AIF-C01) bank, and it holds 14 of the bank's 150 multiple-choice questions — roughly 9% of the total. That proportion is not arbitrary: chapters follow the certifying body's published exam outline, and the number of questions in each is set by that domain's published weight, so the share of your practice time this chapter takes matches the share of the real exam it accounts for.
Studying by chapter is worth doing once you have a diagnostic score. A single overall percentage tells you whether you are close; it does not tell you which domain is dragging. Working a weak chapter in isolation, and re-testing it in isolation, is the fastest way to move a score that has stalled — and it is why the mock exams in CoStudy report by domain rather than as one number.
4 questions drawn from this chapter, with the full rationale shown — the controlling principle behind the right answer, and why each wrong option tempts and fails.
Which BEST captures the data-privacy model for Amazon Bedrock?
Answer: C — Customer prompts are not used to train FMs and stay in your account
A) Bedrock does NOT share prompts with providers. B) False. C) Correct — customer data is not used to train FMs; encrypted in transit + at rest. D) Nonsense.
A team wants Bedrock invocation logs (prompt + completion) delivered to S3 for audit. What fits BEST?
Answer: A — Enable Bedrock model-invocation logging with an S3 destination
A) Correct — Bedrock model-invocation logging captures prompts + completions to S3 / CloudWatch. B) CloudTrail logs API calls, not payloads. C) Flow logs capture network metadata, not payloads. D) GuardDuty finds threats, not audit trails.
Which Bedrock Guardrails capability helps defend against prompt-injection attacks?
Answer: D — Prompt-attack filters for jailbreak and injection patterns
A) Capacity reservation, unrelated. B) Audit logging. C) PII redaction is Guardrails, but not the injection defense. D) Correct — prompt-attack filters detect and block jailbreaks and injection patterns.
Where can you obtain AWS audit reports (SOC, PCI, ISO) for compliance reviews?
Answer: D — AWS Artifact compliance portal
A) API audit trail, not audit reports. B) Application logs. C) Cost/security best-practice checks. D) Correct — Artifact is the self-serve portal for AWS audit reports (SOC, PCI, ISO) and customer agreements.
4 cards from the 11 in this chapter.
HIPAA in AI workloads?
Use HIPAA-eligible services (Comprehend Medical, Bedrock with BAA). Encrypt PHI.
Data privacy with foundation models?
Bedrock doesn't use customer data to retrain models. Customer keeps data ownership.
Encryption for AI workloads?
Encrypt data at rest (S3, EBS) and in transit. KMS keys for AI services.
Model governance?
Track model lineage, versions, approvals. SageMaker Model Cards, Model Registry.
These are a sample. The full Security, Compliance, and Governance for AI Solutions chapter runs 25 items with per-chapter progress tracking, on the web and in the iOS app.
Open AWS Certified AI Practitioner AIF-C01 in CoStudy →
All AWS Certified AI Practitioner AIF-C01 practice questions →