Checking the model supply chain | AWS Certified AI Practitioner (AIF-C01) original practice question

5.3Standard

An external model and packages will enter production.

Reduce tampering and vulnerability risk.

Choose two checks.

Hint 1: Focus on the requirement

Identify what must change and what must remain unchanged. Then choose the command whose scope matches that requirement.

Hint 2: Check each command's role

Separate commands that display information, change state, remove data, or affect a child process.

提供元、ハッシュ・署名、版、ライセンス、依存関係、公開日を検証する: Origin and integrity are traceable.
隔離環境で脆弱性・悪性挙動・権限・入力処理を評価し、承認済みアーティファクトだけを配布する: Production contamination is controlled.
人気のあるモデルなら署名やライセンスを確認しなくてよい: Supply risk remains.
モデルファイルはコードを実行しないので隔離評価は不要である: Loading and dependencies can have behavior.

Detailed explanation

CorrectVerify provider, hash or signature, version, license, and dependencies

Origin and integrity are traceable.

CorrectAssess vulnerabilities, behavior, privileges, and input handling in isolation

Production contamination is controlled.

IncorrectPopular models need no signature or license review

Supply risk remains.

IncorrectModel files cannot trigger processing, so isolation is unnecessary

Loading and dependencies can have behavior.

An example you can run in a temporary verification environment.

AWS公式AIF-C01 Domain 5.3のモデル供給網、依存関係、セキュリティを確認する。

外部モデルを信頼だけで導入せず、出所・完全性・ライセンス・挙動を検証できる。

Foundation review

Check whether the command acts on the current shell, a new process, an existing process, or a file.

Use the supplied command and compare the output with the expected result.

Question IDAWS-AIF-450

EnvironmentAWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認

Last technical review2026-08-20