Security, compliance, and governanceFull notesSummaryRingkasanStoriesPracticeAWS Services and Features for Securing AI Systems14 exam-style questions on this lesson.Question 1 of 14Under the shared responsibility model, which is the customer's responsibility?AThe virtualization layerBPhysical security of AWS data centersCIAM configuration and encryption of customer dataDThe host operating system of AWS hardwareCheck answerQuestion 2 of 14How does using more managed services affect the customer's share of security responsibility?AIt moves all responsibility to AWSBIt stays exactly the sameCIt increases itDIt decreases itCheck answerQuestion 3 of 14Before training, a company wants to discover PII, PHI, and financial data stored in its Amazon S3 buckets. Which service fits?AAmazon MacieBAmazon DetectiveCAWS Shield AdvancedDAmazon InspectorCheck answerQuestion 4 of 14A company's VPC must connect to Amazon Bedrock without any traffic going over the public internet. Which service fits?AAWS WAFBAWS PrivateLinkCAmazon CloudFrontDAmazon Route 53Check answerQuestion 5 of 14A company wants to manage encryption keys, choosing between AWS managed and customer managed keys. Which service fits?AAWS Security HubBAWS ArtifactCAWS KMSDAmazon GuardDutyCheck answerQuestion 6 of 14A company wants one dashboard of security findings across its accounts, with automated response playbooks. Which service fits?AAWS ConfigBAmazon MacieCAWS KMSDAWS Security HubCheck answerQuestion 7 of 14A company wants continuous detection of suspicious activity and unauthorized behavior in its AWS accounts. Which service fits?AAmazon GuardDutyBAmazon InspectorCAWS ArtifactDAWS Trusted AdvisorCheck answerQuestion 8 of 14A public AI chatbot is hit by a large distributed denial of service attack. Which service provides managed DDoS protection?ASageMaker Role ManagerBAWS Shield AdvancedCAWS KMSDAmazon MacieCheck answerQuestion 9 of 14After a security incident, the team needs to investigate its root cause with forensic analysis. Which service fits?AAWS ArtifactBAmazon InspectorCAmazon DetectiveDAmazon PollyCheck answerQuestion 10 of 14An administrator wants to find permissions broader than needed and move toward least privilege. Which feature fits?AAWS Shield AdvancedBAWS Network FirewallCAmazon MacieDIAM Access AnalyzerCheck answerQuestion 11 of 14A company wants employees to reach internal AI apps securely without a VPN, using zero trust principles. Which service fits?AAWS Verified AccessBAWS PrivateLinkCAWS ArtifactDAmazon GuardDutyCheck answerQuestion 12 of 14A team wants preconfigured SageMaker personas for data scientists and MLOps engineers. Which feature fits?AAWS ConfigBSageMaker Role ManagerCAmazon DetectiveDIAM Identity CenterCheck answerQuestion 13 of 14A company must inspect network traffic deeply to stop data exfiltration from its VPC. Which service fits?AAWS ArtifactBAmazon PollyCAWS Network FirewallDAmazon MacieCheck answerQuestion 14 of 14A public web app that fronts an AI model must be protected from web exploits, bots, and account takeover. Which service fits?AAmazon MacieBAmazon DetectiveCAWS KMSDAWS WAFCheck answerSecurity and Privacy Considerations for AI Systems12 exam-style questions on this lesson.Understanding Data and Model Lineage7 exam-style questions on this lesson.