Lesson 12 Quiz — Security & Governance for AI Solutions (10 easy + 10 hard)

Which service automatically discovers and classifies sensitive data (like PII) in S3?

Which service lets you access AWS services privately from your VPC without traversing the public internet?

Under the shared responsibility model, who secures the underlying cloud infrastructure?

Which service logs API calls and account activity across AWS services?

Which service tracks and evaluates AWS resource configurations against desired rules over time?

Which service continuously collects evidence for audits against a chosen compliance framework?

Which service gives on-demand access to AWS's own compliance reports (e.g. SOC reports)?

Which service provides automated vulnerability scanning for workloads?

Which manages identity and access specifically for AI agents?

Which technique reduces hallucination risk by anchoring answers in real retrieved documents?

A security team needs a single place to answer 'who called this API and when' during an incident investigation. Best fit?

Which of these are data governance dimensions named in this lesson?

An AWS framework that classifies a GenAI workload's risk/responsibility scope based on how much of the stack you control is called:

Order these by primary purpose, from 'find vulnerabilities' to 'get AWS's own compliance paperwork'.

Match each service to its one-line purpose.

A team wants low-confidence GenAI outputs automatically flagged before reaching users. Which concept from this lesson directly supports that?

A healthcare company must keep patient data from ever leaving a specific legal jurisdiction. Which governance dimension does this fall under?

Which of these are GenAI-specific security/privacy considerations named in this lesson?

Under the shared responsibility model, which of these is the CUSTOMER's responsibility, not AWS's?

A company wants automated, ongoing evidence collection to prepare for a SOC 2 audit with minimal manual effort. Best fit?