Section-Based – Security, Compliance, and Governance for AI Solutions (AIF-C01)

A healthcare organization is in the process of migrating its patient management system to AWS. As part of their compliance and due diligence efforts, they must ensure that all AWS services and solutions they plan to use comply with various healthcare regulations, such as HIPAA and HITRUST. The organization also works with independent software vendors (ISVs) who need to verify compliance with the AWS services they intend to integrate. The organization must obtain security and compliance documentation from AWS to meet these regulatory requirements and demonstrate compliance to auditors.

Which AWS service can this organization access the necessary security and compliance reports?

A company has deployed a machine learning model for fraud detection in its e-commerce platform. The model has been running in production for several months. The company wants to ensure that it continues to perform accurately and reliably.

Which AWS services or features should the company use to monitor the model’s performance and incorporate human review when necessary? (Select TWO.)

A research institution has deployed a generative AI solution within its system. The compliance team must guarantee that the solution adheres to the necessary standards to protect the confidentiality, integrity, and availability of the data accessed by the AI. This is particularly important as the institution handles sensitive federal research data.

Which standards will ensure the solution meets US government regulatory requirements?

A data science team is working on a computer vision project that involves training a deep learning model using a large dataset of labeled images.

Which of the following best practices should the team follow to ensure the security and integrity of its training data? (Select TWO.)

A technology firm is implementing a new generative AI model for customer interactions and needs to ensure the system’s security against various vulnerabilities. The ML security team is tasked with identifying the most critical security vulnerabilities that could impact the AI model’s performance and integrity.

Which vulnerabilities should the firm prioritize? (Select THREE.)

A cloud security engineer is tasked with securing machine learning (ML) workloads in an AWS environment. The engineer needs to ensure that only specific applications and services can access Amazon SageMaker and Amazon RDS resources. These applications require controlled and limited access to these services to maintain security and minimize the risk of unauthorized access.

Which AWS service or feature can the engineer use to grant and manage these permissions effectively?

A company relies heavily on machine learning models for personalized recommendations and fraud detection. The company stores sensitive data in Amazon S3 buckets and needs a solution that automatically discovers, classifies, and protects this sensitive data.

Which of the following is the MOST suitable for this use case?

An AI startup uses generative AI models to create personalized content. The company develops and deploys these AI models using Amazon Sagemaker, Amazon Bedrock, and Amazon Q Business. Recently, there have been concerns about unauthorized access to sensitive AI training data and model parameters.

Which of the following services can help the startup audit AWS Service API activity related to their generative AI workloads?

An AI Specialist implements AI models to optimize a company’s network operations. To comply with industry standards, the specialist must document the models’ training and performance details for auditing purposes.

What AWS service can help the company fulfill this need?

A financial institution must ensure that data transferred from Amazon S3 to an Amazon SageMaker instance for training machine learning models does not leave the AWS network, adhering to strict compliance requirements.

Which AWS Service will meet this requirement most effectively?

A biotech company uses machine learning (ML) models on AWS to analyze sensitive genomic data. Before continuing its research, the company must review AWS’s adherence to industry data security and regulatory compliance regulations.

Which service can provide this information?

A healthcare organization is developing an AI-driven diagnostic application leveraging Amazon Bedrock. The application is deployed within a VPC that must comply with strict data privacy regulations. These regulations prohibit any internet connectivity to or from the VPC.

What AWS service or feature will satisfy these objectives?

A company is developing a new AI-driven application that must comply with various industry standards and regulations. To ensure compliance, they need to access and review AWS’s compliance documentation and agreements.

Which of the following should be used to obtain these documents?

A company has deployed a generative AI application using Amazon SageMaker. They must log and audit all API activities for compliance and security, including interactions with Amazon S3 and DynamoDB.

Which AWS service should the company use to achieve this?

A data scientist uses Amazon SageMaker for a machine learning project to classify images of plant species. The datasets need to be securely stored, easily accessible for training, and efficiently managed throughout the project.

Which of the following would you use to store and manage your dataset for this machine learning project?