AIF-C01 Question 199
Select 4Your organization is deploying a machine learning model on AWS to analyze sensitive healthcare data. To ensure the AI system is secure, which actions should you take to protect the data and the system during training and inference?
- A
Encrypt data at rest and in transit using AWS Key Management Service (KMS).
- B
Use AWS Identity and Access Management (IAM) to restrict access to the AI system and associated resources.
- C
Disable logging to avoid exposing sensitive data in logs.
- D
Implement endpoint protection by using Amazon SageMaker endpoint encryption.
- E
Enable multi-factor authentication (MFA) for all AWS accounts accessing the system.
Show answer and explanation
Correct answers: A, B, D, E
Explanation
To secure AI systems, especially when handling sensitive data like healthcare information, it is important to implement multiple layers of security. Encrypting data, restricting access with IAM, protecting endpoints, and using MFA are all critical measures to ensure data privacy and system integrity. Disabling logging, however, is not a recommended practice as it hinders auditing and monitoring capabilities.
- A. Correct.
Encrypting data at rest and in transit is a critical step in securing sensitive information and is a recommended best practice for AI systems handling sensitive data.
- B. Correct.
Using IAM to restrict access ensures that only authorized users or roles can interact with the AI system or access associated resources, reducing the risk of unauthorized access.
- C. Incorrect.
Disabling logging is not recommended as logs are essential for monitoring and auditing purposes. Instead, sensitive data in logs should be masked or encrypted.
- D. Correct.
Endpoint protection, such as SageMaker endpoint encryption, ensures secure data communication between the client and the deployed model, protecting against potential interception.
- E. Correct.
Enabling MFA adds an additional layer of security to AWS accounts, reducing the risk of unauthorized access even if credentials are compromised.