AIF-C01 Question 201
Select 3A company is deploying a machine learning model on AWS to process sensitive customer data. They want to ensure the AI system is secure by restricting network access, encrypting data at rest, and monitoring for sensitive data leakage. Which combination of AWS services and features should the company use?
- A
AWS PrivateLink to restrict network access to the model endpoint
- B
Amazon Macie to monitor and discover sensitive data
- C
AWS Key Management Service (KMS) to manage encryption keys for data at rest
- D
AWS Lambda to automatically scale the model endpoint
- E
Amazon S3 Transfer Acceleration to speed up data uploads
Show answer and explanation
Correct answers: A, B, C
Explanation
To secure an AI system processing sensitive data, you need to address network security, data encryption, and data monitoring. AWS PrivateLink ensures private network access, Amazon Macie helps detect and monitor sensitive data, and AWS KMS enables encryption of data at rest. These services collectively provide a robust security framework for the AI system.
- A. Correct.
AWS PrivateLink is designed to restrict network access by enabling private connectivity between VPCs and AWS services without exposing traffic to the public internet. This ensures the AI system's network traffic is secure.
- B. Correct.
Amazon Macie is a data security service that uses machine learning to discover, classify, and protect sensitive data. It is ideal for monitoring sensitive data leakage in this scenario.
- C. Correct.
AWS Key Management Service (KMS) enables encryption and secure management of keys for sensitive data at rest, ensuring data security.
- D. Incorrect.
AWS Lambda is a serverless compute service that is not directly related to securing an AI system. Instead, it is used for event-driven computing and scaling applications.
- E. Incorrect.
Amazon S3 Transfer Acceleration speeds up data uploads but does not provide security features like network restriction, encryption, or sensitive data monitoring.