Designing audit-log retention | AWS Certified AI Practitioner (AIF-C01) original practice question

5.2Standard

Audit AI use and administrator actions.

Keep evidence while reducing personal-data and cost risk.

Choose two appropriate practices.

Hint 1: Focus on the requirement

Identify what must change and what must remain unchanged. Then choose the command whose scope matches that requirement.

Hint 2: Check each command's role

Separate commands that display information, change state, remove data, or affect a child process.

目的・法令・事故対応に必要なログ項目と保持期間を定義する: Logs need not be kept forever without purpose.
ログへのアクセス、改変防止、暗号化、マスキングを設定する: Evidence and privacy can be managed together.
プロンプトと出力を無制限に公開ログへ保存する: Sensitive information could leak.
保持期間を決めず、事故後にログを探す: Evidence may already be missing or changed.

Detailed explanation

CorrectDefine required log fields and retention for audit and incident response

Logs need not be kept forever without purpose.

CorrectControl access and protect integrity, encrypt, and mask sensitive logs

Evidence and privacy can be managed together.

IncorrectStore prompts and outputs in unrestricted public logs

Sensitive information could leak.

IncorrectChoose no retention period and search after an incident

Evidence may already be missing or changed.

An example you can run in a temporary verification environment.

AWS公式CloudTrail・CloudWatch Logs・AIF-C01 Domain 5.2の監査と保持を確認する。

AIログの証拠性、最小化、保持、アクセス保護を説明できる。

Foundation review

Check whether the command acts on the current shell, a new process, an existing process, or a file.

Use the supplied command and compare the output with the expected result.

Question IDAWS-AIF-150

EnvironmentAWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認

Last technical review2026-08-20