Securing AI logs | AWS Certified AI Practitioner (AIF-C01) original practice question

5.2Standard

Prompts and outputs are logged for troubleshooting.

Protect sensitive data while retaining auditability.

Choose two designs.

Hint 1: Focus on the requirement

Identify what must change and what must remain unchanged. Then choose the command whose scope matches that requirement.

Hint 2: Check each command's role

Separate commands that display information, change state, remove data, or affect a child process.

Detailed explanation

CorrectMask unnecessary personal or secret values and restrict log access

Exposure is reduced.

CorrectUse tamper detection, retention and deletion, audit access, and correlation IDs

Investigation remains trustworthy.

IncorrectStore every secret and token in plaintext for debugging

Breach impact grows.

IncorrectDo not log access to logs

Misuse cannot be traced.

An example you can run in a temporary verification environment.

AWS公式AIF-C01 Domain 5.2のログ、個人情報、最小権限、監査を確認する。

調査可能なログを残しながら、秘密情報と個人情報の露出を抑えられる。

Foundation review

Check whether the command acts on the current shell, a new process, an existing process, or a file.

Use the supplied command and compare the output with the expected result.

Question IDAWS-AIF-448

EnvironmentAWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認

Last technical review2026-08-20