5.1Basic
Protect AI inputs, logs, and artifacts.
Address storage and communication threats separately.
Choose two correct statements.
× Incorrect
At-rest encryption protects stored data and in-transit encryption protects network paths; both still require key management, authorization, and auditing.
Detailed explanation
IncorrectTLS alone protects stored data
Storage and transport are different locations.
IncorrectEncryption eliminates access control and key governance
Key users and permissions still need control.
CorrectAt-rest encryption protects data stored in disks, objects, or databases
It addresses storage access.
CorrectIn-transit encryption reduces eavesdropping and tampering on network paths
It protects service-to-service communication.
Check official documentation
Compare the following points with the official documentation.
AWS公式AIF-C01 Domain 5.1の保存時・転送時暗号化、KMS、IAMを確認する。
Official references
What to confirm
暗号化の対象と、鍵・認可・監査が別に必要な理由を説明できる。
Key points
- At rest
- In transit
- Key management
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Compare the definition with the AIF-C01 objective and the service documentation before applying it.
- Keep the concept separate from a particular answer choice or implementation step.
Foundation review
Encryption at rest
Protecting data stored in a disk, object store, database, or other persistent medium.
Encryption in transit
Protecting data while it travels between clients, services, or networks.
Question IDAWS-AIF-264
EnvironmentAWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
Last technical review2026-08-20
Report an error or rights issue