Using a private inference path | AWS Certified AI Practitioner (AIF-C01) original practice question

5.2Standard

A VPC application calls an AI service.

Avoid the public internet.

Choose two designs.

Hint 1: Focus on the requirement

Identify what must change and what must remain unchanged. Then choose the command whose scope matches that requirement.

Hint 2: Check each command's role

Separate commands that display information, change state, remove data, or affect a child process.

VPCエンドポイント・ルート・DNS・セキュリティグループ・エンドポイントポリシーを設定する: Reachability is constrained.
TLS・IAM・ログ・出口制御・名前解決の失敗をテストする: Isolation is not the only control.
プライベート経路ならIAMと暗号化は不要である: Network isolation does not authenticate.
全サブネット・全サービスからエンドポイントへ接続を許可する: Reach is too broad.

Detailed explanation

CorrectConfigure endpoint, route, DNS, security group, and endpoint policy

Reachability is constrained.

CorrectTest TLS, IAM, logging, name resolution, and egress control

Isolation is not the only control.

IncorrectPrivate routing removes the need for IAM and encryption

Network isolation does not authenticate.

IncorrectAllow every subnet and service to use the endpoint

Reach is too broad.

An example you can run in a temporary verification environment.

AWS公式AIF-C01 Domain 5.2のVPCエンドポイント、IAM、TLS、ネットワーク制御を確認する。

ネットワーク隔離と認証・暗号化・出口制御を重ねて設計できる。

Foundation review

Check whether the command acts on the current shell, a new process, an existing process, or a file.

Use the supplied command and compare the output with the expected result.

Question IDAWS-AIF-516

EnvironmentAWS公式AIF-C01試験ガイドとAWS公式ドキュメントの確認

Last technical review2026-08-20