AIF-C01 Question 210
Select 3You are designing an AI system that processes sensitive customer data, including financial transactions and personal identifiable information (PII). Which of the following measures should you implement to ensure the security and privacy of the data handled by your AI system?
- A
Enable encryption for data both at rest and in transit.
- B
Use role-based access control (RBAC) to restrict access to sensitive data.
- C
Disable logging of all API activity to reduce storage costs.
- D
Implement network-level protections such as AWS WAF to guard against external threats.
- E
Train the AI model using unencrypted raw customer data for better performance.
Show answer and explanation
Correct answers: A, B, D
Explanation
To secure AI systems that handle sensitive customer data, AWS recommends using encryption to protect data at rest and in transit, implementing access controls such as RBAC to limit data access, and protecting infrastructure with network-level security measures like AWS WAF. These practices align with AWS security best practices and help mitigate risks associated with unauthorized access or external threats.
- A. Correct.
Encryption at rest and in transit protects sensitive data from unauthorized access and ensures compliance with various security standards.
- B. Correct.
Role-based access control ensures only authorized users or systems can access sensitive data, reducing the risk of unauthorized access.
- C. Incorrect.
Disabling logging of API activity eliminates critical audit trails, making it harder to detect and investigate security incidents.
- D. Correct.
Network-level protections such as AWS WAF can help prevent external threats, including SQL injection and cross-site scripting attacks, from compromising your AI system.
- E. Incorrect.
Training the AI model on unencrypted raw customer data exposes the data to potential breaches and does not align with best security practices.