5.1Standard
A VPC application calls an AI service.
Avoid the public internet.
Choose two designs.
× Incorrect
Configure the VPC endpoint, routes, DNS, and security groups, then review endpoint policy, IAM, TLS, logs, and egress control.
Detailed explanation
CorrectReview endpoint policy, IAM, TLS, network logs, and egress control
Network and authorization controls work together.
CorrectConfigure endpoint, routes, DNS, and security groups for the required path
Connectivity is restricted.
IncorrectPrivate networking removes the need for IAM and encryption
Network isolation is not sufficient.
IncorrectAllow every VPC subnet and service to connect
Reachability is unnecessarily broad.
Check official documentation
Compare the following points with the official documentation.
AWS公式AIF-C01 Domain 5.1のVPCエンドポイント、IAM、AI通信保護を確認する。
Official references
What to confirm
AIサービスへの通信経路と権限を閉域・最小範囲へ制限できる。
Key points
- VPC endpoint
- Private path
- Route
Notes
- Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
- Compare the definition with the AIF-C01 objective and the service documentation before applying it.
- Keep the concept separate from a particular answer choice or implementation step.
Foundation review
VPC endpoint
A private entry point that connects a VPC to a supported AWS service.
Private connectivity
A network path that avoids public exposure while reaching a service.
Question IDAWS-AIF-406
EnvironmentAWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認
Last technical review2026-08-20
Report an error or rights issue