5.2Standard
A model may have returned personal information.
Determine internal, provider, and customer notification.
Choose two first actions.
× Incorrect
Identify impact, regions, users, legal and contract deadlines, escalate to owners, preserve evidence, and contain access or secrets.
Detailed explanation
IncorrectSend a definitive message before facts are known
Incorrect information can cause more harm.
IncorrectAssume a provider incident removes customer notification responsibility
Contract and law still require review.
CorrectIdentify affected data, regions, users, and legal or contractual deadlines and escalate
Facts and notification timing are organized.
CorrectPreserve evidence and contain with access suspension, secret revocation, or model hold
Expansion is limited while notification is prepared.
Check official documentation
Compare the following points with the official documentation.
AWS公式AIF-C01 Domain 5.2のインシデント、通知、第三者リスクを確認する。
Official references
What to confirm
通知判断と被害封じ込めを、事実・期限・責任分界に基づいて進められる。
Key points
- Impact
- Deadline
- Containment
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Compare the definition with the AIF-C01 objective and the service documentation before applying it.
- Keep the concept separate from a particular answer choice or implementation step.
Foundation review
Incident notification
A process for deciding what to communicate about an incident, to whom, and by when.
Impact assessment
Determining affected data, people, systems, regions, and possible harm.
Question IDAWS-AIF-290
EnvironmentAWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
Last technical review2026-08-20
Report an error or rights issue