AIF-C01 Domain 5: Security, Compliance, and Governance for AI Solutions

Which service should you use to encrypt model artifacts and training data at rest?

Multiple choice — select one answer

Answer choices

  1. a. AWS CloudTrail
  2. b. Amazon SageMaker in VPC mode
  3. c. AWS KMS with Amazon S3 and SageMaker
  4. d. IAM policies for bedrock:InvokeModel

Architectural breakdown & explanation

KMS manages keys for encryption across AI data stores.

Correct answer(s): c. AWS KMS with Amazon S3 and SageMaker

Exam domain: Domain 5: Security, Compliance, and Governance for AI Solutions (14% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified AI Practitioner bank. Run a full timed practice exam with domain-weighted random questions in your browser.