Home / AWS Certified AI Practitioner (AIF-C01) / 5 Practice / AWS-AIF-497
A public API receives automated bursts.
Limit abuse while preserving legitimate use.
Choose two controls.
Hint 1: Focus on the requirement Limit traffic by principal and tenant, detect abnormal cost or volume, and combine enforcement with review and explanation.
Hint 2: Key terms Review AI API abuse controls.
Rate limitingRestricting request volume within a time window for a defined scope.
Abuse detectionFinding usage patterns that violate policy or indicate misuse.
QuotaAn allocated maximum for requests, tokens, or another resource.
Progressive enforcementIncreasing restrictions based on repeated or severe policy violations. × Incorrect Use identity, IP, key, and tenant rate limits, quotas, authentication, anomaly monitoring, and review or appeal for false blocks.
Detailed explanation A Incorrect Permanently block users without reason or appeal
False positives and fairness issues result.
B Correct Monitor spikes and costly operations and route alerts to blocking or human review
Misuse becomes visible.
C Incorrect Allow unlimited requests for every user
Cost and availability suffer.
D Correct Set authentication, rate limits, quotas, and progressive action by user, IP, key, and tenant
Excess use is controlled.
Check official documentation Compare the following points with the official documentation.
AWS公式AIF-C01 Domain 5.2・4.2のAPI保護、クォータ、濫用監視を確認する。
Official references Official documentation 1 Official documentation 2 What to confirm 濫用防止と正当利用の救済を両立する制限を設計できる。
Key points Notes Environment: AWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認 Compare the definition with the AIF-C01 objective and the service documentation before applying it. Keep the concept separate from a particular answer choice or implementation step. Foundation review Rate limiting Restricting request volume within a time window for a defined scope.
Abuse detection Finding usage patterns that violate policy or indicate misuse.
Path & Pass is an independent learning site and is not affiliated with any certification body. Questions are original practice content based on published objectives.