5.1Standard
An inference service uses many SDKs and open-source packages.
Apply vulnerability fixes safely.
Choose two practices.
× Incorrect
Track versions and vulnerabilities in an SBOM and owner inventory, test updates, and stage them after quality, safety, and compatibility checks.
Detailed explanation
CorrectTest updates and stage them after model quality, safety, and compatibility checks
Patch regressions are managed.
CorrectTrack dependency versions and vulnerabilities in an SBOM and owner inventory
Affected components can be identified.
IncorrectApply updates directly to production without evaluation
Quality and safety regressions may be missed.
IncorrectDo not record dependency versions
Impact and remediation cannot be explained.
Check official documentation
Compare the following points with the official documentation.
AWS公式AIF-C01 Domain 5.1のソフトウェアサプライチェーン、脆弱性、変更管理を確認する。
Official references
What to confirm
依存ライブラリの脆弱性修正とモデル品質の回帰を両立できる。
Key points
- SBOM
- Vulnerability
- Staged update
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Compare the definition with the AIF-C01 objective and the service documentation before applying it.
- Keep the concept separate from a particular answer choice or implementation step.
Foundation review
SBOM
A software bill of materials listing components, versions, and dependencies.
Dependency patch
An update that applies a security or correctness fix to a required library or SDK.
Question IDAWS-AIF-387
EnvironmentAWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
Last technical review2026-08-20
Report an error or rights issue