Using private inference paths | AWS Certified AI Practitioner (AIF-C01) original practice question

5.1Standard

A VPC application calls an AI service.

Avoid the public internet.

Choose two designs.

Hint 1: Focus on the requirement

Identify what must change and what must remain unchanged. Then choose the command whose scope matches that requirement.

Hint 2: Check each command's role

Separate commands that display information, change state, remove data, or affect a child process.

対応するVPCエンドポイント、ルート、DNS、セキュリティグループを設定する: Connectivity is restricted.
エンドポイントポリシー、IAM、TLS、ネットワークログ、出口制御を確認する: Network and authorization controls work together.
VPC内なら全サブネットと全サービスから接続を許可する: Reachability is unnecessarily broad.
閉域化したのでIAMや暗号化を省略する: Network isolation is not sufficient.

Detailed explanation

CorrectConfigure endpoint, routes, DNS, and security groups for the required path

Connectivity is restricted.

CorrectReview endpoint policy, IAM, TLS, network logs, and egress control

Network and authorization controls work together.

IncorrectAllow every VPC subnet and service to connect

Reachability is unnecessarily broad.

IncorrectPrivate networking removes the need for IAM and encryption

Network isolation is not sufficient.

An example you can run in a temporary verification environment.

AWS公式AIF-C01 Domain 5.1のVPCエンドポイント、IAM、AI通信保護を確認する。

AIサービスへの通信経路と権限を閉域・最小範囲へ制限できる。

Foundation review

Check whether the command acts on the current shell, a new process, an existing process, or a file.

Use the supplied command and compare the output with the expected result.

Question IDAWS-AIF-406

EnvironmentAWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認

Last technical review2026-08-20